[THIN] Re: Issue with AG 4.2.2 code
- From: "Tony Lyne" <Tony.Lyne@xxxxxxxxxxx>
- To: thin@xxxxxxxxxxxxx
- Date: Wed, 31 May 2006 09:07:42 +1200
Check your firewall logs. I cant see the firewall causing the problem, Ive
setup AG 4.2.2 on Layer 7 and standard Stateful firewalls and have had no
issues.
Can you drop a laptop or workstation in the same network segment as the AG and
try and bind to the directory using something like the Softerra LDAP browser?
Tony Lyne
Consultant
Senior Systems Engineer
+64 6 353 7300
+64 6 356 6800
+64 27 472 0696
tony.lyne@xxxxxxxxxxx
www.gen-i.co.nz
172-174 Broadway Avenue, PO Box 1470,
Palmerston North, New Zealand
"This communication, including any attachments, is confidential. If you are not
the intended recipient, you should not read it - please contact me immediately,
destroy it, and do not copy or use any part of this communication or disclose
anything about it. Thank you. Please note that this communication does not
designate an information system for the purposes of the Electronic Transactions
Act 2002."
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of
Jeremy Saunders
Sent: Wednesday, 31 May 2006 5:56 a.m.
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Issue with AG 4.2.2 code
No...it's a production environment for a Banking organisation. The AG with
LDAP and RSA integration is replacing their Cisco IPSEC VPN solution. I'm
faily sure it is the firewall that's causing the issue. But I just wanted
to check and see if anyone has had this issue before, just in case, as it's
the first 4.2.2 AG I've implemented.
Thanks anyway.
Cheers.
Kind regards,
Jeremy Saunders
Senior Technical Specialist
Infrastructure Technology Services
(ITS) & Cerulean
Global Technology Services (GTS)
IBM Australia
Level 2, 1060 Hay Street
West Perth WA 6005
Visit us at
http://www.ibm.com/services/au/its
P: +61 8 9261 8412 F: +61 8 9261 8486
M: TBA E-mail:
jeremy.saunders@xxxxxxxxxxx
"Pavlo Ignatusha"
<Pavlo.Ignatusha@
pemreghos.org> To
Sent by: <thin@xxxxxxxxxxxxx>
thin-bounce@freel cc
ists.org
Subject
[THIN] Re: Issue with AG 4.2.2 code
31/05/2006 01:38
AM
Please respond to
thin
I know it is a bit dumb but can you open all ports on the firewall just for
AG IP to see if it is a port blocking problem?
Thanks,
Pavlo Ignatusha
Systems Network Coordinator
Pembroke Regional Hospital
tel. +1 (613) 732-3675 ext.6150
fax. +1 (613) 732-9986
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Jeremy Saunders
Sent: May 30, 2006 10:33 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Issue with AG 4.2.2 code
No the same config. I'm using it without AAC, so the authentication is done
from the AG to the Domain Controllers through the firewall. We've got TCP
389 open (amongst others), but are getting the unsuccessful bind errors.
Kind regards,
Jeremy Saunders
Senior Technical Specialist
Infrastructure Technology Services
(ITS) & Cerulean
Global Technology Services (GTS)
IBM Australia
Level 2, 1060 Hay Street
West Perth WA 6005
Visit us at
http://www.ibm.com/services/au/its
P: +61 8 9261 8412 F: +61 8 9261 8486
M: TBA E-mail:
jeremy.saunders@xxxxxxxxxxx
"Pavlo Ignatusha"
<Pavlo.Ignatusha@
pemreghos.org> To
Sent by: <thin@xxxxxxxxxxxxx>
thin-bounce@freel cc
ists.org
Subject
[THIN] Re: Issue with AG 4.2.2 code
30/05/2006 08:26
PM
Please respond to
thin
We are running 4.2.2 with AAC and authenticate to AD. It seems to work fine
(updated May 24).
Thanks,
Pavlo Ignatusha
Systems Network Coordinator
Pembroke Regional Hospital
tel. +1 (613) 732-3675 ext.6150
fax. +1 (613) 732-9986
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Jeremy Saunders
Sent: May 30, 2006 7:55 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Issue with AG 4.2.2 code
Hi,
I've just set up a new AG with the latest code and we are unable to use the
LDAP Authentication. The logs give us an unsuccessful bind error, which we
cannot explain, as an ldap authentication to their domain controllers is
working fine from my laptop, etc, and there is nothing being blocked on the
firewall between the AG and the domain controllers.
Has anyone else found any issues with this release of code?
Just the AG...no AAC involved here.
Cheers.
Kind regards,
Jeremy Saunders
Senior Technical Specialist
Infrastructure Technology Services
(ITS) & Cerulean
Global Technology Services (GTS)
IBM Australia
Level 2, 1060 Hay Street
West Perth WA 6005
Visit us at
http://www.ibm.com/services/au/its
P: +61 8 9261 8412 F: +61 8 9261 8486
M: TBA E-mail:
jeremy.saunders@xxxxxxxxxxx
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
************************************************
--
The information in this email belongs to the Pembroke Regional Hospital
and may contain confidential and privileged information for the sole use
of the individual or organization to which it is addressed. If you are
not the intended recipient, you are hereby notified that any disclosure,
copying or distribution of the contents of this email is prohibited.
If you have received this email in error, please contact the sender and
destroy all copies of the original message.
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
************************************************
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
************************************************
--
The information in this email belongs to the Pembroke Regional Hospital
and may contain confidential and privileged information for the sole use
of the individual or organization to which it is addressed. If you are
not the intended recipient, you are hereby notified that any disclosure,
copying or distribution of the contents of this email is prohibited.
If you have received this email in error, please contact the sender and
destroy all copies of the original message.
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
************************************************
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
************************************************
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
************************************************
Other related posts: