Custom Service Package and Service For This User Exceeds Allocation Maximum

I am running JCS 5 on Solaris 10 Update 3 SPARC.

All components are installed on one host - DSEE, Msg Srvr, Access Manager, etc

I created a custom Delegated Administrator service package with something like this:

dn: cn=prescott2,o=mailcalendaruser,o=cosTemplates,o=gov

changetype: add

objectclass: top

objectclass: LDAPsubentry

objectclass: extensibleobject

objectclass: cosTemplate

cn: prescott2

mailMsgMaxBlocks: 10240

mailquota: 100M

mailmsgquota: -1

mailAllowedServiceAccess: +pop:ALL$+imap:ALL$+smtp:ALL$+http:ALL

daServiceType: calendar user

daServiceType: mail user

I ran ldapmodify per the docs:

cd /opt/SUNWcomm/lib/config-templates

ldapmodify -D cn=Directory Manager -w password -f foobar.ldif

I restarted my web container (Java Web Server 7.x) and I can see the custom service package in DA.

After adding the package to my organization in DA without a hitch I get the following each time I try to assign the package to a user account:

Service For This User Exceeds Allocation Maximum

I have 100 packages of this type allocated to my organization and zero are in use.

I loaded the sample class of service templates during DA installation and if I add one of these to the organization and then to the same uid it works like a charm.

Looking at the LDAP entry for the one that works (earth) and my entry I cannot see a meaningful difference:

dn: cn=earth,o=mailcalendaruser,o=cosTemplates,<ugldapbasedn>

changetype: add

objectclass: top

objectclass: LDAPsubentry

objectclass: extensibleobject

objectclass: cosTemplate

cn: earth

mailMsgMaxBlocks: 300

mailquota: 6291456

mailmsgquota: 2000

mailAllowedServiceAccess: +pop:ALL$+imap:ALL$+smtp:ALL$+http:ALL

daServiceType: calendar user

daServiceType: mail user

There has to be some sort of a fundamental difference between how the samples are loaded/handled and how my custom file was loaded/handled. Like a step is missing of something.

Logging for the DA server does not show anything obviously wrong, same for DSEE, web server, etc:

Jun 11, 2007 4:41:37 PM com.sun.comm.da.model.UserModel update

SEVERE: Error during user update: service for this user is not available or exceeds allocation maximum.

com.sun.comm.jdapi.DAException: service for this user is not available or exceeds allocation maximum.

at com.sun.comm.jdapi.DATask.doTask(DATask.java:354)

at com.sun.comm.jdapi.DABusinessOrganization.modifyUser(DABusinessOrganization.jav a:169)

at com.sun.comm.da.model.UserModel.update(UserModel.java:927)

at com.sun.comm.da.view.UserPackagesPage2ViewBean.modifyUser(UserPackagesPage2View Bean.java:472)

at com.sun.comm.da.view.UserPackagesPage2ViewBean.saveStep(UserPackagesPage2ViewBe an.java:414)

at com.sun.comm.da.view.user.servicepackages.UserSpWizardImplementation.validate(U serSpWizardImplementation.java:366)

at com.sun.comm.da.view.user.servicepackages.UserSpWizardImplementation.finishStep (UserSpWizardImplementation.java:561)

at com.sun.web.ui.model.CCWizardModel.finishRequest(CCWizardModel.java:452)

at com.sun.web.ui.view.wizard.CCWizard.handleFinishButtonRequest(CCWizard.java:780 )

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.ja va:25)

at java.lang.reflect.Method.invoke(Method.java:585)

at com.iplanet.jato.view.command.DefaultRequestHandlingCommand.execute(DefaultRequ estHandlingCommand.java:183)

at com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingView Base.java:308)

at com.iplanet.jato.view.ViewBeanBase.dispatchInvocation(ViewBeanBase.java:802)

at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.ja va:740)

at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.ja va:760)

at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandler(ViewBeanBase.java:571)

at com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase. java:957)

at com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.j ava:615)

at com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:816)

at com.sun.comm.da.WizardWinServlet.service(WizardWinServlet.java:111)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:917)

at org.apache.catalina.core.ApplicationFilterChain.servletService(ApplicationFilte rChain.java:391)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFil terChain.java:297)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain .java:178)

at com.sun.comm.da.LoginFilter.doFilter(LoginFilter.java:128)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFil terChain.java:210)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain .java:178)

at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java: 270)

at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextVal ve.java:241)

at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java: 182)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:571)

at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:160)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:571)

at com.sun.webserver.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:14 9)

at com.sun.webserver.connector.nsapi.NSAPIConnector.service(NSAPIConnector.java:99 5)

Jun 11, 2007 4:41:37 PM com.sun.comm.da.model.UserModel update

SEVERE: [PL] DA error - code: 5005

Jun 11, 2007 4:41:37 PM com.sun.comm.da.view.UserPackagesPage2ViewBean modifyUser

SEVERE: null

com.sun.comm.da.common.DAGUIException: users.user.updateerror

at com.sun.comm.da.model.UserModel.update(UserModel.java:978)

at com.sun.comm.da.view.UserPackagesPage2ViewBean.modifyUser(UserPackagesPage2View Bean.java:472)

at com.sun.comm.da.view.UserPackagesPage2ViewBean.saveStep(UserPackagesPage2ViewBe an.java:414)

at com.sun.comm.da.view.user.servicepackages.UserSpWizardImplementation.validate(U serSpWizardImplementation.java:366)

at com.sun.comm.da.view.user.servicepackages.UserSpWizardImplementation.finishStep (UserSpWizardImplementation.java:561)

at com.sun.web.ui.model.CCWizardModel.finishRequest(CCWizardModel.java:452)

at com.sun.web.ui.view.wizard.CCWizard.handleFinishButtonRequest(CCWizard.java:780 )

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.ja va:25)

at java.lang.reflect.Method.invoke(Method.java:585)

at com.iplanet.jato.view.command.DefaultRequestHandlingCommand.execute(DefaultRequ estHandlingCommand.java:183)

at com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingView Base.java:308)

at com.iplanet.jato.view.ViewBeanBase.dispatchInvocation(ViewBeanBase.java:802)

at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.ja va:740)

at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.ja va:760)

at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandler(ViewBeanBase.java:571)

at com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase. java:957)

at com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.j ava:615)

at com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:816)

at com.sun.comm.da.WizardWinServlet.service(WizardWinServlet.java:111)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:917)

at org.apache.catalina.core.ApplicationFilterChain.servletService(ApplicationFilte rChain.java:391)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFil terChain.java:297)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain .java:178)

at com.sun.comm.da.LoginFilter.doFilter(LoginFilter.java:128)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFil terChain.java:210)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain .java:178)

at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java: 270)

at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextVal ve.java:241)

at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java: 182)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:571)

at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:160)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:571)

at com.sun.webserver.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:14 9)

at com.sun.webserver.connector.nsapi.NSAPIConnector.service(NSAPIConnector.java:99 5)

Has anyone seen this before? Am I doing something wrong here or missing something obvious?

[9912 byte] By [nate_keegana] at [2007-11-27 7:06:26]
# 1
I suspect that the offending entry ismailquota: 100M try it in bytes, and see if that changes anything.
jay_plesseta at 2007-7-12 18:57:44 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 2

No love unfortunately.

I tried 104857600 for mailQuota and I get the same message:

'Service for this user exceeds allocation maximum'

dn: cn=prescott3,o=mailcalendaruser,o=cosTemplates,o=gov

changetype: add

objectclass: top

objectclass: LDAPsubentry

objectclass: extensibleobject

objectclass: cosTemplate

cn: prescott3

mailMsgMaxBlocks: 10240

mailquota: 104857600

mailmsgquota: -1

mailAllowedServiceAccess: +pop:ALL$+imap:ALL$+smtp:ALL$+http:ALL

daServiceType: calendar user

daServiceType: mail user

nate_keegana at 2007-7-12 18:57:44 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 3

The DA admin guide says to run this:

ldapmodify -D 'cn=Directory Manager' -w password -f /opt/SUNWcomm/lib/config-templates/blah.ldif

It doesn't specify where ldapmodify should come from:

which ldapmodify

/bin/ldapmodify

ls /bin/ldapmodify

-r-xr-xr-x2 rootbin53168 Jan 22 2005 /bin/ldapmodify

ldd /bin/ldapmodify

libldap.so.5 => /usr/lib/libldap.so.5

libc.so.1 =>/lib/libc.so.1

libsasl.so.1 => /usr/lib/libsasl.so.1

libsocket.so.1 =>/lib/libsocket.so.1

libnsl.so.1 =>/lib/libnsl.so.1

libmd5.so.1 =>/lib/libmd5.so.1

libnspr4.so =>/usr/lib/mps/libnspr4.so

libplc4.so =>/usr/lib/mps/libplc4.so

libnss3.so =>/usr/lib/mps/libnss3.so

libssl3.so =>/usr/lib/mps/libssl3.so

libmp.so.2 =>/lib/libmp.so.2

libscf.so.1 =>/lib/libscf.so.1

libpthread.so.1 =>/lib/libpthread.so.1

libthread.so.1 =>/lib/libthread.so.1

librt.so.1 =>/lib/librt.so.1

libdl.so.1 =>/lib/libdl.so.1

libsoftokn3.so =>/usr/lib/mps/libsoftokn3.so

libplds4.so =>/usr/lib/mps/libplds4.so

libdoor.so.1 => /lib/libdoor.so.1

libuutil.so.1 => /lib/libuutil.so.1

libaio.so.1 =>/lib/libaio.so.1

libbsm.so.1 =>/lib/libbsm.so.1

libsecdb.so.1 => /lib/libsecdb.so.1

libtsol.so.2 => /lib/libtsol.so.2

libcmd.so.1 =>/lib/libcmd.so.1

libm.so.2 =>/lib/libm.so.2

/platform/SUNW,Sun-Fire-V210/lib/libc_psr.so.1

/platform/SUNW,Sun-Fire-V210/lib/libmd5_psr.so.1

/usr/lib/mps/cpu/sparcv8plus/libnspr_flt4.so

ls /opt/SUNWcomm/lib/ldapmodify

-rwxr-xr-x1 binbin167144 Apr 26 07:21

ldd /opt/SUNWcomm/lib/ldapmodify

libldap50.so => ../libldap50.so

libssldap50.so =>../libssldap50.so

libprldap50.so =>../libprldap50.so

libssl3.so =>../libssl3.so

libnss3.so =>../libnss3.so

libthread.so.1 =>../../../../lib/libthread.so.1

librt.so.1 =>../../../../lib/librt.so.1

libsocket.so.1 =>../../../../lib/libsocket.so.1

libnls.so.1 =>/usr/lib/libnls.so.1

libdl.so.1 =>../../../../lib/libdl.so.1

libresolv.so.2 =>../../../../lib/libresolv.so.2

libgen.so.1 =>../../../../lib/libgen.so.1

libplc4.so =>../libplc4.so

libplds4.so =>../libplds4.so

libnspr4.so =>../libnspr4.so

libsasl.so =>../libsasl.so

libicudata.so.2 =>../libicudata.so.2

libicui18n.so.2 =>../libicui18n.so.2

libicuuc.so.2 => ../libicuuc.so.2

libnsl.so.1 =>../../../../lib/libnsl.so.1

libc.so.1 =>../../../../lib/libc.so.1

libsoftokn3.so =>/usr/lib/mps/libsoftokn3.so

libaio.so.1 =>/lib/libaio.so.1

libmd5.so.1 =>/lib/libmd5.so.1

libpthread.so.1 =>/lib/libpthread.so.1

libicuuc.so.2 => /usr/lib/libicuuc.so.2

libicudata.so.2 =>/usr/lib/libicudata.so.2

libm.so.1 =>/lib/libm.so.1

libCrun.so.1 => /usr/lib/libCrun.so.1

libmp.so.2 =>/lib/libmp.so.2

libscf.so.1 =>/lib/libscf.so.1

libbsm.so.1 =>/lib/libbsm.so.1

libm.so.2 =>/lib/libm.so.2

libdoor.so.1 => /lib/libdoor.so.1

libuutil.so.1 => /lib/libuutil.so.1

libsecdb.so.1 => /lib/libsecdb.so.1

libtsol.so.2 => /lib/libtsol.so.2

libcmd.so.1 =>/lib/libcmd.so.1

/usr/lib/mps/cpu/sparcv8plus/libnspr_flt4.so

/platform/SUNW,Sun-Fire-V210/lib/libc_psr.so.1

/platform/SUNW,Sun-Fire-V210/lib/libmd5_psr.so.1

These are different binaries obviously. I went ahead and added another copy of the same LDIF file with the /opt/SUNWcomm/lib/ldapmodify binary, restarted the web container and I get 'service for this user exceeds allocation maximum' after assigning the package to my organization.

I have 1,000 units of this package available but I get the message.

Same problem as this thread:

http://forum.java.sun.com/thread.jspa?forumID=872&threadID=5180772

I looked at /opt/SUNWcomm/install/commda-config_blah.log to see if an extra step might be needed and I can't detect anything that could be it apart from things I can identify.

I'm not the only person with this issue (bug?) and I can't be the only person on DA 6.4 using, or attempting to use, custom packages.

I did download and install DA core patch 121581-13 which did nothing for the problem.

Looks like I will head over to Sun support to see what the deal is.

I will update this thread with what I find out.

nate_keegana at 2007-7-12 18:57:44 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...