cannot access cal through uwc
Greetings,
I am setting up a new install of UWC, with an already functioning mail and calendar.
After configuring uwc, the calendar tab does not appear. If I set cal=1 in the URL, it appears, and clicking it gives the message "The application is not configured properly. Contact your administator. ". Here are the logs:
Cal http.log:
[10/Jul/2006:11:34:39 -0400] hermes cshttpd[29690]: Account Error: badlogin: ugldap server unavailable or rfox@domain.edu user attributes not found
[10/Jul/2006:11:34:39 -0400] hermes cshttpd[29690]: Account Notice: badlogin: rfox@domain.edu not allowed proxy HTTP access
UWC uwc.log:
SEVERE: calsession not created calstore connect has failed
Jul 10, 2006 11:34:39 AM com.sun.uwc.calclient.CalModuleServlet onInitializeHandler
SEVERE: Error[onBeforeRequest:getCalStore] [Error:getCalStore] - Could not create store
...
SEVERE: UWCMainViewBean:forwardToURL(forwardtodefview) - null
Jul 10, 2006 11:34:39 AM com.sun.uwc.common.model.UserPreferencesModel getValue
And config files:
uwcconfig.conf
!Calendar Related Configuration Parameters
!'true' if calendar is deployed in Communications Express
calendar.deployed = true
!Calendar HTTP Server hostname
calendar.wcap.host = calendar.domain.edu
!Calendar HTTP Server port number
calendar.wcap.port = 80
!Calendar HTTP Server admin ID
calendar.wcap.adminid = editted
!Calendar HTTP Server admin password
calendar.wcap.passwd = editted
!Name of Class implementing Java API for Calendar (JCAPI) for Sun ONE Calendar Server. Donot Change this value
calendar.jcapi.serviceclass.socs = com.sun.comclient.calendar.socs.SOCSCalendarStore
I've tripled checked that the calendar.wcap.adminid and passwd work with calendar proxyauth, so those settings should be ok. Any thoughts are welcome.
Ryan
[1953 byte] By [
djlarsu] at [2007-11-26 8:35:20]
# 1
Hi,
Can you check for these parameters in ics.conf(/opt/SUNWics5/cal/config) :
> service.virtualdomain.support = "n"
> sasl.default.ldap.domainmap = "n"
> sasl.default.ldap.searchfordomain = "n"
> service.http.ui.enable = "y"
> service.http.allowadminproxy = "yes"
> store.admins = "calmaster" (JES5 setup requires this)
Restart CS after any changes made to these parameters.All of the above are for non-hosted doamin setup.Is it a hosted domain or Non-hosted doamin setup that you are using?
thanks
Ramya
# 2
Thanks for your reply. I am on a non-hosted domain setup. Those settings are all set in my ics.conf, except for the sasl ones.
I only have one calendar install right now, and it is production, so I want to be sure I don't break it. :)
Are you sure the sasl settings are for calendar? Searching docs.sun.com only shows references to them in the mail config.
Thanks,
Ryan
# 3
Actually in between there were some changes made on the CS side because of which user needed to manually revert these settings.This has been removed in the recent versions of Calendar server.So if any of the sasl settings are incorrect in your configuration pls set them as I already mentioned.If you don't have these parameters,then don't add them.It should work fine without those parameters.
thanks
Ramya
# 4
Hey, did you ever resolve the problem and if so what was the solution? I am encountering the same problem with Calendar server not showing up in UWC.
I have JES 2005Q4 installed (all components) and patched. I can login to Calendar Express without any problems. I also have setup the Calendar Express channel for Portal Server and it shows up there properly. However, if I login to UWC and click on the Calendar tab, I get the following error:
--
The application is not configured properly. Contact your administator.
