Wednesday 5 October 2011

NTP on linux–must do!

I just had an interesting problem, I created a new user (actually copied it from JDE).  Copied all security roles etc – CNC101 stuff.

Logged in as the new user, no problems!  Security server working, web server validating roles and environments, CNC101!

Then each time I had to launch an application, I got the following:

29997/-263791728 WRK:Init Remote Env Token              Tue Oct  4 20:34:06.870621      jdb_ctl.c4310
        JDB1100029 - Failed to validate role: SYSADMIN for user: (null)

29997/-263791728 WRK:Init Remote Env Token              Tue Oct  4 20:34:06.878945      cnvtchra.c360
        PRT0000008 - Invalid Env handle

29997/-263791728 WRK:Init Remote Env Token              Tue Oct  4 20:34:06.879054      cnvtchra.c292
        PRT0000004 - Invalid Env handle

29997/-263791728 WRK:Init Remote Env Token              Tue Oct  4 20:34:06.879127      jdekinit.c1396
        JDB_ERR: FAILED TO VALIDATE ROLEALL FAILED TO SIGNON

I’ve been doing this for years, I can create a user…  After thinking for a while, and looking at the only difference is the start date for the role.  It was set to today (based on the web server time), but of course the enterprise server thinks it’s in new york!

So the kernels are doing a select on the F95921 using the current date and time and not getting any valid roles for my new user, as the current date on the server is 4th of Oct and when I created the user, the start date for the role I chose was defaulted to the 5th of October.

So, I quickly changed the timezone for the enterprise server, restarted JDE and logged in again – all is good.

Lesson here, even if it’s a demo server (which mine is – a templated demo server at that!).  Make sure that you set up all of the NTP properly and the timezones properly so that the JDE security tokens and role expirations are going to work properly.

No comments: