Active Directory Time Error

The last 3 days or so random Macs from our 350 or so here have been falling off our Active Directory domain. When trying to unbind/rebind them Directory Utility tells me all about how AD "only permits slight variations between clocks on your computer and the AD server." This I know - Kerberos will only allow up to 5 mins difference between a workstation and the server. For this reason we sync the server (main domain controller) with a network time service, and sync all workstations and other servers to that server. This has never been a problem, and indeed works fine - the time on the workstation exactly matches the server time/time zone/date, etc.
So why is the AD plugin (and Kerberos) telling me that the clocks are out of sync when they patently are not?
This is happening with Macs of all kinds - 10.3 to 10.5, Intels, PPCs, everything.
My current workaround is to stop the Mac getting its time from the server, changing the clock by a couple of seconds, and then re-binding. This generally works. The odd ones that this doesn't work on, or that fall off the domain again within 24 hours, I've removed from AD and have given local logins to for now. I'm getting to the point where I just want to scrap AD integration and get every machine locally authenticating!
Our AD guys swear there have been no patches or changes on their end. I am equally certain there have been no changes to the Macs. So what could it be???

Thank you, this has (again, indirectly) solved the problem. I had asked out network administrator to check the time on both domain controllers a couple of weeks ago when the issue started. He had only checked the primary, assuming that the second DC was syncing time with that. Your helpful post prompted me to go check it myself and found a 6 minute difference between the two. Manually resetting the second DC to the same time as the first fixed the problem.
Now Mr Network Admin is left with the task of working out why dc2 isn't getting the right time. Me, I'm thankful that it's not my problem any more and just have the task of rebinding 60 or 70 machines.
Thanks!

Similar Messages

  • Active Directory Time Errors

    Hi everyone. Putting this here as I could not find a better forum. My company's Macs are bound to a Mac OS X Server, but it's the Active Directory binding that is the issue.
    We have a number of Macs, running 10.6.8, that starting sometime recently, began to have login issues. When connected to the network, users could not log in. These are mobile accounts authenticating against a Windows 2008 Active Directory server.
    I started by checking whether binding was still valid. It was not. So I attempt to unbind, and there get an "Active Directory Time Error." It appears that usually, this means that the time on the client and the time reported by the AD server are out of sync. But they're not. I can force unbind, and on attempting to rebind, I get the time error again.
    In nearly every case, these commands in Terminal resolve the issue:
    $ sudo rm -rdfv /Library/Preferences/DirectoryService
    $ sudo rm -rdfv /var/db/dslocal/nodes/default/config
    $ sudo killall -USR1 DirectoryService
    (then restart)
    This didn't happen all at once, the issue has been popping up in one 10.6 machine after another. (We also have a number of 10.8 and 10.9 machines, which so far seem unaffected.)
    Does anyone have any inkling what factors could be causing this to keep happening?

    Not sure how you've confirmed that the times are not skewed; I'd (still) look for a problem with the ntp servers (one ntp server with a rogue time within a pool can play havoc with a network, for instance), and whether the local ntp clients are all reporting as being locked.  See the ntpdc -c peers command, among other commands.

  • Credential Roaming failed to write to the Active Directory. Error code 5 (Access is denied.)

    Hi All,
    I could see following error event in all client computers , Could you please some one help me on this ?
    Log Name:      Application
    Source:
    Microsoft-Windows-CertificateServicesClient-CredentialRoaming
    Event ID:      1005
    Level:         Error
    Description: Certificate Services Client: Credential Roaming failed to  write to the Active Directory. Error code 5 (Access is denied.)
    Regards, Srinivasu.Muchcherla

