Skip navigation

LiveCycle pre-ES (6.x and 7.x) discussions

Currently Being Moderated

Cannot connect from Acrobat 8 to APS

Nov 8, 2006 6:24 AM

Hi,

I have done the APS turnkey installation, generated a SSL key and imported it into my browser. The Web access runs fine over https without any warning or error.

If I try to connect with Acrobat 8 the connect works fine but the user name password authentifikation fails. I get the error: "No connection to https://[server]:8443 - Username or password wrong" (Translated, I have a German Acrobat).

More strange for me the output in the Jrun log for the authentifikation try:

2006-11-08 15:33:24,080 INFO [com.adobe.edc.server.businesslogic.license.LicenseManagerBean] $$$/server/service/logging/msg.LogSvcInit=Logger com.adobe.edc.server.businesslogic.license.LicenseManagerBean initialized
2006-11-08 15:33:24,096 INFO [com.adobe.edc.server.dpl.LicenseFactory] $$$/server/service/logging/msg.LogSvcInit=Logger com.adobe.edc.server.dpl.LicenseFactory initialized
2006-11-08 15:33:24,267 INFO [STDOUT] **************Response is = success

The error message is different if use a valid or invalid password. Here are screen shots:

valid password: http://demos.eggs.de/validPWD.jpg
invalid password: http://demos.eggs.de/invalidPWD.jpg

Thanks in advance,

Michael

8338 Views 27 Replies Latest reply: (secbill), Jun 27, 2007 5:26 PM

Replies

Currently Being Moderated

1. (secbill),

Nov 8, 2006 3:13 PM in reply to MichaelDeiss

Report

Hi Michael,

Do you see the same behavior with Acrobat 7.0?

Thanks,

-Bill

|
Mark as:
Currently Being Moderated

2. MichaelDeiss,

Nov 10, 2006 3:54 AM in reply to MichaelDeiss

Report

The test with the Acrobat 7 pointed me to the right direction. This version displayed the following error message: "Administrators are not allowed to perform this action!". Next time I tried it with an external User. This works in Acrobat 7.0 and 8.0!

Conclusion: Acrobat 8.0 (en + de) shows the wrong error message if a Administrator tries to connect to a APS.

Thanks for your help!

Michael

|
Mark as:
Currently Being Moderated

3. (Carlos_Nascimbene),

Nov 30, 2006 10:22 AM in reply to MichaelDeiss

Report

Hi,

Do you know if i can connect to an APS from Acrobat 8 putting the IP number of de server instead the DNS of the APS Server?

Thanks in advance,

Carlos

|
Mark as:
Currently Being Moderated

4. (Chris_Trubiani),

Nov 30, 2006 10:40 AM in reply to MichaelDeiss

Report

In order for Acrobat to connect to Policy Server, you should first test that you can hit the server in IE WITHOUT getting any warning messages. In order to connect to a server via HTTPS without getting warning messages using the IP then you would have to create the SSL certificate using the machines IP instead of the host name. If you do this, then yes, you would be able to connect from Acrobat to Policy Server using the IP.

Chris
Adobe Enterprise Developer Support

|
Mark as:
Currently Being Moderated

5. (Carlos_Nascimbene),

Nov 30, 2006 11:11 AM in reply to MichaelDeiss

Report

Hi Chris,

Thanks for your answer.

Carlos

|
Mark as:
Currently Being Moderated

6. (joelam),

Jan 23, 2007 5:35 PM in reply to MichaelDeiss

Report

Hi Chris and others,

Does Acrobat/Reader have to connect to the Policy server every time the PDF is opened? For example, if I have a policy that will never expired, then can I skip the process of checking with the Policy server?

Currently in Reader 7.0.9, if I open a policy protected PDF (the policy never expired), I got a error message saying "This computer must be connected to the network in order to open this document". Is there any way to avoid this message? Basically I don't want Reader to check with Policy server because the policy in the PDF will never expired.

Any help is appreciated.

