Issue while running LDAP Sync job

Hi All,

I created a new Ldap object and getting errors while running Ldap sync job

Here is the error :

2010-09-03 06:01:06 EDT: Starting Sychronization for ldap config object >>>ADAM_LDAP<<< ...

2010-09-03 06:01:06 EDT: Building SynchronizationContext Object ...

2010-09-03 06:01:06 EDT: Getting the location object - "config" from repository

2010-09-03 06:01:06 EDT: Reading password from file: /usr/local/export/server/6.0.1/dba/config//rep1/ldap_08016fe9807f5110.cnt...

2010-09-03 06:01:06 EDT: Unexpected Error. Caused by: [DM_LDAP_SYNC_E_EXCEPTION_ERROR]error: "Failed to decrypt string"

2010-09-03 06:01:06 EDT: ERROR: DmLdapException:: THREAD: [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'; MSG: [DM_LDAP_SYNC_E_EXCEPTION_ERROR]error: "Failed to decrypt string"; ERRORCODE: 100; NEXT: null

at com.documentum.ldap.internal.sync.SynchronizationContextBuilder.setBindPswd(SynchronizationContextBuilder.java:255)

at com.documentum.ldap.internal.sync.SynchronizationContextBuilder.buildSynchronizationContext(SynchronizationContextBuilder.java:51)

at com.documentum.ldap.LDAPSync.prepareSync(LDAPSync.java:292)

at com.documentum.ldap.LDAPSync.processJob(LDAPSync.java:156)

at com.documentum.ldap.LDAPSync.execute(LDAPSync.java:66)

at com.documentum.mthdservlet.DfMethodRunner.runIt(Unknown Source)

at com.documentum.mthdservlet.AMethodRunner.runAndReturnStatus(Unknown Source)

at com.documentum.mthdservlet.DoMethod.invokeMethod(Unknown Source)

at com.documentum.mthdservlet.DoMethod.doPost(Unknown Source)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:763)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)

at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:225)

at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:127)

at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:283)

at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:175)

at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3214)

at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)

at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)

at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:1983)

at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:1890)

at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1344)

at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)

at weblogic.work.ExecuteThread.run(ExecuteThread.java:181)

Any suggestions ?

Regards

Sanjay

Find more posts tagged with

Comments

mszurap

Hi,

Have you tried to set the ldap config password once again from Documentum Administrator?

msk

Sorry for replying late. Issue got resolved, problem was with aek.key file.

Lakshminarayanan

Hi - I am getting the same issue. Can you please let me know what did you do with the aek.key to get it fixed ?

Thanks!

- Lakshminarayanan

bverma

Hi,

I am also getting the same issue. The error stack trace is as follows:

2011-01-20 04:06:45 EST: Unexpected Error. Caused by: [DM_LDAP_SYNC_E_EXCEPTION_ERROR]error: "Failed to decrypt string"

2011-01-20 04:06:45 EST: ERROR: DmLdapException:: THREAD: http-0.0.0.0-9080-1; MSG: [DM_LDAP_SYNC_E_EXCEPTION_ERROR]error: "Failed to decrypt string"; ERRORCODE: 100; NEXT: null

at com.documentum.ldap.internal.sync.SynchronizationContextBuilder.setBindPswd(SynchronizationContextBuilder.java:255)

at com.documentum.ldap.internal.sync.SynchronizationContextBuilder.buildSynchronizationContext(SynchronizationContextBuilder.java:51)

at com.documentum.ldap.LDAPSync.prepareSync(LDAPSync.java:349)

at com.documentum.ldap.LDAPSync.processJob(LDAPSync.java:195)

at com.documentum.ldap.LDAPSync.execute(LDAPSync.java:70)

at com.documentum.mthdservlet.DfMethodRunner.runIt(Unknown Source)

at com.documentum.mthdservlet.AMethodRunner.runAndReturnStatus(Unknown Source)

at com.documentum.mthdservlet.DoMethod.invokeMethod(Unknown Source)

at com.documentum.mthdservlet.DoMethod.doPost(Unknown Source)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)

at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)

at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:179)

at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84)

at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)

at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:104)

at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:157)

at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)

at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:241)

at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)

at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)

at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)

at java.lang.Thread.run(Thread.java:595)

Caused by: DmLdapException:: THREAD: http-0.0.0.0-9080-1; MSG: [DM_LDAP_SYNC_E_EXCEPTION_ERROR]error: "Failed to decrypt string"; ERRORCODE: 100; NEXT: null

at com.documentum.ldap.internal.sync.SynchronizationContextBuilder.getBindPasswordFromFile(SynchronizationContextBuilder.java:837)

at com.documentum.ldap.internal.sync.SynchronizationContextBuilder.setBindPswd(SynchronizationContextBuilder.java:249)

... 28 more

Caused by: DfException:: THREAD: http-0.0.0.0-9080-1; MSG: [DM_CRYPTO_E_DECRYPTTEXT_FAILED]error: "Failed to decrypt string"; ERRORCODE: 100; NEXT: null

at com.documentum.fc.client.impl.crypto.CryptoUtils.decryptText(CryptoUtils.java:394)

at com.documentum.fc.client.DfClient$ClientImpl.decryptText(DfClient.java:481)

at com.documentum.ldap.internal.sync.SynchronizationContextBuilder.getBindPasswordFromFile(SynchronizationContextBuilder.java:826)

... 29 more

Caused by: DfException:: THREAD: http-0.0.0.0-9080-1; MSG: [DM_CRYPTO_F_KEYSTORE_INIT]fatal: "Unable to initialize key store at UNKNOWN"; ERRORCODE: 100; NEXT: null

at com.documentum.fc.client.impl.crypto.AEKFile.<init>(AEKFile.java:35)

at com.documentum.fc.client.impl.crypto.CryptoUtils.initCryptoEx(CryptoUtils.java:88)

at com.documentum.fc.client.impl.crypto.CryptoUtils.initCrypto(CryptoUtils.java:63)

at com.documentum.fc.client.impl.crypto.CryptoUtils.checkForAEK(CryptoUtils.java:571)

at com.documentum.fc.client.impl.crypto.CryptoUtils.decryptText(CryptoUtils.java:390)

... 31 more

2011-01-20 04:06:45 EST: WARNING: **** Skipping Ldap Config Object - majors_LDAP ****

Can you please reply with the fix? What was the issue with aek.key file?

Lakshminarayanan

we solved the issue. We found out that the envionment variables were missing on CS host (Solaris).

Ensure that the environemnt variables required for Documentum on the CS Host are properly set.

If Unix host ensure that DM_HOME, DOCUMENTUM_SHARED, DOCUMENTUM are intact.

Alternatively try running the LDAP method manually from command prompt :

From CS ADmin Guide:

#############
You can execute the dm_LDAPSynchronization tool manually from the command line.
The syntax is
java com.documentum.ldap.LDAPSync -docbase_name repositoryname
-user_name superuser_login -method_trace_level integer -full_sync true
where repositoryname is the name of the repository, superuser_login is the login for a
Superuser, and integer is the required trace level for the method.

#############

Good luck!

Lakshminarayanan

somehow the environment variables (properly set when CS was installed) have been messed up later!!.. hence have a check on this.