    If you are not using certificates and Credential Roaming for clients then simply ignore the error message.
    If you are using certificates then you are getting access denied message when Credential Roaming is trying to write to your AD. More details about Credential Roaming here: http://blogs.technet.com/b/askds/archive/2009/01/06/certs-on-wheels-understanding-credential-roaming.aspx
    http://blogs.technet.com/b/instan/archive/2009/05/26/considerations-for-implementing-credential-roaming.aspx
    This is probably related to the fact that your schema version not 44 or higher: https://social.technet.microsoft.com/Forums/windowsserver/en-US/5b3a6e61-68c4-47d3-ae79-8296cb3be315/certificateservicesclientcredentialroaming-errors?forum=winserverGP 
    Active Directory
    ObjectVersion
    Windows 2000
    13
    Windows 2003
    30
    Windows 2003 R2
    31
    Windows 2008
    44
    Windows 2008 R2
    47
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Connect Active Directory Sync Error - operation-size-error

    We are on Connect 9. We have our Active Directory Sync running once per day. I received a sync log error as follows:
    E-Learning-All-Empl-grps
    G
    error
    Change$Update$Group: SyncTargetException: StatusException$OperationSizeError: <status code="operation-size-error"/>
    The E-Learning-All-Empl-grps is a distribution list in Active Driectory that is used to contain one of 9 sublists. Each sub-list has up to 800 names. This was to get around an earlier issue with their being a limitation when we are on Breeze that only a max of 800 names could be in any group.
    What does this error mean and how can I correct this?
    Dave

    I tried all of this, I still can not bind my Mac 10.6.3 to Microsoft Windows 2003 R2 Active Directory, and the failure I receive that Time settings between both computers is not synced although the time is the same on both machines, and I restart the NNTP on Windows Server, and added the Active Directory IP Address on the Date & time Settings on Mac.
    Any Help

  • "24427 Access to Active Directory failed" error in ACS 5.1

    Hello,
    I'm working on implementing a RADIUS authentication for wireless access with the following :
    - PCs running Windows 7, protocol used is PEAP (without validating the server certificate to make it simple at first),
    - AP 1252  configured to use a RADIUS server to authenticate (it's working good with an ACS server 4.2),
    - ACS Server 5.1.0.44.5 running as VM connected to an AD domain and working good with VPN connections,
    - AD domain running on Windows 2003 Server.
    My ACS VM is working good since a couple of months for VPN (RADIUS) and administration (TACACS) remote access, both using Active Directory. Now, I'd like to use it to authenticate people connecting to a 1252 Cisco access point but I'm getting this error "24427 Access to Active Directory failed". I switched from PEAP to LEAP but this is the same.
    All I can get running the expert troubleshoot
    Investigating failure code: 24427 Access to Active Directory failed
    Checking if Active Directory is configured
    Active Directory is configured
    Attempting connection to Active Directory
    Connection to Active Directory was successful.
    Troubleshooting completed.
    Click on Show Results Summary to view results.
    I followed this guide, at least for the ACS certificate section :
    http://www.cisco.com/en/US/products/ps10315/products_configuration_example09186a0080b4cdb9.shtml
    Anyone has an idea where the problem may come from?
    Thanks in advance,
    Vincent

    hey there, I ran into the same issue with 5.3 and it turned out being this bug. i came across your post looking for instructions on retrieving the logs. thanks mate.
    link
    Problem: Error "24495 Active Directory servers are not available"
    Authentication starts failing with this error: 24495 Active Directory servers are not available. in the ACS 5.3 logs.
    Solution
    Check the ACSADAgent.log file through the CLI of the ACS 5.x for messages such as:Mar 11 00:06:06 xlpacs01 adclient[30401]: INFO base.bind.healing Lost connection to xxxxxxxx. Running in disconnected mode: unlatch. If you see the Running in disconnected mode: unlatch error message, this means the ACS 5.3 cannot maintain a stable connection with Active Directory. The workaround is to either switch to LDAP or downgrade the ACS to 5.2 version. Refer to Cisco bug ID CSCtx71254 (registered customers only) for more information.

  • After rebooting ML server, unable to open active directory.  Error msg is Unable to open requested node error -14006.

