Installing the iPrint 2.1 for OES patch

[mdymes]

Hi,

Feeling less than smart at the moment. I downloaded the ISO for the latest iPrint patch for OES (https://www.novell.com/communities/coolsolutions/iprint-open-enterprise-server-latest-update-get/). I have tried running the autorun.sh, installing as a patch CD update through YAST, the most it ever did was install 24kb worth of unknown package. I cannot find any readme or any direction on the preferred way to install this. Can someone point me in the right direction.

[smflood]

On 31/05/17 17:04, mdymes wrote:

> Feeling less than smart at the moment. I downloaded the ISO for the
> latest iPrint patch for OES
> (https://www.novell.com/communities/coolsolutions/iprint-open-enterprise-server-latest-update-get/).
> I have tried running the autorun.sh, installing as a patch CD update
> through YAST, the most it ever did was install 24kb worth of unknown
> package. I cannot find any readme or any direction on the preferred way
> to install this. Can someone point me in the right direction.

https://www.novell.com/documentation/oes2015/iprint_for_oes/data/t42smwuj9r39.html#t430clg8uxzb

https://www.novell.com/documentation/oes2015/iprint_for_oes/data/open_source_code.html

HTH.
--
Simon
Micro Focus Knowledge Partner

------------------------------------------------------------------------
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below. Thanks.
------------------------------------------------------------------------

[mdymes]

Yeah, that'd do it, a new pattern. Now if you don't mind helping me while my brains are not with me today, all installed, I am unable to login to /ipcon with an error of "login failed, check the logs". I have looked at the files in /var/opt/novell/log/iprintmgmt and they do not say anything. The same credentials I am using can login to /PsmStatus on the same server.

[Anonymous_User]

On 05/31/2017 09:54 PM, mdymes wrote:
>
> Yeah, that'd do it, a new pattern. Now if you don't mind helping me
> while my brains are not with me today, all installed, I am unable to
> login to /ipcon with an error of "login failed, check the logs". I
> have looked at the files in /var/opt/novell/log/iprintmgmt and they do
> not say anything. The same credentials I am using can login to
> /PsmStatus on the same server.
>
>

1. what shows /var/log/apache2/error_log when login fails?

2. What entry is showing on this file
/etc/opt/novell/iprint/httpd/conf/iprint_ssl.conf, on the field

AuthLDAPDNURL "ldaps:

3. Delete /var/opt/novell/iprint-tomcat/work directory and restart it
using rcnovell-iprint-tomcat restart

[mdymes]

Thanks for the help, Here is the Info

1.

/var/log/apache2/error_log shows,

[Thu Jun 01 09:31:01 2017] [error] [client 127.0.0.1] proxy: error processing end

2.
The file /etc/opt/novell/iprint/httpd/conf/iprint_ssl.conf shows,

AuthLDAPDNURL "ldaps://[my fully qualified server internal DNS name]:636/o=nrcsd???(objectClass=user)" o=nrcsd is a valid o

3.
Done, same thing is happening.

[Anonymous_User]

On 06/01/2017 03:44 PM, mdymes wrote:
>
> Thanks for the help, Here is the Info
>
> 1.
>
> /var/log/apache2/error_log shows,
>
> [Thu Jun 01 09:31:01 2017] [error] [client 127.0.0.1] proxy: error
> processing end
>
> 2.
> The file /etc/opt/novell/iprint/httpd/conf/iprint_ssl.conf shows,
>
> AuthLDAPDNURL "ldaps://[my fully qualified server internal DNS
> name]:636/o=nrcsd???(objectClass=user)" o=nrcsd is a valid o
>
> 3.
> Done, same thing is happening.
>
>

1. There are more than that, this is only informative

2. OK

3. I could duplicate it and it looks like a timing issue assuming your
using the CN user name to log in and it is unique on the tree

Try

# rcnovell-iprint-tomcat restart;rcapache2 restart

Wait 1 minute and try it again

[mdymes]

Thanks for the help, but nothing new to report. I tried restarting both Daemons, wating a minute and the result is the same. In http.conf, I tried upping the apache log level to debug, this did not give me any additional info. I did try an ndstrace on ldap, I could see the bind, but it looked like the server was sending a result of every edirectory object (I will admit, I am out of practice on NDStrace)

1319810816 LDAP: [2017/06/01 12:07:20.547] New cleartext connection 0x12423c00 from 127.0.0.1:55232, monitor = 0x37cfe700, index = 2
937424640 LDAP: [2017/06/01 12:07:20.552] (127.0.0.1:55232)(0x0003:0x63) Implied anonymous bind by operation 0x3:0x63 on connection 0x12423c00
937424640 LDAP: [2017/06/01 12:07:20.552] (127.0.0.1:55232)(0x0003:0x63) DoSearch on connection 0x12423c00
937424640 LDAP: [2017/06/01 12:07:20.552] (127.0.0.1:55232)(0x0003:0x63) Search request:
base: ""
scope:2 dereference:0 sizelimit:1000 timelimit:0 attrsonly:0
filter: "(objectclass=User)"
no attributes
937424640 LDAP: [2017/06/01 12:07:20.553] (127.0.0.1:55232)(0x0003:0x63) Empty attribute list implies all user attributes
937424640 LDAP: [2017/06/01 12:07:20.576] (127.0.0.1:55232)(0x0003:0x63) Sending search result entry { Omitted cn} o=NRCSD" to connection 0x12423c00
hundreds of these...
918742784 LDAP: [2017/06/01 12:08:19.319] (127.0.0.1:55265)(0x0005:0x63) Search size limit exceeded
918742784 LDAP: [2017/06/01 12:08:19.319] (127.0.0.1:55265)(0x0005:0x63) Sending operation result 4:"":"" to connection 0x12423c00

[Anonymous_User]

On 06/01/2017 06:34 PM, mdymes wrote:
>
> Thanks for the help, but nothing new to report. I tried restarting
> both Daemons, wating a minute and the result is the same. In http.conf,
> I tried upping the apache log level to debug, this did not give me any
> additional info. I did try an ndstrace on ldap, I could see the bind,
> but it looked like the server was sending a result of every edirectory
> object (I will admit, I am out of practice on NDStrace)
>
> 1319810816 LDAP: [2017/06/01 12:07:20.547] New cleartext connection
> 0x12423c00 from 127.0.0.1:55232, monitor = 0x37cfe700, index = 2
> 937424640 LDAP: [2017/06/01 12:07:20.552] (127.0.0.1:55232)(0x0003:0x63)
> Implied anonymous bind by operation 0x3:0x63 on connection 0x12423c00
> 937424640 LDAP: [2017/06/01 12:07:20.552] (127.0.0.1:55232)(0x0003:0x63)
> DoSearch on connection 0x12423c00
> 937424640 LDAP: [2017/06/01 12:07:20.552] (127.0.0.1:55232)(0x0003:0x63)
> Search request:
> base: ""
> scope:2 dereference:0 sizelimit:1000 timelimit:0
> attrsonly:0
> filter: "(objectclass=User)"
> no attributes
> 937424640 LDAP: [2017/06/01 12:07:20.553] (127.0.0.1:55232)(0x0003:0x63)
> Empty attribute list implies all user attributes
> 937424640 LDAP: [2017/06/01 12:07:20.576] (127.0.0.1:55232)(0x0003:0x63)
> Sending search result entry { Omitted cn} o=NRCSD" to connection
> 0x12423c00
> hundreds of these...
> 918742784 LDAP: [2017/06/01 12:08:19.319] (127.0.0.1:55265)(0x0005:0x63)
> Search size limit exceeded
> 918742784 LDAP: [2017/06/01 12:08:19.319] (127.0.0.1:55265)(0x0005:0x63)
> Sending operation result 4:"":"" to connection 0x12423c00
>
>

you may need to open a SR. With a remote connection to your server it
will be easier to solve this issue.

BTW what rcndsd status command reports?