Re: 'Apply Changes' after changing configuration is very slow

[Mysterious]

On 12/21/2009 10:46 AM, bmbwk wrote:
>
> Hello,
>
> I've set up a new Bordermanager 3.9 in our school network. BM is
> working now, but I have the following problem:
>
> After changing proxy configuration (new access rules, new non cacheable
> sites or so) it is necessary to press 'Apply Changes' at the proxy
> configuration main page. After doing so it lasts about three(!!!)
> minutes, until the browser window is ready again.
>
> Are there any suggestions to change this behavior?
>

1. Server contains a replica that holds server object?
2. Imanager 2.7.3?
3. Firefox/I.E/Chrome/Safari?????

[Mysterious]

On 12/21/2009 12:36 PM, bmbwk wrote:
>
> Hello,

> 1) Yes, server holds a replica.
> 2) iManager 2.7.2
> 3) Problem is with Firefox 3.5 and IE6, other browsers not tested.
>
> In the meantime I have seen:
>
> 1) after clicking 'Apply changes', almost immediatly at the server
> console comes 'Timestamp synchronisation of BRDSRV.NLM is completed'
>
> 2) After 3 minutes: at the console comes 'Timestamp synchronisation of
> ACLCHECK.NLM (or PROXY.NLM) is completed'. At the same time the browser
> says he has finished.
>
> regards
>
> E.Gruber
>
>

check the logger for any errors. If server holds a replica with its own
server object, it should not take so long unless you're applying rules
that container level that are not on the local replica or rules that
have to be resolved and dns is not fast enough.
time on sync as well?
probably a config.txt will help to see if something is misconfigured.

[Mysterious]

On 12/21/2009 02:06 PM, bmbwk wrote:
>
> Hello,
>

> Time is in sync.
>
> Which logger du you mean? Where can I find the log file? Is config.txt
> to be generated with config.nlm?

You've got the logger screen on your server. This screen can save the
info into a file.
Config.txt is generated by loading config.nlm

> After Upgrading to SP2 of BM39 I had the problem, that making access
> rules did not work at all. When I selected the server iManager always
> said, I've selected the wrong object and I maybe have to run
> fillattr.ncf. I ran fillattr and after that it was possible to enter
> access rules. But maybe I didn't run it with the correct parameters
> (tried to guess it from the example). What are the correct parameters?
>
> regards and thanks for your help
>
> E.Gruber
>
>

This is a different issue, it is documented ( i bet you're running
German software) and it is fixed on the imanager snapins on the new
bm39sp2_ir1 patch what i recommend to apply and update the imanager snapins.

So no need for config or logger as it looks like this is your issue.

[Mysterious]

On 12/22/2009 02:16 PM, bmbwk wrote:

>
> I'm sorry but ir2 didn't solve our problem.
>
> I also tried to rerun fillattr with the following parameters:
>
> fillattr 10.1.1.2 cn=admin,o=school cn=brd1,ou=igw1,ou=server,o=school
> o=school
>
> but there is no change in behavior. Is the last parameter o=school as
> searchbase correct (the uppermost organisation)?
>
> regards
>
> E.Gruber
>
>

if you're using german or french software, you'll get this issue, it
works fine first time, then you get a system error and next time it ask
you to rerun fillattr. And this issue is solved with the new imanager
snapins in bm39sp2_ir1. Verify that you've got the new snapins installed
correctly.

[Mysterious]

>
> I also tried to rerun fillattr with the following parameters:
>
> fillattr 10.1.1.2 cn=admin,o=school cn=brd1,ou=igw1,ou=server,o=school
> o=school
>

>

i forgot to mention that you'll have all info on the logger screen.
Check there if any error is reported or if you see the successful
message after run fillattr

[Mysterious]

On 12/22/2009 08:56 PM, bmbwk wrote:
>
> I've saved the contents of the logger screen to file. The important
> lines after clicking 'apply changes' are:
>
>
> Searching for the attributes ACL Parameter to set value[B@e51f1d
>
> Arr is available 28
>
> Genereal command len
>
> NLM seen is (BRDSRV.NLM)
>
>
> -->> between these lines there is the 3 min delay!!!!
>

can you just post the whole logger after you click apply changes? and
your config.txt?

[Mysterious]

On 12/23/2009 11:36 AM, bmbwk wrote:

> Hello again,
> I'm sorry, I am not allowed to upload more than one file. Is there
> another way to post config?
>
>

I do not know. Maybe copy and paste

[Mysterious]

On 12/23/2009 11:26 AM, bmbwk wrote:
>
> Hello,
>
> Mysterious;1908930 Wrote:
>> On 12/22/2009 08:56 PM, bmbwk wrote:can you just post the whole logger

>> after you click apply changes? and
>> your config.txt?
>

> I've seen that it sometimes works very quickly, but most of time there
> is a 3 min delay, sometimes even more.
>
> Attached file: logger.txt
>
> regards E.Gruber
>
>
> +----------------------------------------------------------------------+
> |Filename: LOGGER.TXT |
> |Download: http://forums.novell.com/attachment.php?attachmentid=3818 |
> +----------------------------------------------------------------------+
>

you've got ds issues. imanager has written the rules to the xml file for
the java process that copies this value to the edir attributes can not
find it on the server object:

Could NOT find /AccessRule[@RuleNumber='01fd7ca4']

Sometimes later, ds is accessible:

Write configuration to NDS working

Hence the value is written into the edir attribute:

Synchronizing Access Control Lists.

That takes time