-
When I look at the uwc.log file, the following error is logged:
SEVERE: calsession not created calstore connect has failed
Jul 18, 2006 4:52:39 PM com.sun.uwc.calclient.CalModuleServlet onInitializeHandler
SEVERE: Error[onBeforeRequest:getCalStore] [Error:getCalStore] - Could not create store
Jul 18, 2006 4:52:39 PM com.sun.uwc.common.model.UserPreferencesModel getValue
FINE: Info not in cache, so returning from session
-
The calendar server cshttpd log (http.log) also shows the following error:
-
[18/Jul/2006:17:04:03 -0700] orion cshttpd[2679]: Account Error: badlogin: ugldap server unavailable or Administrator@mytechnique.net user attributes not found
[18/Jul/2006:17:04:03 -0700] orion cshttpd[2679]: Account Notice: badlogin: Administrator@mytechnique.net not allowed proxy HTTP access
I have gone over the setup instructions detailed in the Communications Services Deployment Sample doc but still the problem eludes me. I suspected that the allowadminproxy setting could have been the culprit but after reviewing the settings in uwcauth.properties, uwcconfig.properties, uwclogging.properties, ics.conf, Access Manager and Delegated admin, I can't see what the matter is.
Since I can login to Calendar Express and also display the Communications Express Calendar within the Portal Desktop, I think the problem lies with single-sign-on settings between UWC and Calendar server. Would appreciate any help or pointers.
thanks,
Drew
PS: The Mail, Addressbook and Options tabs of UWC work fine.
# 5
It is not yet resolved. Your error messages match mine exactly. I have a open support case logged with Sun, so if anything insightful comes of it, I'll relay it along.
# 6
Did you solve this issue? a shed?
# 7
Hi,
What have you got set for the following?
** ics.conf **
service.http.allowadminproxy
service.http.admins
service.admin.calmaster.userid
service.wcap.anonymous.allowpubliccalendarwrite
service.http.allowanonymouslogin
service.calendarsearch.ldap
Also, are you able to login as "Administrator@mytechnique.net" to calexpress (making sure to include the @mytechnique.net)?
What does the directory access logs show when you attempt to connect to calendar? Based on the ugldap error, there is something that calendar is receiving from the directory which it doesn't like.
Cheers,
Shane.
# 8
I ever found this problem after I re-install UWC, then I must reconfig all after that, reconfig about SSO and service.My Problem is UWC config, something miss, please check such as password or any parameter.Good Luck
# 9
Hi Shane
yes I am able to login to Calendar Express as Administrator@mytechnique.net. Actually after you mentioned this, I logged in to Calendar Express as Administrator@mytechnique.net and then right after that, I logged in to UWC also as Administrator@mytechnique.net and when I clicked on the Calendar tab, it showed up just fine!! I suppose UWC is using the session created by calexpress. However, if I close my browser and restart Calendar Server then try to login to UWC directly without first logging into calexpress, then the error mentioned above occurs again.
Here are the values in my ics.conf file [virtual domain enabled]
service.http.allowadminproxy = "yes"
service.http.admins="Administrator@mytechnique.net"
service.admin.calmaster.userid="calmaster@mytechnique.net"
service.wcap.anonymous.allowpubliccalendarwrite= "yes"
service.http.allowanonymouslogin="yes"
service.calendarsearch.ldap="no"
service.wcap.allowpublicwritablecalendars = "yes"
service.schema2root = "o=mytechnique.net"
service.virtualdomain.support = "y"
service.defaultdomain = "mytechnique.net
service.siteadmin.userid = "Administrator@mytechnique.net"
service.siteadmin.cred = "adminpass"
local.calendar.sso.amcookiename = "iPlanetDirectoryPro"
local.calendar.sso.amnamingurl = "http://jes.mytechnique.net:8080/amserver/namingservice"
I also cranked up the loglevel on the cshttpd to Debug level and the following error appears when the Calendar tab in UWC is clicked:
[19/Jul/2006:16:16:01 -0700] jes cshttpd[5256]: Account Information: select [192.168.0.153] [unauthenticated] [null]
[19/Jul/2006:16:16:01 -0700] jes cshttpd[5256]: General Debug: WCAP: version command called.
[19/Jul/2006:16:16:01 -0700] jes cshttpd[5256]: General Debug:argv[0] = fmt-out=text/xml
[19/Jul/2006:16:16:01 -0700] jes cshttpd[5256]: General Debug: WCAP: login command called.
