Schronce.net Forums

[Lawson Administration] Re: SSO login error Resolved

Anonymous User — Wed, 09 Dec 2009 21:50:02 +0000

This problem was actually a Network Nic card issue where the Web Server could only communicate using one Nic Card. I discovered this while working with a member of the Network Team and realized I could not contact most of the Lawson servers.

[Lawson Administration] Re: SSO login error

Anonymous User — Fri, 04 Dec 2009 23:39:47 +0000

Just to give you a bit more to the puzzle. I did a netstat on Port 389 which is what is used to connect to the ldap and I found no entries. Suddenly, there was an established connection and I was able to sign into the Portal. I pulled up a form and inquired. Signed out and got the sso error again. Netstat showed Port 389 with no entries.

[Lawson Administration] Re: SSO login error

Anonymous User — Fri, 04 Dec 2009 15:50:31 +0000

Do you want me to show you a log error or that it failed on sso/ssocfginfo Right now inside the lase log is Caused by: java.net.ConnectException: Connection timed out: connect at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333) at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195) at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366) at java.net.Socket.connect(Socket.java:519) at java.net.Socket.connect(Socket.java:469) at java.net.Socket.(Socket.java:366) at java.net.Socket.(Socket.java:179) at com.sun.jndi.ldap.Connection.createSocket(Connection.java:346) at com.sun.jndi.ldap.Connection.(Connection.java:181) ... 33 more ; at com.lawson.lawsec.authen.LawsonAuthentication.getInitialDirContext(Unknown Source) at com.lawson.lawsec.author.mgr.PersistenceMgr.getSecurityConnection(Unknown Source) at com.lawson.lawsec.author.mgr.PersistenceMgr.getSecurityConnection(Unknown Source) at com.lawson.lawsec.util.ConfigurationLdap.getContext(Unknown Source) at com.lawson.lawsec.util.ConfigurationLdap.setTimeStamps(Unknown Source) at com.lawson.lawsec.util.ConfigurationLdap.readCfgModifiedOn(Unknown Source) at com.lawson.lawsec.util.ConfigurationLdap.checkForUpdate(Unknown Source) at com.lawson.lawsec.util.ConfigurationLdap.(Unknown Source) at com.lawson.lawsec.util.ConfigurationFactory.getConfiguration(Unknown Source) at com.lawson.lawsec.util.ConfigurationFactory.getConfiguration(Unknown Source) at com.lawson.lawsec.api.LawsonSecurity.readConfig(Unknown Source) at com.lawson.lawsec.api.LawsonSecurity.getConfig(Unknown Source) at com.lawson.lawsec.api.LawsonSecurity.getSecCheckStatus(Unknown Source) at com.lawson.lawsec.server.events.BaseEvent.initBaseEvent(Unknown Source) at com.lawson.lawsec.server.events.ServerConnCtlEvent.init(Unknown Source) at com.lawson.lawsec.server.SecurityEventHandler.run(Unknown Source) 2009-12-04 09:34:23 com.lawson.lawsec.default.SEVERE com.lawson.lawsec.server.events.ServerConnCtlEvent.NEW( ) java.lang.NullPointerException Stack Trace : java.lang.NullPointerException at com.lawson.lawsec.api.LawsonSecurity.getSecCheckStatus(Unknown Source) at com.lawson.lawsec.server.events.BaseEvent.initBaseEvent(Unknown Source) at com.lawson.lawsec.server.events.ServerConnCtlEvent.init(Unknown Source) at com.lawson.lawsec.server.SecurityEventHandler.run(Unknown Source) 2009-12-04 09:34:23 com.lawson.lawsec.default.SEVERE com.lawson.lawsec.server.SecurityEventHandler.run() SecurityEventHandler #11 got exception. com.lawson.lawsec.server.events.LawsonEventException:Got exception while accessing stream (write failed). Message: java.net.SocketException: Connection reset by peer: socket write error Stack Trace : java.net.SocketException: Connection reset by peer: socket write error at java.net.SocketOutputStream.socketWrite0(Native Method) at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:92) at java.net.SocketOutputStream.write(SocketOutputStream.java:136) at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65) at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123) at java.io.DataOutputStream.flush(DataOutputStream.java:106) at com.lawson.lawsec.util.Util.writeMsg(Unknown Source) at com.lawson.lawsec.server.events.BaseEvent.writeReply(Unknown Source) at com.lawson.lawsec.server.events.BaseEvent.writeReply(Unknown Source) at com.lawson.lawsec.server.events.BaseEvent.writeReply(Unknown Source) at com.lawson.lawsec.server.SecurityEventHandler.run(Unknown Source) Stack Trace : com.lawson.lawsec.server.events.LawsonEventException:Got exception while accessing stream (write failed). Message: java.net.SocketException: Connection reset by peer: socket write error Stack Trace : java.net.SocketException: Connection reset by peer: socket write error at java.net.SocketOutputStream.socketWrite0(Native Method) at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:92) at java.net.SocketOutputStream.write(SocketOutputStream.java:136) at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65) at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123) at java.io.DataOutputStream.flush(DataOutputStream.java:106) at com.lawson.lawsec.util.Util.writeMsg(Unknown Source) at com.lawson.lawsec.server.events.BaseEvent.writeReply(Unknown Source) at com.lawson.lawsec.server.events.BaseEvent.writeReply(Unknown Source) at com.lawson.lawsec.server.events.BaseEvent.writeReply(Unknown Source) at com.lawson.lawsec.server.SecurityEventHandler.run(Unknown Source) at com.lawson.lawsec.server.events.BaseEvent.writeReply(Unknown Source) at com.lawson.lawsec.server.events.BaseEvent.writeReply(Unknown Source) at com.lawson.lawsec.server.events.BaseEvent.writeReply(Unknown Source) at com.lawson.lawsec.server.SecurityEventHandler.run(Unknown Source)

