Oninit cdi / Archive
Talk to an expert →

trying configure single sing-on

Posted in 2010

Topics: Server Administration, Networking & sqlhosts Configuration, Clustering, Grid & MACH11

Cesar Inacio Martins — — source: IIUG Forums & Mailing Lists

Hi, I have a test environment here where I'm trying configure Single Sign-on and got some problems... IFX 11.50 UC6W2 Client 3.50 UC6 OpenSuse 11.6 kerberos 1.7 After configure all, when try connect: $ echo "select first 1 * from systables "| dbaccess myfs_db 5000: CSM error: Yes... don't have any error message... only blank... Each try of connection, appear this on the Server online.log: 20:36:52 listener-thread: err = -14565: oserr = 0: errstr = : CSS: error reading data. 20:36:54 listener-thread: err = -25582: oserr = 0: errstr = : Network connection is broken. Client configuration $ grep $INFORMIXSERVER $INFORMIXSQLHOSTS idsearth_tcpc onsoctcp *srvimartins 2201 s=7,csm=(GSSCSM) $ cat $INFORMIXDIR/etc/concsm.cfg GSSCSM("/opt/IBM/csdk/lib/client/csm/igsss11a.so", "", "c=1,i=1") Server configuration $ echo $INFORMIXSERVERidsearth informix@srvimartins:/opt/IBM/informix/etc$ egrep $INFORMIXSERVER $INFORMIXSQLHOSTS idsearth_er onsoctcp srvimartins 56001 g=grpRoot idsearth onsoctcp *srvimartins 2001 idsearth_str onipcstr srvimartins ipc_earth idsearth_shm onipcshm srvimartins shm_earthidsearth_tcpb onsoctcp *srvimartins 2101 b=32767 idsearth_tcpc onsoctcp *srvimartins 2201 s=7,csm=(GSSCSM) idsearth_mach11 onsoctcp *srvimartins 55001 s=6 $ cat $INFORMIXDIR/etc/concsm.cfg GSSCSM("/opt/IBM/informix/lib/csm/libixgss.so", "", "c=1,i=1"): I already try both librarys (libixgss and igsss11a) in all configuration possible... Theoretically , all principals and keytabs are OK. I have a SSH server with SSO working fine on this machine (with GSS too), and I trying connect with the same user used on the ssh. So, I suppose the problem isn't to get the Tickets, is before that, with the libraries. Another reason for this is because no errors or messages appear on the syslog or any other log configured in krb5.conf (I checked in all machines, KDC server, IFX server and client I already check articles, manuals, IBM support site... and not found anything... How I can try figure out ,what's happend... if I know what is the error!!?? Any tip are welcome. Cesar

↪ replying to Cesar Inacio Martins
Fernando Oliveira — — source: IIUG Forums & Mailing Lists

Cesar, I was diggin' over, and it seems to be quite an unique issue, recently found. But we still trying to figure that out. In this case, I'd suggest you to open a new pmr. Regards, FFO > To: ids@iiug.org > From: cesar_inacio_martins@yahoo.com.br > Subject: trying configure single sing-on [20287] > Date: Wed, 2 Jun 2010 21:39:11 -0400 > > Hi, > > I have a test environment here where I'm trying configure Single Sign-on and > got some problems... > > IFX 11.50 UC6W2 > Client 3.50 UC6 > OpenSuse 11.6 > kerberos 1.7 > > After configure all, when try connect: > > $ echo "select first 1 * from systables "| dbaccess myfs_db > 5000: CSM error:> > Yes... don't have any error message... only blank... > > Each try of connection, appear this on the Server online.log: > 20:36:52 listener-thread: err = -14565: oserr = 0: errstr = : CSS: error > reading data. > > 20:36:54 listener-thread: err = -25582: oserr = 0: errstr = : Network > connection is broken. > > Client configuration > $ grep $INFORMIXSERVER $INFORMIXSQLHOSTS > idsearth_tcpc onsoctcp *srvimartins 2201 s=7,csm=(GSSCSM) > $ cat $INFORMIXDIR/etc/concsm.cfg > GSSCSM("/opt/IBM/csdk/lib/client/csm/igsss11a.so", "", "c=1,i=1")> > Server configuration > $ echo $INFORMIXSERVER> idsearth > informix@srvimartins:/opt/IBM/informix/etc$ egrep $INFORMIXSERVER > $INFORMIXSQLHOSTS > idsearth_er onsoctcp srvimartins 56001 g=grpRoot > idsearth onsoctcp *srvimartins 2001 > idsearth_str onipcstr srvimartins ipc_earth > idsearth_shm onipcshm srvimartins shm_earth> idsearth_tcpb onsoctcp *srvimartins 2101 b=32767 > idsearth_tcpc onsoctcp *srvimartins 2201 s=7,csm=(GSSCSM) > idsearth_mach11 onsoctcp *srvimartins 55001 s=6 > $ cat $INFORMIXDIR/etc/concsm.cfg > GSSCSM("/opt/IBM/informix/lib/csm/libixgss.so", "", "c=1,i=1"):> > I already try both librarys (libixgss and igsss11a) in all configuration > possible... > > Theoretically , all principals and keytabs are OK. I have a SSH server with > SSO working fine on this machine (with GSS too), and I trying connect with the > same user used on the ssh. > > So, I suppose the problem isn't to get the Tickets, is before that, with the > libraries. > Another reason for this is because no errors or messages appear on the syslog > or any other log configured in krb5.conf (I checked in all machines, KDC > server, IFX server and client > > I already check articles, manuals, IBM support site... and not found > anything... > > How I can try figure out ,what's happend... if I know what is the error!!?? > > Any tip are welcome. > Cesar > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > _________________________________________________________________ NINGUÉM PRECISA SABER O QUE VOCÊ ESTÁ COMPRANDO. LEIA MAIS SOBRE ESSE ASSUNTO AQUI. http://www.microsoft.com/brasil/windows/internet-explorer/features/browse-privat ely.aspx?tabid=1&catid=1&WT.mc_id=1590

