If you need both enabled you have to configure the area hub plug-in, then stack the arealdap and areasso plug-ins on top of the area hub plug-in, which is what we do.
-----Original Message----- From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of Danny Kellett Sent: Tuesday, May 25, 2010 7:55 AM To: arslist@ARSLIST.ORG Subject: Re: BMC's Sample SSO White Paper/Code This is becuase you have them configured differently. In the QA server you have the SSO plugin configured. Where are the other server you have enabled the AREA LDAP plugin which is not configured and not needed. Look in the ar.conf file and remove any arealdap.so restart and try again Kind regards Danny Single Sign On (SSO) for ARS and ITSM http://www.javasystemsolutions.com/jss/ssoplugin > Danny this is what I'm getting on the failed server: > > <PLGN> <TID: 005300> <RPC ID: 0000000285> <Queue: AREA > <Client-RPC: > 390695> /* Tue May 25 2010 08:04:30.6390 */+VL AREAVerifyLoginCallback > -- user v096brtt > > <PLGN> <TID: 005300> <RPC ID: 0000000285> <Queue: AREA > <Client-RPC: > 390695> /* Tue May 25 2010 08:04:30.6390 */<ARSYS.AREA.LDAP> <FINEST> > AREAVerifyLoginCallback > > <PLGN> <TID: 005300> <RPC ID: 0000000285> <Queue: AREA > <Client-RPC: > 390695> /* Tue May 25 2010 08:04:30.6390 */<ARSYS.AREA.LDAP> <FINER> > ldap_init("jsqremedy2", 389) > > <PLGN> <TID: 005300> <RPC ID: 0000000285> <Queue: AREA > <Client-RPC: > 390695> /* Tue May 25 2010 08:04:30.6390 */<ARSYS.AREA.LDAP> <FINER> > connect timeout previously: -1 > > <PLGN> <TID: 005300> <RPC ID: 0000000285> <Queue: AREA > <Client-RPC: > 390695> /* Tue May 25 2010 08:04:30.6390 */<ARSYS.AREA.LDAP> <FINER> > connect timeout used: 35000 > > <PLGN> <TID: 005300> <RPC ID: 0000000285> <Queue: AREA > <Client-RPC: > 390695> /* Tue May 25 2010 08:04:30.6390 */<ARSYS.AREA.LDAP> <FINER> > ldap_simple_bind("null", null) > > <PLGN> <TID: 005300> <RPC ID: 0000000285> <Queue: AREA > <Client-RPC: > 390695> /* Tue May 25 2010 08:04:31.5810 */<ARSYS.AREA.LDAP> <SEVERE> > Bind: Can't connect to the LDAP server (LDAPERR Code 91) > > <PLGN> <TID: 005300> <RPC ID: 0000000285> <Queue: AREA > <Client-RPC: > 390695> /* Tue May 25 2010 08:04:31.5810 */<ARSYS.AREA.LDAP> <SEVERE> > Bind: ldap_simple_bind failed [null] > > <PLGN> <TID: 005300> <RPC ID: 0000000285> <Queue: AREA > <Client-RPC: > 390695> /* Tue May 25 2010 08:04:31.5810 */-VL FAIL > > This is what I get on my qa server: > > <PLGN> <TID: 000776> <RPC ID: 0000000421> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 25 2010 08:11:35.7020 */+VL > AREAVerifyLoginCallback -- user v096raro > <PLGN> <TID: 000776> <RPC ID: 0000000421> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 25 2010 08:11:35.7020 */<AREA.SSO> > <INFO> Username: > <PLGN> <TID: 000776> <RPC ID: 0000000421> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 25 2010 08:11:35.7020 */<AREA.SSO> > <INFO> v096raro > <PLGN> <TID: 000776> <RPC ID: 0000000421> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 25 2010 08:11:35.7020 */<AREA.SSO> > <INFO> Network Address: > <PLGN> <TID: 000776> <RPC ID: 0000000421> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 25 2010 08:11:35.7020 */<AREA.SSO> > <INFO> 149.83.18.20 > <PLGN> <TID: 000776> <RPC ID: 0000000421> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 25 2010 08:11:35.7020 */<AREA.SSO> > <INFO> Auth String: > <PLGN> <TID: 000776> <RPC ID: 0000000421> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 25 2010 08:11:35.7020 */<AREA.SSO> > <INFO> Qk1DIFJlbWVkeSBBUlN5c3RlbQ== > <PLGN> <TID: 000776> <RPC ID: 0000000421> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 25 2010 08:11:35.7020 */<AREA.SSO> > <INFO> Login request not coming from the BOXI-IP, checking > MID-TIER-IP's... > <PLGN> <TID: 000776> <RPC ID: 0000000421> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 25 2010 08:11:35.7020 */<AREA.SSO> > <INFO> User logging