Thanks,
Joe

|
Mark as:
Currently Being Moderated

7. MichaelDeiss,

Jan 24, 2007 12:58 AM in reply to MichaelDeiss

Report

Hi Joe,

the fist time a PDF is opened the Reader has to connect to the policy server. There is no way to avoid this.

Mike

|
Mark as:
Currently Being Moderated

8. (Viviana_Murcia),

Mar 27, 2007 1:05 PM in reply to MichaelDeiss

Report

Hi

I have a problem with the conection with Acrobat 8.0, the path in https://name.enterprise.com:8443/edc/Main.do, but how can i do for that "/edc/Main.do" work into Acrobat 8.0, when it construct the link only show https://name.enterprise.com:8443 and no connect..?

|
Mark as:
Currently Being Moderated

9. (Carlos_Nascimbene),

Mar 28, 2007 4:20 AM in reply to MichaelDeiss

Report

Hola Viviana,

Estas usando la URL https://name.enterprise.com:8443 para configurar la conexión al APS desde el Acrobat 8 y no te funciona?

Saludos,

Carlos

|
Mark as:
Currently Being Moderated

10. (Viviana_Murcia),

Mar 28, 2007 6:00 AM in reply to MichaelDeiss

Report

Hola Carlos

Si, me dice que no puede conectar al servicio, tiene algo que ver que el path completo sea tenga el /edc/Main.do despues del puerto ? o Acrobat debería reconocerlo automaticamente solo con colocar el name.enterprise.com y el puerto 8443

Gracias por tu ayuda

|
Mark as:
Currently Being Moderated

11. (Carlos_Nascimbene),

Mar 28, 2007 8:54 AM in reply to MichaelDeiss

Report

Hola Viviana,

Te tiene que andar poniendo solamente en Server Name el dominio de tu servidor (ej:name.enterprise.com -sin https:// que lo agrega solo) y en Port el puerto (ej:8443). Así debería conectarse.
Ojo que no podes usar credenciales de administrador para loguearte desde Acrobat ;-)

Saludos,

Carlos

|
Mark as:
Currently Being Moderated

12. (Viviana_Murcia),

Mar 28, 2007 9:12 AM in reply to MichaelDeiss

Report

Carlos

Tiene algo que ver la configuracion del Kerberos del Polkicy Server... o debo tener algo adicional configurado ?

|
Mark as:
Currently Being Moderated

13. (Carlos_Nascimbene),

Mar 28, 2007 9:20 AM in reply to MichaelDeiss

Report

Hola,

No necesariamente, podés dar de alta un usuario externo via la interfase de administración del policy.
Vas a la solapa External Users y te invitás a vos misma como usario externo. Esto va a generar un email que te va a llegar a tu casilla de correo y desde allí inicias el circuito.
Luego te logueas desde Acrobat con esas credenciales...

[]´s

Carlos

|
Mark as:
Currently Being Moderated

14. (Viviana_Murcia),

Mar 28, 2007 11:19 AM in reply to MichaelDeiss

Report

Hola Carlos

Ya hice la prueba pero me saca el mismo error de conexion, y no enlaza al Policy Server...

|
Mark as:
Currently Being Moderated

15. (Carlos_Nascimbene),

Mar 28, 2007 11:38 AM in reply to MichaelDeiss

Report

El servidor tiene creada una keystore con un certicado instalado para proveer conexión SSL (HTTPS)?

|
Mark as:
Currently Being Moderated

16. (Viviana_Murcia),

Mar 28, 2007 11:41 AM in reply to MichaelDeiss

Report

Si, ya esta configurado, incluso si entras por IE a nevager puedo crear politicas, e invitar usuarios externos... el problema es conetarme desde Acrobat...

|
Mark as:
Currently Being Moderated

17. (ChrisTurner),

Jun 12, 2007 1:18 PM in reply to MichaelDeiss

Report

Has anyone solved this problem? I keep receiving an error when connecting from Acrobat 8 to Policy Server. I have created the keystore and cert and when I view the page in IE 6 and firefox I can browse the https://myIP:8443 with no problem.

|
Mark as:
Currently Being Moderated

18. (Muhammad_Amin),

Jun 12, 2007 10:53 PM in reply to MichaelDeiss

Report

Here are some important things.

1. You have to install your certificate in IE (default browser)
2. In your keystore CN vale must be equal to your IP.
e.g if your ip is 192.168.1.100 then CN = 192.168.1.100
3. In Web console > Configuration > Server Configuration change your Base Url: to https://myIP:8443
4. Administrators are not allowed to connect through acrobat
5 Try connect with your internal user(LDAP), if not external user

Hope this helps
Amin

This is an English Forum. Plz post your messages in English and if really want to post it in your language then plz post its translation in English.

|
Mark as:
Currently Being Moderated

19. (secbill),

Jun 12, 2007 10:56 PM in reply to MichaelDeiss

Report

Hi Chris,

The most common cause of this problem is SSL configuration. However, if you are able to connect via IE and (this is important) do not receive any warnings about the SSL certificate, then the SSL configuration should be OK. You, of course, also need to make sure that the hostname you configure with Policy Server exactly matches the hostname in the certificate.

Assuming that is all good, then the next question is: how have you configurated authentication? I'm assuming you can login to the Policy Server Web Console (https://myIP:8443/edc/Main.do) as a user without any problems? Note that we do not allow administrative accounts (e.g., Administrator) to login to Acrobat/Reader, so be sure to login as a non-administrator.

If this all looks good and you are still seeing the problem, can you post your server log file?

Hope this helps,

-Bill

|
Mark as:
Currently Being Moderated

20. (ChrisTurner),

Jun 13, 2007 4:18 AM in reply to MichaelDeiss

Report

I am using IE 7 from on a laptop that is not the machine that policy server is installed on. When i enter the IP https://<myIP>:8443 I get an error that says Internet Explorer cannot display the web page. There is a More information link on the page and it says to check that ssl and tls and are enabled in internet options. I have these enabled. If I connect to the same IP with firefox on the same laptop there is no problems. Any thoughts?

|
Mark as:
Currently Being Moderated

21. (Muhammad_Amin),

Jun 13, 2007 5:39 AM in reply to MichaelDeiss

Report

Some internet Browsers have problem with jboss when ssl is configured.
And if you don't have problems with firefox or IE 6 then it means ssl is correctly configured.

|
Mark as:
Currently Being Moderated

22. (ChrisTurner),

Jun 13, 2007 6:08 AM in reply to MichaelDeiss

Report

Well that is rather discouraging. So there may not be a way for me to actually see if this is working?

|
Mark as:
Currently Being Moderated

23. (Muhammad_Amin),

Jun 13, 2007 7:10 AM in reply to MichaelDeiss

Report

No there is a way
post your server.log file

|
Mark as:
Currently Being Moderated

24. (ChrisTurner),

Jun 13, 2007 7:22 AM in reply to MichaelDeiss

Report

which server.log file? ive been looking a the jboss/servers/all/log and there is no activity in there.

|
Mark as:
Currently Being Moderated

25. (secbill),

Jun 13, 2007 8:43 AM in reply to MichaelDeiss

Report

Hi Chris,

Are you running Vista on your laptop? It has become more picky about SSL certificates that it will accept. For example, it will not accept SSL certificates generated with DSA keys, I believe -- the SSL cert must use RSA. Is this the machine that Acrobat is running on?

-Bill

|
Mark as:
Currently Being Moderated

26. (ChrisTurner),

Jun 13, 2007 9:02 AM in reply to MichaelDeiss

Report

Good call Bill!! Yes the laptop does have vista on it. Can I use the same keytool.exe program to generate a cert using RSA?

|
Mark as:
Currently Being Moderated

27. (secbill),

Jun 27, 2007 5:26 PM in reply to MichaelDeiss

Report

Yes, you can use keytool. It should look something like this:<br /><br />keytool -genkey -keyalg RSA -dname "CN=<yourserver>, OU=<your ou>, O=<your org> , L=<city>, S=<state>, C=<country>" -alias "some Cert" -keypass 123456 -keystore aps.keystore<br /><br />-Bill

|
Mark as:

Forum guidelines