↪ replying to Fernando Oliveira
Cesar Inacio Martins — — source: IIUG Forums & Mailing Lists

Hi Fernando, I already discover what is the problem... Is the "*" asterisk into the hostname in the sqlhosts (on idsearth_tcpc in this case) ... if remove it , works... or better , the message errors start to appear... :) with the error message, was easy to solve the situation. Now I could configure successfully the SSO here. Cesar --- Em seg, 7/6/10, Fernando Oliveira <fernando_fo@hotmail.com> escreveu: De: Fernando Oliveira <fernando_fo@hotmail.com> Assunto: RE: trying configure single sing-on [20303] Para: ids@iiug.org Data: Segunda-feira, 7 de Junho de 2010, 12:09 Cesar, I was diggin' over, and it seems to be quite an unique issue, recently found. But we still trying to figure that out. In this case, I'd suggest you to open a new pmr. Regards, FFO > To: ids@iiug.org > From: cesar_inacio_martins@yahoo.com.br > Subject: trying configure single sing-on [20287] > Date: Wed, 2 Jun 2010 21:39:11 -0400 > > Hi, > > I have a test environment here where I'm trying configure Single Sign-on and > got some problems... > > IFX 11.50 UC6W2 > Client 3.50 UC6 > OpenSuse 11.6 > kerberos 1.7 > > After configure all, when try connect: > > $ echo "select first 1 * from systables "| dbaccess myfs_db > 5000: CSM error:> > Yes... don't have any error message... only blank... > > Each try of connection, appear this on the Server online.log: > 20:36:52 listener-thread: err = -14565: oserr = 0: errstr = : CSS: error > reading data. > > 20:36:54 listener-thread: err = -25582: oserr = 0: errstr = : Network > connection is broken. > > Client configuration > $ grep $INFORMIXSERVER $INFORMIXSQLHOSTS > idsearth_tcpc onsoctcp *srvimartins 2201 s=7,csm=(GSSCSM) > $ cat $INFORMIXDIR/etc/concsm.cfg > GSSCSM("/opt/IBM/csdk/lib/client/csm/igsss11a.so", "", "c=1,i=1")> > Server configuration > $ echo $INFORMIXSERVER> idsearth > informix@srvimartins:/opt/IBM/informix/etc$ egrep $INFORMIXSERVER > $INFORMIXSQLHOSTS > idsearth_er onsoctcp srvimartins 56001 g=grpRoot > idsearth onsoctcp *srvimartins 2001 > idsearth_str onipcstr srvimartins ipc_earth > idsearth_shm onipcshm srvimartins shm_earth> idsearth_tcpb onsoctcp *srvimartins 2101 b=32767 > idsearth_tcpc onsoctcp *srvimartins 2201 s=7,csm=(GSSCSM) > idsearth_mach11 onsoctcp *srvimartins 55001 s=6 > $ cat $INFORMIXDIR/etc/concsm.cfg > GSSCSM("/opt/IBM/informix/lib/csm/libixgss.so", "", "c=1,i=1"):> > I already try both librarys (libixgss and igsss11a) in all configuration > possible... > > Theoretically , all principals and keytabs are OK. I have a SSH server with > SSO working fine on this machine (with GSS too), and I trying connect with the > same user used on the ssh. > > So, I suppose the problem isn't to get the Tickets, is before that, with the > libraries. > Another reason for this is because no errors or messages appear on the syslog > or any other log configured in krb5.conf (I checked in all machines, KDC > server, IFX server and client > > I already check articles, manuals, IBM support site... and not found > anything... > > How I can try figure out ,what's happend... if I know what is the error!!?? > > Any tip are welcome. > Cesar > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > _________________________________________________________________ NINGUÉM PRECISA SABER O QUE VOCÊ ESTÁ COMPRANDO. LEIA MAIS SOBRE ESSE ASSUNTO AQUI. http://www.microsoft.com/brasil/windows/internet-explorer/features/browse-privat ely.aspx?tabid=1&catid=1&WT.mc_id=1590 ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum.

Related threads

Glossary