in from a matching Authentication String and > Mid-Tier IP: > <PLGN> <TID: 000776> <RPC ID: 0000000421> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 25 2010 08:11:35.7020 */<AREA.SSO> > <INFO> 149.83.18.20 > <PLGN> <TID: 000776> <RPC ID: 0000000421> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 25 2010 08:11:35.7020 */<AREA.SSO> > <INFO> User passed AREA SSO authentication. Login Success > <PLGN> <TID: 000776> <RPC ID: 0000000421> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 25 2010 08:11:35.7020 */-VL OK > <PLGN> <TID: 000776> <RPC ID: 0000000422> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 25 2010 08:11:35.7180 */+NS > AREANeedToSyncCallback > <PLGN> <TID: 000776> <RPC ID: 0000000422> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 25 2010 08:11:35.7180 */-NS OK -- 0 > <PLGN> <TID: 002876> <RPC ID: 0000000014> <Queue: Prv: 10005> > <Client-RPC: 999999> /* Tue May 25 2010 08:12:04.0480 */Plug-In Trace > Log -- OFF > > > ________________________________ > > From: Action Request System discussion list(ARSList) > [mailto:arsl...@arslist.org] On Behalf Of Danny Kellett > Sent: Monday, May 24, 2010 3:07 PM > To: arslist@ARSLIST.ORG > Subject: Re: BMC's Sample SSO White Paper/Code > > > ** > > Sorry Rafael, > > > > I didn't see you replied. > > > > The log is not verbose enough. Make sure you have the plugin log level > set to ALL > > > > From: Action Request System discussion list(ARSList) > [mailto:arsl...@arslist.org] On Behalf Of Zaayer, Ben (Information > Technology) > Sent: 24 May 2010 19:46 > To: arslist@ARSLIST.ORG > Subject: Re: BMC's Sample SSO White Paper/Code > > > > ** > > Rafael, we are using the same plug-in provided by BMC's sample code > and have a config file, areasso.cfg on the AR Server, that must > contain all of the Mid Tier IP addresses, as well as any load-balanced > virtual IPs or it will give that error message. Also, on the Mid Tier > box make sure that your config.properties and sso.properties in the > WEB-INF\classes directories are configured properly. Almost every > time we have run into this error it was because one of the Mid Tier or > load balanced IPs changed. > > > > Ben > > > > From: Action Request System discussion list(ARSList) > [mailto:arsl...@arslist.org] On Behalf Of Rodriguez, Rafael J x23718 > Sent: Saturday, May 22, 2010 3:48 PM > To: arslist@ARSLIST.ORG > Subject: Re: BMC's Sample SSO White Paper/Code > > > > ** > > Hello Danny here is a sample of my arplugin log > > > > <PLGN> <TID: 005728> <RPC ID: 0000000000> <Queue: Dispatcher> > <Client-RPC: 000000> /* Tue May 18 2010 09:55:18.0540 */Plug-In Trace > Log -- ON (AR Plugin Server 7.5.00 Patch 003 200909200825) <PLGN> > <TID: 005728> <RPC ID: 0000000000> <Queue: Dispatcher> > <Client-RPC: 000000> /* Tue May 18 2010 09:55:18.0850 */AREA Plug-In > Loaded: AREA.SSO version 1 > <PLGN> <TID: 005728> <RPC ID: 0000000000> <Queue: Dispatcher> > <Client-RPC: 000000> /* Tue May 18 2010 09:55:18.0850 */ > ARPluginSetProperties defined > <PLGN> <TID: 005728> <RPC ID: 0000000000> <Queue: Dispatcher> > <Client-RPC: 000000> /* Tue May 18 2010 09:55:18.0850 */ > ARPluginInitialization defined > <PLGN> <TID: 005728> <RPC ID: 0000000000> <Queue: Dispatcher> > <Client-RPC: 000000> /* Tue May 18 2010 09:55:18.0850 */ > ARPluginTermination defined > <PLGN> <TID: 005728> <RPC ID: 0000000000> <Queue: Dispatcher> > <Client-RPC: 000000> /* Tue May 18 2010 09:55:18.0850 */ > ARPluginCreateInstance defined > <PLGN> <TID: 005728> <RPC ID: 0000000000> <Queue: Dispatcher> > <Client-RPC: 000000> /* Tue May 18 2010 09:55:18.0850 */ > ARPluginDeleteInstance defined > <PLGN> <TID: 005728> <RPC ID: 0000000000> <Queue: Dispatcher> > <Client-RPC: 000000> /* Tue May 18 2010 09:55:18.0850 */ > ARPluginEvent undefined > <PLGN> <TID: 005728> <RPC ID: 0000000000> <Queue: Dispatcher> > <Client-RPC: 000000> /* Tue May 18 2010 09:55:18.0850 */ > AREAVerifyLoginCallback defined > <PLGN> <TID: 005728> <RPC ID: 0000000000> <Queue: Dispatcher> > <Client-RPC: 000000> /* Tue May 18 2010 09:55:18.0850 */ > AREANeedToSyncCallback defined > <PLGN> <TID: 005728> <RPC ID: 0000000000> <Queue: Dispatcher> > <Client-RPC: 000000> /* Tue May 18 2010 09:55:18.0850 */ > AREAFreeCallback defined > > <PLGN> <TID: 004320> <RPC ID: 0000008143> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:44.2790 */-VL FAIL > <PLGN> <TID: 004320> <RPC ID: 0000008144> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:44.3860 */+VL > AREAVerifyLoginCallback -- user v096brtt > <PLGN> <TID: 004320> <RPC ID: 0000008144> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:45.4960 */-VL FAIL > <PLGN> <TID: 004320> <RPC ID: 0000008145> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:45.5260 */+VL > AREAVerifyLoginCallback -- user v096brtt > <PLGN> <TID: 004320> <RPC ID: 0000008145> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:46.3930 */-VL FAIL > <PLGN> <TID: 004320> <RPC ID: 0000008146> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:46.4240 */+VL > AREAVerifyLoginCallback -- user v096brtt > <PLGN> <TID: 004320> <RPC ID: 0000008146> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:47.4880 */-VL FAIL > <PLGN> <TID: 004320> <RPC ID: 0000008147> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:47.5030 */+VL > AREAVerifyLoginCallback -- user v096brtt > <PLGN> <TID: 004320> <RPC ID: 0000008147> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:48.5380 */-VL FAIL > <PLGN> <TID: 004320> <RPC ID: 0000008148> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:48.5530 */+VL > AREAVerifyLoginCallback -- user v096brtt > <PLGN> <TID: 004320> <RPC ID: 0000008148> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:49.5110 */-VL FAIL > <PLGN> <TID: 004320> <RPC ID: 0000008149> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:49.5410 */+VL > AREAVerifyLoginCallback -- user v096brtt > <PLGN> <TID: 004320> <RPC ID: 0000008149> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:50.5150 */-VL FAIL > <PLGN> <TID: 004320> <RPC ID: 0000008150> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:50.5300 */+VL > AREAVerifyLoginCallback -- user v096brtt > <PLGN> <TID: 004320> <RPC ID: 0000008150> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:51.6100 */-VL FAIL > <PLGN> <TID: 004320> <RPC ID: 0000008151> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:51.6400 */+VL > AREAVerifyLoginCallback -- user v096brtt > <PLGN> <TID: 004320> <RPC ID: 0000008151> <Queue: AREA > > <Client-RPC: 390695> /* Tue May 18 2010 20:36:52.5980 */-VL FAIL > > > > <PLGN> <TID: 005032> <RPC ID: 0000000014> <Queue: Prv: 10005> > <Client-RPC: 999999> /* Tue May 18 2010 20:53:54.7910 */Plug-In Trace > Log -- OFF <END OF LOG FILE> > > > > _attend WWRUG10 www.wwrug.com ARSlist: "Where the Answers Are"_ > > _attend WWRUG10 www.wwrug.com ARSlist: "Where the Answers Are"_ > > This message and any attachments are intended only for the use of the > addressee and may contain information that is privileged and > confidential. If the reader of the message is not the intended > recipient or an authorized representative of the intended recipient, > you are hereby notified that any dissemination of this communication > is strictly prohibited. If you have received this communication in > error, please notify us immediately by e-mail and delete the message > and any attachments from your system. > > > ______________________________________________________________________ > _________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org > attend wwrug10 www.wwrug.com ARSlist: "Where the Answers Are" _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug10 www.wwrug.com ARSlist: "Where the Answers Are" _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug10 www.wwrug.com ARSlist: "Where the Answers Are"
