Sun Java System Instant Messaging - Communications Server 5 - IM failed login

i followed the single host deployment example:

http://docs.sun.com/source/820-0086/

but when i try to run im - i get rejected - from the im log:

[29 Mar 2007 19:20:08,457] WARN xmppd [org.netbeans.lib.collab.util.Worker 3] Attention! The organization o=portal is not associated with any domain name. This will cause security issues in multi-domain deployments. Please set a domain name for this organization, using the Identity Server Administration Console.

[29 Mar 2007 19:20:08,457] INFO xmppd [org.netbeans.lib.collab.util.Worker 3] domain returned : portal.autohandle.com for searchbase being ignored since it is not the configured domain for : autohandle.com

[29 Mar 2007 19:20:08,499] INFO xmppd [org.netbeans.lib.collab.util.Worker 2] Authenticating using Identity Server SSO

[29 Mar 2007 19:20:08,822] INFO xmppd [org.netbeans.lib.collab.util.Worker 2] [Identity] Failed to create SSO token for david

[29 Mar 2007 19:20:08,824] INFO xmppd [org.netbeans.lib.collab.util.Worker 2] [Sasl] exception processing request

com.sun.im.service.AuthenticationException: auth failed

at com.iplanet.im.server.sasl.PlainSASLProvider.getProperties(PlainSASLProvider.java:133)

at com.iplanet.im.server.SaslHandler.processSASL(SaslHandler.java:279)

at com.iplanet.im.server.SaslHandler.process(SaslHandler.java:37)

at com.iplanet.im.server.ClientPacketDispatcher.handle(ClientPacketDispatcher.java:377)

at com.iplanet.im.server.ClientSession.packetTransferred(ClientSession.java:434)

at net.outer_planes.jso.AbstractStream.firePacketTransferredEvent(AbstractStream.java:674)

at net.outer_planes.jso.AbstractStream$1.addExtendedData(AbstractStream.java:115)

at net.outer_planes.jso.AbstractStream$Input.process(AbstractStream.java:198)

at net.outer_planes.jso.AbstractStream.process(AbstractStream.java:1160)

at com.iplanet.im.server.ClientSession.process(ClientSession.java:650)

at com.iplanet.im.server.ClientSession.run(ClientSession.java:631)

at org.netbeans.lib.collab.util.Worker.run(Worker.java:208)

at java.lang.Thread.run(Thread.java:595)

[29 Mar 2007 19:20:20,892] INFO xmppd [Thread-20] [NioSelectAcceptor][0.0.0.0:5269] accepted /127.0.0.1

i did the delegated adminstrator psrt to assign services to each user - but, i don't what to try next to determine why the identiy server is rejecting me.

[2445 byte] By [autohanda] at [2007-11-26 23:26:44]
# 1

Hi,

This exact issue is documented in the single-host deployment guide - I hit the same issue when installing the software myself:

"Note : If you cannot log into Instant Messaging as a user, you might need to manually add the Instant Messaging and Presence Services to the user. See To Add Services to the Lower Level Organization for more information. "

Make sure you go through all the steps in that section again and double check that you have made the changes in access manager correctly.

Regards,

Shane.

shane_hjortha at 2007-7-10 14:34:55 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...
# 2

of course, it is possible i messed that part up - but i can:

o login to the amconsole

o click on my organization

o select users from the view pulldown

o click on the property arrow for my name

o select services from the view pulldown for my name

and the right panel shows:

o authentication configuration

o instant messaging service

o presence service

is there another check i can make for something i overlooked?

autohanda at 2007-7-10 14:34:55 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...
# 3

Hi,

I can't stress this enough.. you need to go through ALL the steps especially the following:

<snip>

7. Click the properties icon next to Core, just below Authentication Modules.

You need to select the ldap1 service for both Administrator Authentication Configuration and Organization Authentication Configuration.

8. Click Save.

</snip>

This will then use LDAP for authentication - which is what you need. Just having the services themselves is not enough.

Regards,

Shane.

shane_hjortha at 2007-7-10 14:34:55 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...
# 4

thanks for helping me through this - i can:

o login to amconsole

o select my organization

o select services from view pulldown

o click on the core property arrow

and i can see ldap1 selected for both:

o administrator authenication configuration

o organization authentication configuration

now if i slide up and click on the property arrow for authentication configuration - the right panel shows ldap1. if i click on ldap1 - i get an empty ldap1 properties panel - if i click on edit in the properties panel - a new window opens with:

module: ldap

enforcement: required

maybe i just need to restart something - so this can be seen?

autohanda at 2007-7-10 14:34:55 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...
# 5
i just restarted everything and it cleared up - thanks.
autohanda at 2007-7-10 14:34:55 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...
# 6

Making organization level changes to access manager are not always reflected - and usually, requires a restart of access manager.

The updates will be reflected in the admin console, but not to other applications leveraging access manager through the api.

This was the reason you had to unfortunately restart.

Regards,

Mridul

MridulMa at 2007-7-10 14:34:55 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...