Login
Register
Search
Home
Forums
Jobs
LawsonGuru
LawsonGuru Letter
LawsonGuru Blog
Worthwhile Reading
Infor Lawson News Feed
Store
Store FAQs
About
Forums
Infor / Lawson Platforms
S3 Systems Administration
LASE dies
Home
Forums
Jobs
LawsonGuru
LawsonGuru Letter
LawsonGuru Blog
Worthwhile Reading
Infor Lawson News Feed
Store
Store FAQs
About
Who's On?
Membership:
Latest:
HireIQ
Past 24 Hours:
0
Prev. 24 Hours:
0
Overall:
5264
People Online:
Visitors:
425
Members:
0
Total:
425
Online Now:
New Topics
Lawson S3 Procurement
Tolerance Settings
3/31/2025 2:01 PM
I've been trying to set a tolerance for some t
Dealing with Lawson / Infor
Printing Solutions other than MHC
3/27/2025 1:00 PM
What are others using for printing solutions besid
Lawson S3 Procurement
Green check marks in Lawson 9.0.1
3/20/2025 4:55 PM
Hi, How to remove green check mark on items when o
Lawson S3 HR/Payroll/Benefits
Pay Rate History to Show All Positions
2/26/2025 3:34 PM
Does anyone know how to modify payratehistory.htm
Infor CloudSuite
How to build a Pre-Prod tenant
2/7/2025 1:28 AM
After we finished our implementation and ended our
Lawson S3 Procurement
Browser issue with RQC Shopping
1/28/2025 5:49 PM
Since the recent Chrome/Edge updates, our RQC shop
Lawson S3 Procurement
S3-Procurement New Company
1/22/2025 10:38 PM
My Accounting Department has created a new Company
S3 Customization/Development
JUSTIFIED RIGHT
1/15/2025 7:41 PM
Is there a way in Lawson COBOL to make a character
S3 Systems Administration
ADFS certificate - new cert
12/3/2024 9:38 PM
The certificates on the windows boxes expired and
Lawson S3 HR/Payroll/Benefits
Post Tax Benefit Plan Table
11/14/2024 9:16 PM
Hi, totally new to Laswon. I have a repor
Top Forum Posters
Name
Points
Greg Moeller
4184
David Williams
3349
JonA
3291
Kat V
2984
Woozy
1973
Jimmy Chiu
1883
Kwane McNeal
1437
Ragu Raghavan
1375
Roger French
1315
mark.cook
1244
Forums
Filtered Topics
Unanswered
Unresolved
Announcements
Active Topics
Most Liked
Most Replies
Search Forums
Search
Advanced Search
Topics
Posts
Prev
Next
Forums
Infor / Lawson Platforms
S3 Systems Administration
LASE dies
Please
login
to post a reply.
19 Replies
0
Subscribed to this topic
27 Subscribed to this forum
Sort:
Oldest First
Most Recent First
Author
Messages
Brian K
New Member
Posts: 0
8/18/2009 3:07 PM
We went up on LSF9.0.0.5 in February of 2009. Since then we have had issues with LASE dying every once and awhile. We have been working with Lawson on resolving this issue. It occures (on average) once every other week. We can restart the lase process and everything is OK, but we are really trying to figure out how to overcome the issue.
We have applied about 4 PTs that have not corrected the issue. Is there anyone else that is or has experienced this issue? Did you resolve it?
Thanks!
Brian
Jimmy Chiu
Veteran Member
Posts: 641
8/18/2009 7:11 PM
Split
Check your lase.log under LAWDIR/system, is it filling up Got exception while reading from connection errors? I have to clear the log every other week because it's filling up too fast.
Brian K
New Member
Posts: 0
8/18/2009 8:51 PM
Split
Actually, we archive the log files everyday, but the following (with the last error repeated ) is all that we're getting in lase.log:
Tue Aug 18 07:00:08 2009: Security Environment terminated with an exit status of: 0
Tue Aug 18 07:00:08 2009: Security Environment Version 9.0.0.5.602 2009-05-27 04:00:00 (200805) Stopped.
Tue Aug 18 07:00:09 2009: Security server 'default' failed to stop, killed.
08/18/2009 07:00:25 getuserenv: Pid 241918
241918: Could not get SecCtx
241918: Error number = 111
241918: Error message =
241918: Error occured: Error (Result=1)
241918: UserName = lawson
Alex Tsekhansky
Veteran Member
Posts: 92
8/19/2009 1:48 AM
Split
Brian - that message is dated 7am. Was that when LASE died, or was that when you brought up (or down) the system before/asfter the backup?
I would be curious to see messages around LASE dying event.
Thanks.
Alex.
Brian K
New Member
Posts: 0
8/19/2009 12:36 PM
Split
Hi Alex,
Those are the messages around lase dying. I think that it died at 7:00:09, and then until we brought it back up, everytime a user tried to access something, we got the thread:
08/18/2009 07:00:25 getuserenv: Pid 241918
241918: Could not get SecCtx
241918: Error number = 111
241918: Error message =
241918: Error occured: Error (Result=1)
241918: UserName = lawson
With different UserNames.
Then at 7:18, restarted lase and we get this in the log file:
Tue Aug 18 07:18:39 2009: Timeout value is adjusted to 30 Secs
Tue Aug 18 07:18:39 2009: Security Environment Version 9.0.0.5.602 2009-05-27 04:00:00 (200805) starting.
Tue Aug 18 07:18:39 2009: Security Environment Version 9.0.0.5.602 2009-05-27 04:00:00 (200805) started.
Security Server: Initializing default...
Brian K
New Member
Posts: 0
8/19/2009 1:24 PM
Split
Also, to clarify, at 7:18/7:17, we restarted lase.
Lonnie
New Member
Posts: 1
8/19/2009 2:48 PM
Split
Our LASE issues have always been related to LDAP server going down. At least that has been our experience.
John Henley
Posts: 3351
8/19/2009 2:53 PM
Split
Brian, are you on Windows or Unix or iSeries? What LDAP are you using-TDS or ADAM?
John Henley
Posts: 3351
8/19/2009 3:12 PM
Split
If you're running on TDS, one issue is that DB2 requires some "care and feeding", and if not properly attended to, causes TDS to fail, in turn bringing LASE down.
Jimmy Chiu
Veteran Member
Posts: 641
8/19/2009 5:36 PM
Split
Is there a error entry in your LADB log file corresponds to the LASE log file at the time of failure?
Brian K
New Member
Posts: 0
8/19/2009 6:22 PM
Split
How do we "care" for TDS? We asked Lawson this too and only were given one thing to do to clean up TDS.
We run Unix, AIX, TDS -DB2, and have an Oracle database.
Brian K
New Member
Posts: 0
8/19/2009 6:24 PM
Split
In ladb, we only get errors after the fact:
Tue Aug 18 07:00:25 2009: [PO30] GetDbAuthInfo() Cannot access PROD with a null RMId
Tue Aug 18 07:01:32 2009: [PO20] GetDbAuthInfo() Cannot access PROD with a null RMId
Which to me, these make sense. LASE is dead and doesn't know what the RMid is, so it calls it null.
John Henley
Posts: 3351
8/19/2009 6:57 PM
Split
the question was whether or not there are errors in the LDAP log, not LADB log.
Brian K
New Member
Posts: 0
8/19/2009 8:17 PM
Split
I couldn't find anything in LDAP logs around the time that LASE died.
I am very inexperienced with TDS, but the log files that I have checked in the past are:
/home/idsldap/sqllib/db2dump
/usr/lsfprod/idsslapd-idsldap/logs
Are there any others that I should be interested in?
Bart Conger
Advanced Member
Posts: 18
8/19/2009 8:34 PM
Split
Validate your sso/ldap resource data is good.
Run:
ssoconfig -c
Option 5 (manage)
Option 6 (export service and identity info)
Option 1 (export ALL)
Enter ALL (export ALL identities)
Save the file.
search for null:
grep -i null
| lashow or > to file
See if there is an actual record with null for a value. If so, you may should be able to then delete the record.
Mike Gauthier
New Member
Posts: 2
8/20/2009 2:28 PM
Split
I can't offer Unix specific help, but this may be something to consider.
We run i/Series with TDS, and we recently had an issue where a pending constraint on an LDAP object cause LASE to fail. We had to find and change the status of the pending constraint.
One thing that lead us to the error was the job log for IBM Directory Server (QDIRSRV). The joblog indicated a SQL error occuring when were trying to launch LASE. IBM documents indicates that when a constraint is in "check pending" status - reads are not allowed.
Brian K
New Member
Posts: 0
8/20/2009 5:20 PM
Split
Hi Bart,
I did what you asked just to make sure, but there are no null entries (except in the SSOP entry for HTTPS) for users.
The reason why I am getting NULL in the error file is because lase died. If you log into portal, then stoplase, and then in portal try to hit a form, you will get the same entries in your lase.log. At least that's how it is in our test and prod environments.
Thanks for the suggestion.
Brian
Jwiff
Basic Member
Posts: 12
8/20/2009 10:14 PM
Split
Brian,
We had something very similar at the begining of the month. Is your LDAP on a different server than you application? (ours is)
Bottomline: We had an intemitent problem with the DNS server between the two. Only found it because we noticed a pattern that it would occur on the :46 & :52 after each hour. Ends up that some other app in the system had a job that did a mess of DNS lookups and slowed down our system enough at those times to cause the problem. Found it by running ping from the app server to the LDAP -- it would stop pinging, the SecCtx error would occur, and a RMid type error would show up on either the ladb or latm log, just depends on what folks were doing. Network folks said we were doing a 'reverse lookup' and the primary DNS server had problems (ends up a bad fan), bounced to the secondary, but because it was a 'reverse lookup', bounced between the 2 long enough to time out - causing the 'LDAP' error.
On a different thought (not related to SecCtx errors), when we first installed LSF9006, lase would not stop until we stopped it twice. We are not sure if we found the solution, but (were use LID) when we delete users, we were not removing them from the LDAP (using the Lawson Security Administrator). Found that order counted too. Now: delusers (from LID); remove from LSA; remove user from UNIX (smit). A thread on this is on the LAWSON Community.
Good luck.
Jimmy Chiu
Veteran Member
Posts: 641
8/23/2009 2:32 AM
Split
Brian,
Can you check your ldap server log and and check for yor ldap server network connection error during the time lase went down? I am starting to think your LDAP server had network outage or was dropped from the domain briefly. Something external maybe causing this.
Brian K
New Member
Posts: 0
9/8/2009 4:31 PM
Split
All of the log files and network admins have confirmed that there were no network "hiccups" at that time. We have tried to simulate other potential issues like Reverse DNS Lookup issues and such and we can't make it fail in our test servers.
We have continued to have this issue, but are hoping to upgrade to a new version of the environment to see if this is the issue.
Thanks for all of your input.
Please
login
to post a reply.