Page 1 of 1
unable login via designer
Posted: Wed Aug 19, 2015 12:26 pm
by peep
Installed IIS 8.7 client on windows machine .
this machine has IIS v11.3 clients as well.
installation is successful
how ever when I try to login using dsadm from v8.7 to Linux server A
Failed to authenticate the current user against the select service tier .
peer not authentication; nested exception is javax.ssl.SSLunverified exception:peer not authenticated.
This is LDAP registers .
how ever using same dsadm I am able to connect from 8.7 client installed on another windows machine to linux server A.
any thoughts or suggestion please shed some light ...
Thanks in advance.
Posted: Wed Aug 19, 2015 1:02 pm
by chulett
So... you are asking why you get an error attempting to use an 11.3 client to connect to an 8.7 server?
If that's
not what you are asking, you'll need to be more precise regarding what "this machine" is and what "server A" is and where exactly the 8.7 client was installed and what that has to do with 11.3...
Posted: Wed Aug 19, 2015 1:09 pm
by peep
No ..
Installed client DS 8.7 on windows machine A and connected linux server successfully.
how ever did the same on windows machine B and while connecting to linux server I am encountered by below exceptions
Failed to authenticate the current user against the select service tier .
peer not authentication; nested exception is javax.ssl.SSLunverified exception:peer not authenticated.
To me this is more like Client issue ..
Re: unable login via designer
Posted: Wed Aug 19, 2015 1:17 pm
by chulett
peep wrote:this machine has 11.3 ..
What did this mean? How does 11.3 come into the picture?
Re: unable login via designer
Posted: Wed Aug 19, 2015 1:22 pm
by peep
this windows machine has v11.3 DS client installed .
so basically both v11.3 and v8.7 clients are installed on our windows machines
Re: unable login via designer
Posted: Wed Aug 19, 2015 1:57 pm
by peep
Code: Select all
peer not authenticated; nested exception is:
javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
Exception type: java/rmi/RemoteException
Exception message: peer not authenticated; nested exception is:
javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
Exception stack trace:
java.rmi.RemoteException: peer not authenticated; nested exception is:
javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
at com.ibm.iis.isf.security.auth.javahttp.JavaHttpAuthenticationService.login(JavaHttpAuthenticationService.java:72)
at com.ibm.iis.isf.security.auth.impl.HttpAuthenticationService.login(HttpAuthenticationService.java:117)
Caused by: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
at com.ibm.jsse2.bc.getPeerCertificates(bc.java:133)
at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:128)
at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:572)
at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:180)
at org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:294)
at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:640)
at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:479)
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:906)
at com.ibm.iis.isf.binding.javahttp.runtime.JavaHttpServiceCreator.callOperation(JavaHttpServiceCreator.java:436)
at com.ibm.iis.isf.security.auth.javahttp.JavaHttpAuthenticationService.login(JavaHttpAuthenticationService.java:59)
... 1 more
Here is the error ...SSL
Posted: Wed Aug 19, 2015 2:07 pm
by chulett
Does the 11.3 client still work against an 11.3 server or has that stopped working as well?
Posted: Wed Aug 19, 2015 2:30 pm
by peep
v11.3 client is working fine .
v8.7 client connecting to v8.7 server have issue
Posted: Wed Aug 19, 2015 2:38 pm
by chulett
I asked because you've never been able to run two client versions at the same time, that's why in the past they gave you the MCM or Multi-Client Manager which allowed you to switch the active version.
HOWEVER, I'm not sure that's even possible any longer with the new topology. I'm going to need to rely on the kindness of (more informed) strangers here...
Posted: Wed Aug 19, 2015 7:33 pm
by peep
Hi Chulett I am sorry I know have confused you .
I am using MCM to connect to appropriate version.
It is possible to switch client versions to connect to appropriate server versions.
In this case is I am trying connect v8.7 server from v8.7 client .
In this v8.7 DS setup we are not using SSL or any https or any firewalls (fyi)
but the error message I see is SSL related .
Please scroll up to I have posted error message
I tried to put as much as info I can in the short message .
Thanks for taking your time out on this ...
Posted: Wed Aug 19, 2015 10:18 pm
by ray.wurlod
When you are logging in to DataStage using HTTP (port number 9080 by default), it temporarily switches to HTTPS (port number 9443 by default)while validating your password.
So it may be that your error is occurring during the password validation phase of your login.
Though why you are getting "peer not authenticated" messages is a bit of a mystery.
Posted: Thu Aug 20, 2015 7:11 am
by peep
Thanks for your insight ..
Peer not authenticated I doubt it has to do with SSL..
May be Java path?
I will open a ticket and post it here
Re: unable login via designer
Posted: Mon Aug 24, 2015 9:28 am
by peep
Root cause from my observation is I first installed v11.3 and then installed v8.7 .
So uninstalled and reinstalled v8.7 first then v11.3 .
Now both the versions are working perfectly .
sometimes I miss basic rules and start thinking for all other possible solutions .
Thanks for all your help...