[Lawson Administration] Re: SSO login error

schroncd — Fri, 04 Dec 2009 07:33:47 +0000

It's not a Portal issue, it's an authentication issue. Are you using Tivoli or ADAM? And send me he exact error that you are getting

[Lawson Administration] SSO login error

Anonymous User — Thu, 03 Dec 2009 15:22:51 +0000

A few weeks ago WebSphere went or was taken down and the Portal has had major issues ever since. LID is able to sign on but the Portal gets the SSO error. Some times after a reboot it will let you in to the Portal but after that the SSO error comes back. I can not get into the LDAP using LSA , however, JExplorer does connect and can view information. Lase is running and WebSphere seems to be up and running. Initially it was getting an invalid address but after some changes that Lawson requested it is now getting a NULL POINTER EXCEPTION on Security. Any thoughts on what happened and what is wrong with the Portal.

[Lawson Administration] Re: New scripts available PU9.sh

schroncd — Tue, 03 Nov 2009 17:11:41 +0000

I did that in the 7 and 8 world.. But it's a LITTLE bit tougher in 9.0 land.. I'm in the process of documenting several DR scenarios for clients. I'll be glad to help you after I complete it.. Give me a month or so..

[Lawson Administration] Re: New scripts available PU9.sh

ichiben — Tue, 03 Nov 2009 16:14:46 +0000

Hi David, Did I every send you that script? I was on here looking for disaster recovery stuff. I thought you posted something once about having a completely replicated environment in another state and all you had to do to switch was change the router? I want to go that way but we are getting some suggestions that we should be able to safely replicate everything to a differently named host but that seems like trouble. Ben

[Lawson Administration] Re: LAWSON LSF9 and ADAM

jecraton — Thu, 04 Jun 2009 21:05:07 +0000

I'm trying to do a LOADUSER for a single profile under LSF9. Here's my XML code. The user exists in AD and we are authenticating through ADAM, for ESS. The ESS product line is PROD. This user isn't authenticating after I add them to LAUA. Can you see anything wrong with this format?

[Lawson Administration] Dev refresh - lsf9/apps 9

Anonymous User — Wed, 27 May 2009 15:14:31 +0000

I want to refresh dev. In the past (on 8.03/8.03) where both my dev and prod db were on same instance I simply copied data from my prod db over my dev db. Now that I am LSF9.0.0.4/apps 9.0.0.4 and have a dev instance and a prod instance on my db server I have a question. Do I refresh the gen and logan db on the dev instance too?

