Sylvain Duloutre's Weblog

Outlook LDAP address lookup requires VLV and companion Server Side Sorting controls. If these controls are blocked by DPS, you may get errors messages like "The server is not configured to pass through control 1.2.840.113556.1.4.473" or "The server is not configured to pass through control 2.16.840.1.113730.3.4.9"

To enable control pass-thru in DPS, use

dpconf set-server-prop [...] allowed-ldap-controls:vlv-request \
allowed-ldap-controls:1.2.840.113556.1.4.473

Sun Directory Server Entreprise Edition 7.0 aka DSEE 7.0 has just been released today and is available for download at http://www.sun.com/software/products/directory_srvr_ee/get1.jsp

The LAOG and LPG laboratories are pleased to invite you to their day of anniversaries
Thursday, October 15th, from 14h to 21h
to celebrate the 10 years of research in Planetary science and the 30 years in Astrophysics in Grenoble.

The JDBC URL structure indicated in the DPS doc set to access ORACLE databases is wrong somehow: Referring to the DPS admin guide, the db-url is in the form jdbc:vendor:driver://dbhost:dbport.

A correct db-url for Oracle is jdbc:oracle:thin:@localhost:1521:

Using "//" instead of "@" may lead to errors similar to the one below:

Snipplet from the Oracle EX logs:
28-SEP-2009 12:12:52 *
(CONNECT_DATA=(SID=orcl)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))) *
(ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=55625)) * establish * orcl
* 12505
TNS-12505: TNS:listener does not currently know of SID given in connect
descriptor

The next public OW2 Technology Council meeting will take place on Tuesday 29 September at INRIA Montbonnot (Grenoble).
See details on http://www.ow2.org/view/Events/OW2QuarterlyMeetingSept2009

The IBM DB/2 jdbc driver db2jcc.jar has a accompanying license file called db2jcc_license_cu.jar.

Both jar files must be part of the DPS java environment. If you don't, you'll get errors similars to "cannot connect to JDBC datasource .....  license is not present". To provide both jar files (driver and license), use dpconf command as follow:

$ dpconf create-jdbc-data-source -b sample -B jdbc:db2://hostname:50000/ -J file:/path/to/db2jcc_license_cu.jar -J file:/path/to/db2jcc.jar -S com.ibm.db2.jcc.DB2Driver db2-source

Corresponding LDIF entry in the proxy configuration file looks like that:

dn: cn=db2-source,cn=data sources,cn=config
dbUrl: jdbc:db2://hostname.domain:50000/
objectClass: top
objectClass: configEntry
objectClass: dataSource
objectClass: jdbcDataSource
driverClass: com.ibm.db2.jcc.DB2Driver
jarUrl: file:/usr/ds/sberthol/db2/etc/db2jcc.jar
jarUrl: file:/usr/ds/sberthol/db2/etc/db2jcc_license_cu.jar
dbName: sample
cn: db2-source
enabled: true
dbPassword: {3DES}3r1CipqhECC5E4JOLE8geyV3G9e9+QIq
dbUser: db2inst1

The "fOSSa" conference (Free/Open Source Software Academics) is co-organised by INRIA and OW2 Europe Local Chapter. It will review Open Source fundamentals (Business models, licenses, collaboration, communities, promotion, exploitation, sustainability) and will present innovating Open Source project as well as communities experiences. fOSSa is the first international Open Source Conference event located in Grenoble! The fOSSa audience mainly focuses on academia and research centres but does not close the door to industrials as in many cases academia needs industrials and vice versa: we believe that Open Source model can improve such kind of collaboration in a much more natural way.

Sun Microsystems participates to that event.

More info at http://fossa.inrialpes.fr/2009/

An interesting technical article has just been published about Sun's internal worldwide mentoring programs, including the SEED program I was part of in 2006.

By default, DPS access and error logs are stored in <instance_dir>/logs.  Default setting can be changed using the commands below:

$ dpconf get-access-log-prop log-file-name
log-file-name  :  logs/access

$ dpconf get-error-log-prop log-file-name
log-file-name  :  logs/error 

$ dpconf set-access-log-prop log-file-name:/a/path/to/a/new/location/access

$ dpconf set-error-log-prop log-file-name:/a/path/to/a/new/location/error

Unlike DS, DPS 6.3 etimes in the access log are in millisecs.

For sake of performance, DPS uses a timeThread that gets the time regularly (every 500ms only in DPS 6.3)  instead of performing a system call each time the current time is needed so etimes shown in access logs may be biased to a large extend and show 0ms when the effective etime is < 500ms. Conversaly , etimes may show a value of 500ms when the effective time is smaller.

TimeThread -----T1-----T2-----T3-----T4----T5    with (Ti- T()i-1)) = 500ms
DPS time retrieval example 1 |   |   => real value = 5ms, computed value is T2-T2 = 0
DPS time retrieval example 2    |       |   => real value = 15ms, computed value is T3-T2 = 500ms

The time "granularity" can be changed to accommodate with your needs in DPS 7.0 (available soon) but you can get a fix earlier (RFE 6601029) by contacting the Sun support team.

as I joined Sun Microsystems in May 1995 to work on OSI communication stacks...

Last week, I attended the Sun Directory Master Conference in SomerSet, NewJersey.

I gave a presentation about the next major revision of Sun Directory Proxy Server 7.0.
It was also a unique opportunity to meet with Sun Partners and discuss Identity and Directory deployments. 

On the way to the Sun Directory Master Event '09 in SomerSet, NJ, I stopped by to visit New-York. Weather was very nice and warm (30°C) and it was a pleasure to walk in Manhattan. I visited most of the main outdoor spots, Empire State Building, Central Park, 5th Avenue, Brooklyn Bridge, Greenwich Village, Times Square, Soho, etc.

I took the ferry from lower Manhattan to Staten Island to have a look at the Statue of Liberty. This was the second Statue of Liberty I could see in one week as a 3m tall copy offered by French sculptor Bartholdi stands in Roybon, a small town in France, not far from Grenoble (See below)

OpenDS will be integrated as part of the GlassFish Portfolio and Sun's open source identity management technologies to the GlassFish application server available on the Amazon Web Services cloud platform.

For more details, read the article in ITWorld