[19/Jul/2006:16:16:01 -0700] jes cshttpd[5256]: General Debug:argv[0] = user=calmaster
[19/Jul/2006:16:16:01 -0700] jes cshttpd[5256]: General Debug:argv[1] = password=*****
[19/Jul/2006:16:16:01 -0700] jes cshttpd[5256]: General Debug:argv[2] = proxyauth=Administrator@mytechnique.net
[19/Jul/2006:16:16:01 -0700] jes cshttpd[5256]: General Debug:argv[3] = applyauthfilter=0
[19/Jul/2006:16:16:01 -0700] jes cshttpd[5256]: General Debug:argv[4] = fmt-out=text/xml
[19/Jul/2006:16:16:01 -0700] jes cshttpd[5256]: Account Notice: badlogin: [192.168.0.153] proxy calmaster Invalid login
So taking a que from this, I double checked the calmaster password to make sure it was correct then since the script is basically calling login.wcap I manually entered the URL of the following nature into a browser window, this time changing the 'user' value from 'calmaster' to 'calmaster@mytechnique.com'
http://jes.mytechnique.net:180/login.wcap?proxyauth=Administrator@mytechnique.net&user=calmaster@mytechnique.net&password=adminpass&fmt-out=text/xml
This generated a slightly different error of the form:
[19/Jul/2006:16:11:40 -0700] jes cshttpd[5257]: Account Information: select [192.168.0.10] [unauthenticated] [null]
[19/Jul/2006:16:11:40 -0700] jes cshttpd[5257]: General Debug: WCAP: login command called.
[19/Jul/2006:16:11:40 -0700] jes cshttpd[5257]: General Debug:argv[0] = proxyauth=Administrator@mytechnique.net
[19/Jul/2006:16:11:40 -0700] jes cshttpd[5257]: General Debug:argv[1] = user=calmaster@mytechnique.net
[19/Jul/2006:16:11:40 -0700] jes cshttpd[5257]: General Debug:argv[2] = password=*****
[19/Jul/2006:16:11:40 -0700] jes cshttpd[5257]: General Debug:argv[3] = fmt-out=text/xml
[19/Jul/2006:16:11:40 -0700] jes cshttpd[5257]: Account Notice: badlogin: [192.168.0.10] proxy calmaster@mytechnique.net User unknown
I tried the URL a couple times using different values for the parameters but none worked. I'm gonna take a look at the Directory Server logs and see if I can gleem anything from there as well as see if something in Delegated Administrator might be preventing the calmaster account from authenticating.
thanks,
Drew
# 10
Hi Drew,
You may need to create a 'calmaster' account under o=mytechnique.net. What you will probably find is that when service.admin.calmaster.userid="calmaster", it is actually appending the default domain and attempting to authenticate as "calmaster@mytechnique.net" anyway. The directory logs will tell you exactly what calendar is looking for and you may need to tweak account settings to match.
Cheers,
Shane.
# 11
In ics.conf, you must set store.admins="calmaster@india.sun.com"service.dcroot = "o=mytechnique.net"ThanksRamya
# 12
Thanks for the hints guys, asking the right questions definitely helps.
In the end, it turned out to be a ldap base dn mis-configuration. I had the following values in ics.conf
local.authldapbasedn = "o=mytechnique.net,dc=mytechnique,dc=net"
local.ugldapbasedn = "o=mytechnique.net,dc=mytechnique,dc=net"
service.dcroot = "o=mytechnique.net,dc=mytechnique,dc=net"
service.schema2root = "o=mytechnique.net,dc=mytechnique,dc=net"
instead of
local.authldapbasedn = "dc=mytechnique,dc=net"
local.ugldapbasedn = "dc=mytechnique,dc=net"
service.dcroot = "dc=mytechnique,dc=net"
service.schema2root = "dc=mytechnique,dc=net"
i.e the 'o=mytechnique.net' portion should not have been there.
in my case the, service.dcroot property is really not necessary since I am using schema 2 so what really matters is the service.schema2root property.
Anyhow, the Calendar portion of UWC works fine now.
thanks,
--Drew
# 13
Upon review of our domain via commadmin domain search... i found that icsstatus was set to inactive.So I issued the following:
./commadmin domain modify -D admin -w password -n domain.tld -d domain.tld -A icsstatus:active
And now calendar appears. Hope this helps someone.
Ryan
# 14
I have tried it. Didn't worked for me :/ Tnx
