Skip navigation
Currently Being Moderated

Cannot connect from Acrobat 8 to APS

Nov 8, 2006 6:24 AM

Hi,

I have done the APS turnkey installation, generated a SSL key and imported it into my browser. The Web access runs fine over https without any warning or error.

If I try to connect with Acrobat 8 the connect works fine but the user name password authentifikation fails. I get the error: "No connection to https://[server]:8443 - Username or password wrong" (Translated, I have a German Acrobat).

More strange for me the output in the Jrun log for the authentifikation try:

2006-11-08 15:33:24,080 INFO [com.adobe.edc.server.businesslogic.license.LicenseManagerBean] $$$/server/service/logging/msg.LogSvcInit=Logger com.adobe.edc.server.businesslogic.license.LicenseManagerBean initialized
2006-11-08 15:33:24,096 INFO [com.adobe.edc.server.dpl.LicenseFactory] $$$/server/service/logging/msg.LogSvcInit=Logger com.adobe.edc.server.dpl.LicenseFactory initialized
2006-11-08 15:33:24,267 INFO [STDOUT] **************Response is = success

The error message is different if use a valid or invalid password. Here are screen shots:

valid password: http://demos.eggs.de/validPWD.jpg
invalid password: http://demos.eggs.de/invalidPWD.jpg

Thanks in advance,

Michael
 
Replies
  • Currently Being Moderated
    Nov 8, 2006 3:13 PM   in reply to MichaelDeiss
    Hi Michael,

    Do you see the same behavior with Acrobat 7.0?

    Thanks,

    -Bill
     
    |
    Mark as:
  • Currently Being Moderated
    Nov 30, 2006 10:22 AM   in reply to MichaelDeiss
    Hi,

    Do you know if i can connect to an APS from Acrobat 8 putting the IP number of de server instead the DNS of the APS Server?

    Thanks in advance,

    Carlos
     
    |
    Mark as:
  • Currently Being Moderated
    Nov 30, 2006 10:40 AM   in reply to MichaelDeiss
    In order for Acrobat to connect to Policy Server, you should first test that you can hit the server in IE WITHOUT getting any warning messages. In order to connect to a server via HTTPS without getting warning messages using the IP then you would have to create the SSL certificate using the machines IP instead of the host name. If you do this, then yes, you would be able to connect from Acrobat to Policy Server using the IP.

    Chris
    Adobe Enterprise Developer Support
     
    |
    Mark as:
  • Currently Being Moderated
    Nov 30, 2006 11:11 AM   in reply to MichaelDeiss
    Hi Chris,

    Thanks for your answer.

    Carlos
     
    |
    Mark as:
  • Currently Being Moderated
    Jan 23, 2007 5:35 PM   in reply to MichaelDeiss
    Hi Chris and others,

    Does Acrobat/Reader have to connect to the Policy server every time the PDF is opened? For example, if I have a policy that will never expired, then can I skip the process of checking with the Policy server?

    Currently in Reader 7.0.9, if I open a policy protected PDF (the policy never expired), I got a error message saying "This computer must be connected to the network in order to open this document". Is there any way to avoid this message? Basically I don't want Reader to check with Policy server because the policy in the PDF will never expired.

    Any help is appreciated.

    Thanks,
    Joe
     
    |
    Mark as:
  • Currently Being Moderated
    Mar 27, 2007 1:05 PM   in reply to MichaelDeiss
    Hi

    I have a problem with the conection with Acrobat 8.0, the path in https://name.enterprise.com:8443/edc/Main.do, but how can i do for that "/edc/Main.do" work into Acrobat 8.0, when it construct the link only show https://name.enterprise.com:8443 and no connect..?
     
    |
    Mark as:
  • Currently Being Moderated
    Mar 28, 2007 4:20 AM   in reply to MichaelDeiss
    Hola Viviana,

    Estas usando la URL https://name.enterprise.com:8443 para configurar la conexión al APS desde el Acrobat 8 y no te funciona?

    Saludos,

    Carlos
     
    |
    Mark as:
  • Currently Being Moderated
    Mar 28, 2007 6:00 AM   in reply to MichaelDeiss
    Hola Carlos

    Si, me dice que no puede conectar al servicio, tiene algo que ver que el path completo sea tenga el /edc/Main.do despues del puerto ? o Acrobat debería reconocerlo automaticamente solo con colocar el name.enterprise.com y el puerto 8443

    Gracias por tu ayuda
     
    |
    Mark as:
  • Currently Being Moderated
    Mar 28, 2007 8:54 AM   in reply to MichaelDeiss
    Hola Viviana,

    Te tiene que andar poniendo solamente en Server Name el dominio de tu servidor (ej:name.enterprise.com -sin https:// que lo agrega solo) y en Port el puerto (ej:8443). Así debería conectarse.
    Ojo que no podes usar credenciales de administrador para loguearte desde Acrobat ;-)

    Saludos,

    Carlos
     
    |
    Mark as:
  • Currently Being Moderated
    Mar 28, 2007 9:12 AM   in reply to MichaelDeiss
    Carlos

    Tiene algo que ver la configuracion del Kerberos del Polkicy Server... o debo tener algo adicional configurado ?
     
    |
    Mark as:
  • Currently Being Moderated
    Mar 28, 2007 9:20 AM   in reply to MichaelDeiss
    Hola,

    No necesariamente, podés dar de alta un usuario externo via la interfase de administración del policy.
    Vas a la solapa External Users y te invitás a vos misma como usario externo. Esto va a generar un email que te va a llegar a tu casilla de correo y desde allí inicias el circuito.
    Luego te logueas desde Acrobat con esas credenciales...

