Process Flow : Failed to initialize LDAP

 6 Replies
 0 Subscribed to this topic
 52 Subscribed to this forum
Sort:
Author
Messages
Mike Lamb
Basic Member
Posts: 7
Basic Member

    We are having intermittent issues with BPM, Portal In baskets, Designer and Administrator that gives us an error stating

    Com.lawson.lawsec.authen.SecurityAuthenException: Failed to initialize LDAP
    We were getting it a few times a day a couple of days ago and now it seems to be getting worse and worse each day. We have talked with Lawson and the resolutions they are giving us are only for when you get this error all the time. IE. We have something set wrong in WAS. This is only happening with P-Flow and nothing else.  Any ideas would be greatly appreciated!
    John Henley
    Posts: 3353

      I have seen this happen in 2 different scenarios:

      1) the *lase*.log files have the wrong permissions/owner in $LAWDIR/system:

      lawson:/lawson/law/system$ ls -lrt *lase*
      -rw-rw-rw-   1 root     lawson            7 Feb 03 14:24 lase.pid
      -rw-rw-rw-   1 root     lawson          318 Feb 03 14:24 lase.log
      -rw-rw-rw-   1 root     system          648 Feb 03 14:24 lase_server_0.log
      -rw-rw-rw-   1 root     system            0 Feb 03 17:40 lase_server_0.log.lck
      -rw-r--r--   1 lawson   lawson          648 Feb 03 17:41 lase_server_1.log

      These files need to be chown lawson and chmod 644;

      2) There was a WAS JVM environment variable for com.lawson.logdir ....in addition to com.lawson.lawdir, com.lawson.gendir, and com.lawson.ladbdir...do you have that?

      Thanks for using the LawsonGuru.com forums!
      John
      thanef
      Veteran Member
      Posts: 47
      Veteran Member

        I had a similar problem...this is from an LIS case "I've seen this problem a few times and it's always been log permissions. I'm certainly open to the idea that it could be something else, but I want to make sure that we've covered every possible base with respect to logs and permissions first. To answer your final question, my suggestion to restart the server is for two reasons: First, to make sure that all of Lawson (including ProcessFlow) is running as the lawson user. This will make sure that new logs that get created are owned by lawson, as well. If ProcessFlow is running as one user and Lawson is running as another, that will add an extra layer of confusion in troubleshooting this. The second reason, is that I'm not certain that the server recovers from this problem just by changing log permissions without a restart. It may be the case that after the error occurs, it will continue to occur even if the root cause is addressed, absent a restart of the servers. So the bottom line is that to be absolutely assured that everything is as it should be, I believe that everything should be stopped (with a stoplaw), the permissions/ownership checked, and then everything strarted up with a startlaw, executed as the lawson user."

        Check the lase logs; and does your "pfserv stop all" work? check for bpm after stopping. ps -ef | grep bpm >> output file

        Mike Lamb
        Basic Member
        Posts: 7
        Basic Member
          John,

          1. Our permissions do not match exactly what you have but are a mix of ROOT and LAWSON owned with 777. Should we change them to exactly what you have in your post?

          2. We do not see any variables built for com.lawson.lawdir, com.lawson.gendir, and com.lawson.ladbdir, com.lawson.logdir on the WAS server. What should the variables be built as?


          thanef,
          Thanks for the information. I have schedule a full reboot of the system to make sure all the junk gets cleaned up.
          John Henley
          Posts: 3353
            The permissions I showed as an example were where a client had them WRONG and that was why they were getting the error.

            The file perms should be 644 and owned by lawson -- NOT ROOT.

            The variables are set in the WAS JVM settings.
            You *must* have com.lawson.lawdir, com.lawson.gendir, and com.lawson.ladbdir, otherwise you wouldn’t be able to use LSF9 :)

            The problem I had encountered before was where a client also had com.lawson.logdir, and that pointed to a non-existent directory ...
            Thanks for using the LawsonGuru.com forums!
            John
            Jimmy Chiu
            Veteran Member
            Posts: 641
            Veteran Member
              If you logdir is different than the default location, you will need to specify com.lawson.logdir in your websphere JVM setting. You can find the details in the environment installation guide.

              I would also run the smoke test to check your process flow. Check your pfserv config settings etc.
              John Henley
              Posts: 3353
                Re: com.lawson.logdir
                In the case I cited, the directory did not exist.
                Thanks for using the LawsonGuru.com forums!
                John