[Lawson Administration] Re: ProcessFlow Integrator alternative?

schroncd — Sun, 26 Apr 2009 23:32:22 +0000

I can't assist you with 3rd party products, as I don't know of any that meld with Lawson's Security - but I CAN tell you that the PFI marriage of BCI and PFlow made in heaven.. Life if VERY simple when you can write processflows that interact seamlessly with remote non-lawson systems.

[Lawson Administration] Re: LDAP Servers

schroncd — Sun, 26 Apr 2009 23:29:15 +0000

That functionality is available in LSF 9.0.1.3. I don't believe the 9.0.0 release can handle it. We just did a client who connects to ldaps in the US, Canada, Europe and Chine

[Lawson Administration] Re: LAWSON LSF9 and ADAM

schroncd — Sun, 26 Apr 2009 23:27:04 +0000

Boy... you certainly don't ask EASY questions.. but I think I have an answer that will solve your boss' issues and yours as well.. Write a frontend in your choice of languages to collect and validate information from the user, then parse the data into the format required by loadusers. Then call loadusers to insert the data into ldap/ Everybody's happy!!

[Lawson Administration] LAWSON LSF9 and ADAM

jecraton — Thu, 23 Apr 2009 19:51:52 +0000

My situation: We are going to be using LSF9 ESS, under windows, with a corporate Active Directory domain for authentication. All users for ESS already have AD accounts set up. When adding ESS portal users in LSF9, most if not all articles reference LOADUSERS as a way to automatically update a LAWSON profile and enable it for ESS. My problem: my bosses don't want to use loadusers. They want users to register themselves on a web page, check their data against their entry in payroll, and then have a program connect directly to ADAM, do all the user setup, and have that person enabled for LAWSON instantly. I have no idea how to do this. I've used System.Directoryservices under C# to create AD users for LSF8, but I don't know how to connect to an ADAM instance and do the user setup for ESS under LSF9. Has anyone written any code for this? Language matters not.

[Lawson Administration] LDAP Servers

jyeatman — Mon, 06 Apr 2009 21:35:06 +0000

LSF9 installation guide documents that multiple Lawson environments require a separate instance of LDAP for each environment. Does it follow that multiple LDAP instances can use a single Lawson environment?

[Lawson Administration] ProcessFlow Integrator alternative?

drhoades99 — Thu, 26 Mar 2009 13:04:00 +0000

I am looking for information re Lawson's ProcessFlow Integrator--specifically whether any Lawson users out there are using another third-party product successfully. We use BCI and Mercator currently and are looking to upgrade to the ProcessFlow Integrator. However, we wanted to know if anyone was using another product, the pros and cons of using that product and whether it handles security successfully. We currently integrate data in nightly processes from several other applications in the company. Additionally, we have to map data where the origin's format differs from the destination's format. Any information you could provide about your workflow integration process and your satisfaction level with it, would be greatly appreciated.

[Lawson Administration] Re: New scripts available PU9.sh

schroncd — Mon, 23 Feb 2009 17:25:12 +0000

I *LIKE* it.. I'll look at turning it into the default, providing the system is fixed IP and not DHCP.... Please mail me your completed version. Thanks!

[Lawson Administration] Re: New scripts available PU9.sh

ichiben — Mon, 23 Feb 2009 14:45:57 +0000

I tweaked your pu9.sh script a little to also do a traceroute of the ip addresses so you can see who's logged into the portal. HEADER="User(s) between $STARTHR:$STARTMIN and $HR:$MIN" if [ -f /tmp/LIST.$$ ]; then echo "`grep -v ^$ /tmp/LIST.$$ | sort -u | wc -l` $HEADER" #vic is tmp file with the unique ip addresses from the web log rm vic echo " `awk ' { arr[$1]=$0 } END { for ( key in arr ) { print arr[key] }} ' /tmp/LIST.$$` " >>vic while read line ; do traceroute $line done < vic Thanks for all your scripts.

[Website] Re: dbcreate gen fails

schroncd — Thu, 15 Jan 2009 00:34:13 +0000

Your ldap is not responding. It is either installed incorrectly or you are using the wrong user id/password to access it. Remeber that you must have a unique ldap for each environment

[Website] dbcreate gen fails

Anonymous User — Wed, 14 Jan 2009 21:00:37 +0000

Help....I am trying to do a new install of LSF9 and I am getting a failure on the following command dbcreate gen . . . 0 files were created 0 files already existed. 0 files were assigned to view dbspaces. 164 errors occurred. Fatal: [install-ldas.pl] exit status 1 Error: Fatal: [install-ldas.pl] exit status 1 Error: Activating Lightweight Data Access System failed. **** 2009.01.14 14.37.13 INSTALL Failed. The environment file for the setup is exactly the same as it was when the first environment was installed, but yet it fails on this step. Any ideas?

[Weblog Comments] Re: Your post on Terrorism...

suztours — Fri, 26 Dec 2008 07:05:55 +0000

Hey again David - unfortunately, many of those people who you believe "do" have a clue, would like to dismantle not only a few communities in Judaea & Samaria but all of Israel! The charters of both the Fatah and Hamas call for Israel's destruction - that has NEVER changed. In 1974, the Arab League with the PLO as it's "voice", agreed to what they called the "Step Program" - meaning - if we can't get rid of Israel altogether at once, we'll do it step by step. That commitment has never changed, no matter the "treaties" signed by Egypt and Jordan. And too many Western, anti-Israel voices (James Baker, Zbignew Brezinski, the New York Times, the LA Times, the Washington Post, CNN, BBC, the US State Department, and many secular Jews) have joined that call to dismantle and destroy Israel. It's for various reasons - in the case of Baker & Brezinski, it's because they personally hate Jews; for the media, it sells papers & air time; for the secular Jews, it's because they hate being Jewish and just want to be accepted in the world. The US State Department has been anti-Israel ever since Truman recognized the State of Israel in 1948 against the advice of the State Department (read: "Present at the Creation by Dean Acheson", page 258 and others, and "The Arabists by Robert Kaplan"). The US Government while not recognizing Jerusalem as the capital of Israel also, in essence, does NOT really recognize Israel's existence... using Israel as a jumping-off point for incursions into the Middle East quickly became its raison d'etre for "allowing" Israel to continue to exist! [And by the way, that "foreign aid" that Israel gets from the US each year, by law & contract, must be spent ONLY in the USA - it's to support the US Defense Industry!] A HUGE part of the problem is this: the world has still not been able to recognize the right of JEWS to live wherever they want. You think I'm kidding; I'm not - imagine if you will that you, as a white, Southern speaking, secular man, decide to move to, oh, Chicago - but when you go there to buy a house, over and over again, though you see "for sale" signs on the lawns of many, you are told there are none available. But, you say, my great-great-great-great-grandparents lived here; this place is in my blood; just because my family moved south, and we became secular doesn't mean that I shouldn't be allowed to live in this northern, black, religious neighborhood! THAT is what the Jews who want to live in Judaea & Samaria are, in effect, being told. One last comment about those who "do" (in your words) have a clue - Jerusalem has been conquered something like 39 times, ruled by many peoples, leveled and rebuilt (we know - we moved the rubble and did excavations)... in all that time and through all that horror, JEWS have lived here and will continue to live here in Jerusalem and throughout Eretz Yisrael (did you know that includes parts of the territory on the EAST side of the Jordan River?). There will be no "peace on earth" until those that want to destroy either change their minds (which they won't) or are wiped out. I'm afraid that won't happen until Messiah comes (and he ain't come yet... contrary to what Christians may think). suzanne

[Weblog Comments] Re: Your post on Terrorism...

schroncd — Fri, 26 Dec 2008 04:37:29 +0000

Living, as you do, in the face of those events, no doubt gives you a MUCH more educated view of what is happening and what has caused it, and you present a thoughtful and fact-filled case. But even from my distant and obviously tainted view I can tell this much... Whatever is being done ain't workin'.. I'm suggesting that we look at the suggestions of people who *DO* have a clue and have offered alternatives - because until we can come to terms with ALL the religious fanatics (Muslims, Shiites, Mohammedans, Baptists, Presbyterians, etc...) there will be no peace in this world. "Peace on Earth. Good will towards men." It's just a little phrase I hope to see come true...

