Hi, I am facing this problem configuring WPS 5.0.2 with Directory Server
5.1 on zLinux:

[xmlaccess] <failure>
[xmlaccess]
com.ibm.wps.command.xml. XmlCommandServlet$AuthorizationException
:
XMLC0005E: Authorization for user wpsadmin failed.
[xmlaccess] </failure>

when executing enable_security_ldap script. But, validate-ldap script
works great. I have also done searchs with ldapsearch using the users I
have within the properties file and work.

I also have use full qualified ids and short ones.

Any idea?

Thanks in advance,

Chemi.

[ Post a follow-up to this message ]

Chemi wrote:
> Hi, I am facing this problem configuring WPS 5.0.2 with Directory Server
> 5.1 on zLinux:
>
> [xmlaccess] <failure>
> [xmlaccess]
> com.ibm.wps.command.xml. XmlCommandServlet$AuthorizationException
:
> XMLC0005E: Authorization for user wpsadmin failed.
> [xmlaccess] </failure>
>
> when executing enable_security_ldap script. But, validate-ldap script
> works great. I have also done searchs with ldapsearch using the users I
> have within the properties file and work.
>
> I also have use full qualified ids and short ones.
>
> Any idea?
>
> Thanks in advance,
>
>    Chemi.
I have the same troubles 

---
Vasil

[ Post a follow-up to this message ]

Hi, are you sure that all informations in the file wpsconfig.properties
are right ?

The field SSODomainName, LDAPUSERSuffix,... are very important to
authentify users.

[ Post a follow-up to this message ]

Vincent Perrin wrote:

> Hi, are you sure that all informations in the file
> wpsconfig.properties are right ?
>
> The field SSODomainName, LDAPUSERSuffix,... are very important to
> authentify users.

Yes. Well, tell me something... we have WPS on a different machine from
Directory Server. And the domain names of both machine are also
different. For example, WPS is on machine portal.xxx.com and Directory
Server is on machine ldap.yyy.com and SSODomainName value is .xxx.com
Finally, the LDAP tree suffix is: ou=portaldes,o=zzz

Is this correct? Or having so many different domain names and suffixes
could be the problem?

Thanks in advance,

Chemi.

[ Post a follow-up to this message ]

Personnally, I never try this solution, but I suggest that your Ldap
tree Suffix will take this value ou=portaldes,o=xxx.

The full qualified internet hostname of the ldap computer is not important.

[ Post a follow-up to this message ]

Hi,

my configuration is eDirectory x Oracle x WPS 5.0
in files : <WPS_ROOT>/config/work/wmm/wmm_LDAP.xml.NDS.1.wmm
<WPS_ROOT>/config/work/wmm/wmm_LDAP.xml.NDS.3.wmm

in <ldapRepository...> stanza of the wmm.xml file, add the following
key/value pairs: java.naming.security.protocol="ssl"

then you can run WPSConfig.sh enable-security-ldap
i'm not sure if both you must change.

I hope this is the right solution.
Robert


"Vincent Perrin" <vperrin@bestware.fr> píse v diskusním príspevku
news:413B55A2.80800@bestware.fr...
> Personnally, I never try this solution, but I suggest that your Ldap
> tree Suffix will take this value ou=portaldes,o=xxx.
>
> The full qualified internet hostname of the ldap computer is not
important.

[ Post a follow-up to this message ]