11.1 Server Issues

11.1.1 POODLE Security Vulnerability

LDAPS and HTTPS in eDirectory allow SSLv3 for secure communication, and SSLv3 has been found to have protocol vulnerability as per CVE-2014-3566. After applying the Appliance patches, ensure that you disable SSLv3 to prevent POODLE security vulnerability.

To disable SSLv3 through LDAP, add number 128 to the ldapBindRestrictions attribute on the LDAP server object.

11.1.2 Processor Utilization Increases When 10,000 Users Are Imported from an External LDAP Source

When syncing users from an external LDAP source, the processor utilization increases if you try to import 10,000 users.

The reason for this behavior is that the User Sync is scheduled to run every 8 minutes, by default. Therefore, each time the User Sync is started, which is every 8 minutes, the processor utilization increases to around 50%, and remains in that state for up to 5 minutes. The utilization might further increase if you import over 10,000 users.

To workaround this issue, you can change the sync interval by editing the crontab file.

  1. Launch the crontab file located at /etc/crontab.

  2. Browse to the line where the sync interval is set to 8 minutes.

    # run iprint migrate every 8 minutes

    */8 * * * * root /usr/bin/python /opt/novell/iprintmobile/python/migrate/migrateUsers.pyc >> /var/log/ipmigrate.log 2>&1

  3. Change the time to the desired time interval.

For information on scheduling time intervals for cron jobs, see the article about Cron on Wikipedia.

11.1.3 Unable to Backup iPrint Appliance 1.0

When using iPrint Appliance 1.0, you may not be able to create a backup if you have a Driver Store in excess of 6 GB. This is caused due to lack of disk space in the virtual machine.

To workaround this issue, you must add an additional hard disk to your virtual machine, then backup iPrint Appliance 1.0. If your Drive Store is 10 GB in size, then you must add an additional 20 GB of hard disk space. The hard disk space must be twice the size of the resdir folder.

  1. Power off the iPrint Appliance 1.0 VM.

  2. In the vSphere client, right-click the iPrint Appliance 1.0, then click Edit Settings.

  3. Click Add.

  4. Select Hard Disk, then click Next.

  5. Select Create a new virtual disk., then click Next.

  6. Specify the Disk Size, then click Next.

  7. Click Next on the Advanced Options screen.

  8. Click Finish.

  9. Power on the iPrint Appliance 1.0 VM.

  10. Create a partition using the fdisk command.

    1. Run the command fdisk /dev/<disk name>.

    2. When prompted for a command, specify n, then tap the Enter key.

    3. For partition, specify p, then choose the default option.

    4. When prompted for a command, specify w.

  11. Create a file system using the command mkfs.ext3 /dev/<disk name>.

  12. Stop the jetty service.

  13. Mount the /tmp folder to the newly added hard disk using the command mount /dev/<disk name> /tmp/.

  14. Start the jetty service.

After completing the procedure mentioned above, try backing up iPrint Appliance 1.0.

11.1.4 Upgrading iPrint Appliance Does Not Automatically Export the License File

When upgrading iPrint Appliance 1.0 to a higher version, the license file does not get automatically exported to the newer version. This issue is caused because the license file is not automatically backed up on the iPrint Appliance 1.0.

To work around this issue:

  1. You must manually copy the license file located at /opt/novell/filr/apache-tomcat/webapps/ssf/WEB-INF/ on iPrint Appliance 1.0 to your system.

  2. Launch the Managment Console of iPrint Appliance 1.1.

  3. Go to iPrint Appliance Configuration > License, then upload the backed up license file.

11.1.5 Upgrade Progress Bar Continues Processing

When upgrading iPrint appliance using the iPrint Appliance Management Console, the progress bar continues processing. This issue is caused by the automatic update feature of the web browser.

To work around this issue, close all open browser sessions, relaunch the browser, then wait for the browser update to complete before upgrading iPrint Appliance.