[Weblog Comments] Your post on Terrorism...

suztours — Thu, 25 Dec 2008 17:54:14 +0000

... tells me that you really don't know anything about it works. It's NOT poverty that drives terrorism - it's ideology - and over here in Israel, we know it clearly. The Palestinian Authority has been GIVEN billions of dollars and their people are still starving - and that has nothing whatsoever to do with Israel or our security barrier. It has only to do with the FACT that all that money (starting, perhaps, with the 5 billion in gold that Arafat stole from a bank in Beirut back in the 1970s) has gone into buying or making weapons and into people's POCKETS - and not to the people who need the money either! When Israel left Gaza in August 2005, we left wonderful greenhouses, all ready to be taken over and exploited for income. We were even ready to work with those who would operate the greenhouses in helping to export the produce. Instead, the people of Gaza decided to go another way - they destroyed the greenhouses worth millions of dollars and stole the materials to use in making mortars and rockets. When those who were destroying them were asked why they did it, the response was quick and accurate - they would never work in facilities built by Jews and they would do all in their power to kill as many Jews as possible, even with the materials left by the Jews for their benefit. I'm sure this was never mentioned on the nightly news programs over there! The next part of that topic about which you obviously know nothing is the idiotic idea that Israel should give up our ancient heartland of Judaea & Samaria. First, there were plenty of Jews living in those areas prior to 1948 who were forced out by Jordan during the Israeli War of Independence (look up Etzion Bloc, for one, if you don't believe me). So, why shouldn't Jews be allowed to return to where they had lived just fine - oh, maybe you didn't know that Hevron has been Jewish since Abraham bought a cave there for a burial place and King David was king there for 7 years before he conquered Jerusalem, but in 1929, the Jews of Hevron were massacred by their Arab neighbors because someone passed a rumor that the Jews were destroying the Al-Aksa Mosque in Jerusalem! Second, surely you have already seen what happened when we gave up Gaza - no peace ensued at all - the rockets have been launched at us daily (more than 60 just yesterday - and by the way, at least several every day of the so-called "truce" to which Hamas had agreed...). We will NOT return to the "1967 cease-fire lines" (they were never a border), and if we did, it would not be with the Pals taking over - we did not take that land from them (the war was with Jordan, which has disavowed any connection to Judaea & Samaria). As for the Golan, it has already been determined a long time ago (and continuing) that Bashir Assad has no desire for real peace with Israel, only a launching pad - we remember well situation on the Golan Heights when his father controlled them - firing at Israel every day from atop that strategic spot. The other concern on the Golan Heights is from environmentalists, as Syria has the worst record in the region for sewage control, as the people simply throw their refuse in the wadis... can you imagine if Syria puts the million people it has promised to put on the Golan Heights and they all throw their refuse into the wadis that run down to the Sea of Galilee? In 10 years (and this is from the experts), that body of water (our main water supply and don't forget that due to the treaty with Jordan, we supply a goodly amount of water to them, also), will become a second "dead sea". One last note that I'm sure you won't like and will probably mark me as racist, which of course, isn't true - historically, Arabs are from the Arabian Peninsula - they arrived here en masse in the mid-7th century as conquerers under the Islamic Flag - slaughtering whoever would not convert to Islam, so many (but not all) fled. The Arabs who today live in Israel for the most part, came in the early 20th century as they saw the Jews returning as THEY said that since the Jews have come back, now there will be work for everyone! Before that, the place was a wasteland (ask Mark Twain). So, for every Arab that insists this is his "homeland" there are thousands of Jews who can prove it... in fact, the whole idea of a "Palestinian Arab Nation" is a myth that has been promoted by the western left & media to such an extent that many Arabs even believe it now... but their leadership KNOWS and has admitted that it's a myth used for political expediency in their war against the Jews. Ask any so-called "Palestinian" to name the previous kings or presidents of "Palestine", to share the history of their so-called "country", etc. They can't, except to copy Jewish history, which many have done and turned it into their own! When Reagan spoke those words to Gorbachev, he didn't do so thinking that Gorbachev or anyone would send suicide bombers to attack people in West Berlin or across western Europe - for Israel to tear down the security barrier now would put me and millions of Israelis at immediate risk. We are SURE of that... as we have experienced it for decades. This security barrier has given us increased security coverage and reduced the number of attacks significantly... in the first 3 months of 2003, for instance, approximately 90 suicide attempts were stopped because of the increased coverage, checkpoints, etc., all provided by the presence of the security barrier. Don't think that since you haven't heard about it, it's not true - over here, we have attacks daily - stabbings, shootings, rockets, etc. - they are simply NOT reported in the western media! The other thing that security barrier does is protect TOURISTS who come here to see this beautiful place and certainly don't want to be running to bomb shelters for cover or sending their loved ones home in body bags... As a tour guide, I am grateful for the security barrier as it allows me to actually do my job in safety and with assurance that my clients will go home happy and with all their body parts in tact! So, David - while you are smart man with a lot of good ideas rumbling around in your head, try to stay within the areas of your own expertise and not try to comment about which you really know nothing! love, suzanne

[Weblog Comments] Methinks...

R.J. Carter — Thu, 18 Dec 2008 16:43:31 +0000

...it's time for a Digg icon. Why? Because I'm lazy. :)

[Lawson Administration] Text File Report Listing User to Form Relationships

Anonymous User — Fri, 21 Nov 2008 08:26:31 +0000

Hi, I'm an auditor and have several Lawson 9 clients. I'm looking for a script (I assume at the LDAP layer) that will give me this relationship: User -> Role -> SecClass -> FormID I know I can get this in PDF or HTML, but I would like a script that I can use to get this to a text file. Any ideas out there on how to accomplish this? Thanks, Carleton

[Weblog Comments] taxes

Suzanne Pomeranz — Thu, 23 Oct 2008 10:08:03 +0000

The BEST tax plan is the one that eliminates INCOME tax (which is a new thing in the life of the USA anyway) or at least reduces it substantially ACROSS THE BOARD and certainly does NOT raise taxes on any person or business which actually creates and maintains JOBS!

[Website] Re: LEM Startup Error

Anonymous User — Wed, 22 Oct 2008 18:47:51 +0000

I have received your LEM product and when I start LEM, I get the following error: [lawson@lsftest1/home/lawson # ./lem.sh ./lem.sh[41]: 0403-057 Syntax error at line 472 : `)' is not expected. I cannot figure out if this is in the cfg file, or the sh file. Thanks for your help. Burt

[Weblog Comments] Re: U.S. Army deployment on Americans

Jim PIpkin — Thu, 16 Oct 2008 00:59:41 +0000

Only failed states have to use their military on their own people. Usually they can just hire half of the troublemakers to kill the other half. Repeatedly.

[Weblog Comments] Rocky Mountain Oysters

Jim PIpkin — Thu, 16 Oct 2008 00:56:29 +0000

This close to Election Day, Rocky Mountain Oysters will probably leave less of a bad taste in your mouth than what passes for political coverage. Actually, I enjoy them, with vinegar and hot pepper and a LOT of bourbon!

[Weblog Comments] U.S. Army deployment on Americans

Chelsea Schalton — Fri, 26 Sep 2008 19:43:06 +0000

Hmmmm..... Well, considering the National Guard's dismal performance at Kent State University oh, so many years ago, perhaps having a team of well trained personnel with non-lethal means of control at their disposal IS a better solution. Then again, over the past five years, the NG has also received much better combat training which they should use to enforce the laws of the U.S. while respecting the rights of our citizens. IMHO, it's NEVER a good policy to unleash a military force on civilians. It's just not a fair fight. And you have to wonder at the motivations of a government that would do so. JM2C Chelsea

[Weblog Comments] Re: Hummus

schroncd — Mon, 08 Sep 2008 20:47:22 +0000

OK.. So go over to the "Guy's Cookbook Forum" and post those recipes!!