    []´s

    Carlos
     
    |
    Mark as:
  • Currently Being Moderated
    Mar 28, 2007 11:19 AM   in reply to MichaelDeiss
    Hola Carlos

    Ya hice la prueba pero me saca el mismo error de conexion, y no enlaza al Policy Server...
     
    |
    Mark as:
  • Currently Being Moderated
    Mar 28, 2007 11:38 AM   in reply to MichaelDeiss
    El servidor tiene creada una keystore con un certicado instalado para proveer conexión SSL (HTTPS)?
     
    |
    Mark as:
  • Currently Being Moderated
    Mar 28, 2007 11:41 AM   in reply to MichaelDeiss
    Si, ya esta configurado, incluso si entras por IE a nevager puedo crear politicas, e invitar usuarios externos... el problema es conetarme desde Acrobat...
     
    |
    Mark as:
  • Currently Being Moderated
    Jun 12, 2007 1:18 PM   in reply to MichaelDeiss
    Has anyone solved this problem? I keep receiving an error when connecting from Acrobat 8 to Policy Server. I have created the keystore and cert and when I view the page in IE 6 and firefox I can browse the https://myIP:8443 with no problem.
     
    |
    Mark as:
  • Currently Being Moderated
    Calculating status...
    Jun 12, 2007 10:53 PM   in reply to MichaelDeiss
    Here are some important things.

    1. You have to install your certificate in IE (default browser)
    2. In your keystore CN vale must be equal to your IP.
    e.g if your ip is 192.168.1.100 then CN = 192.168.1.100
    3. In Web console > Configuration > Server Configuration change your Base Url: to https://myIP:8443
    4. Administrators are not allowed to connect through acrobat
    5 Try connect with your internal user(LDAP), if not external user

    Hope this helps
    Amin

    This is an English Forum. Plz post your messages in English and if really want to post it in your language then plz post its translation in English.
     
    |
    Mark as:
  • Currently Being Moderated
    Jun 12, 2007 10:56 PM   in reply to MichaelDeiss
    Hi Chris,

    The most common cause of this problem is SSL configuration. However, if you are able to connect via IE and (this is important) do not receive any warnings about the SSL certificate, then the SSL configuration should be OK. You, of course, also need to make sure that the hostname you configure with Policy Server exactly matches the hostname in the certificate.

    Assuming that is all good, then the next question is: how have you configurated authentication? I'm assuming you can login to the Policy Server Web Console (https://myIP:8443/edc/Main.do) as a user without any problems? Note that we do not allow administrative accounts (e.g., Administrator) to login to Acrobat/Reader, so be sure to login as a non-administrator.

    If this all looks good and you are still seeing the problem, can you post your server log file?

    Hope this helps,

    -Bill
     
    |
    Mark as:
  • Currently Being Moderated
    Jun 13, 2007 4:18 AM   in reply to MichaelDeiss
    I am using IE 7 from on a laptop that is not the machine that policy server is installed on.  When i enter the IP https://<myIP>:8443 I get an error that says Internet Explorer cannot display the web page.  There is a More information link on the page and it says to check that ssl and tls and are enabled in internet options.  I have these enabled.  If I connect to the same IP with firefox on the same laptop there is no problems.  Any thoughts?
     
    |
    Mark as:
  • Currently Being Moderated
    Jun 13, 2007 5:39 AM   in reply to MichaelDeiss
    Some internet Browsers have problem with jboss when ssl is configured.
    And if you don't have problems with firefox or IE 6 then it means ssl is correctly configured.
     
    |
    Mark as:
  • Currently Being Moderated
    Jun 13, 2007 6:08 AM   in reply to MichaelDeiss
    Well that is rather discouraging. So there may not be a way for me to actually see if this is working?
     
    |
    Mark as:
  • Currently Being Moderated
    Jun 13, 2007 7:10 AM   in reply to MichaelDeiss
    No there is a way
    post your server.log file
     
    |
    Mark as:
  • Currently Being Moderated
    Jun 13, 2007 7:22 AM   in reply to MichaelDeiss
    which server.log file? ive been looking a the jboss/servers/all/log and there is no activity in there.
     
    |
    Mark as:
  • Currently Being Moderated
    Jun 13, 2007 8:43 AM   in reply to MichaelDeiss
    Hi Chris,

    Are you running Vista on your laptop? It has become more picky about SSL certificates that it will accept. For example, it will not accept SSL certificates generated with DSA keys, I believe -- the SSL cert must use RSA. Is this the machine that Acrobat is running on?

    -Bill
     
    |
    Mark as:
  • Currently Being Moderated
    Jun 13, 2007 9:02 AM   in reply to MichaelDeiss
    Good call Bill!! Yes the laptop does have vista on it. Can I use the same keytool.exe program to generate a cert using RSA?
     
    |
    Mark as:
  • Currently Being Moderated
    Jun 27, 2007 5:26 PM   in reply to MichaelDeiss
    Yes, you can use keytool.  It should look something like this:<br /><br />keytool -genkey -keyalg RSA -dname "CN=<yourserver>, OU=<your ou>, O=<your org> , L=<city>, S=<state>, C=<country>" -alias "some Cert" -keypass 123456 -keystore aps.keystore<br /><br />-Bill
     
    |
    Mark as:

More Like This

  • Retrieving data ...

Bookmarked By (0)