    This active directory is a replica of master on 2nd Mac Mini server which still thinks replica is there (perhaps it is) and will not let us delete in order to recreate.  Both servers are running 10.8.4.  Nothing changed on either server, simply did a reboot.  When we logged in, Active Directory was turned off and when trying to turn on or access received message "Unable to open the requested node.  The node LDAPV3/127.0.0.1 could not be opened because of an unexpected error -14006".
    Does any one have experience with this and how can we recover?  Thanks in advance for your help.

    Hi again,
    I've been able to run Reports by changing the "Reports_Tmp" key in the Registry under:
    Hkey_local_machine\software\oracle\home0\
    to the D:\ drive

  • Business Content Activation - run time error

    Hi guys,
    We were at plugin 2002.1. We installed PI 2002.2 and PI 2003.1 on top of it.
    After the plug-in upgrade, we are at support pack 9 for SAP-BW and 13 for BI-Content. For aba and basis, we are at 620 and support pack 32.
    As part of the regression testing after the 2003.1 plugin upgrade, we found out that the business content activation abends with the following run time error.
    Runtime Errors         SAPSQL_ARRAY_INSERT_DUPREC
    Exception              CX_SY_OPEN_SQL_DB
    Looks like it is trying to insert into table RSOLTPSOURCEFIET and the row already is existing. I thought the activation process is supposed to update something if it is already out there.
    If we just select the 'only necessary', the activation goes through ok, but if we select 'before and after in the data flow', we get this abend.
    Any clues???
    Best regards,
    makaleem

    Hi Seow,
    This is how I resolved it. I looked at the ST22 closely and one of the messages indicated that the number range is missing in tran SNRO for an infoObject. I created an entry for that infoobject using SNRO and tried activation and it worked.
    When we created an OSS for SAP to look into it, they recommended the following two things. I tried these two but it did not work. I am mentioning them below just in case they may help you.
    1) Sometimes there is inconsistency in the content cache when trying to activate objects and we have to delete the repository cache. To delete the repository cache, go to RSA1 ---> Business Content -
    > Extras ---> Delete Rep Cache
    2) Execute SAP_DROP_TMPTABLES program for types 1,2,3 and 6.
    If this helps, don't forget to assign points.
    Abdul

  • Active directory Webservice error

    I have installed and configured the active directory authentication webservice. I get the following error when I try to synchronize. Does anybody know the reason for the error?
    Apr 28, 2006 11:35:13 AM- Sync Agent is processing memberships.
    Apr 28, 2006 11:35:13 AM- ERROR: Authentication source sync agent failed to synchronize user and group memberships to parent group '9fa1505c-7ece-4f55-8d7a-76fa78684605' (ID=276).
    *** Exception was: com.plumtree.server.impl.soap.OpenSoapException: Error in function AWSProvider.GetMembers (sUniqueGroupName == '9fa1505c-7ece-4f55-8d7a-76fa78684605'): Error in function SOAPEnvelope.Restore (arrayText == [B@23bdd1): SOAP fault: faultcode='soap:Server' faultstring='System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> Plumtree.Remote.ServiceException: Collection index must be in the range 1 to the size of the collection. Error in GetChildUsers
    at com.plumtree.remote.auth.xp.XPSyncProvider.LogAndRethrow(IOKLogger logger, String functionName, Exception e) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 786
    at com.plumtree.remote.auth.xp.XPSyncProvider.loggingGetChildUsers(IXPGroup group) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 541
    at com.plumtree.remote.auth.xp.XPSyncProvider.GetMembers(String groupID) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 429
    at Plumtree.Remote.Auth.So
    ap.SyncProviderSoapBinding.GetMembers(String GroupID) in e:\latestbuild\Release\devkit\6.0.x\auth\src\dotnet\soap\SyncProviderSoapBinding.asmx.cs:line 208
    --- End of inner exception stack trace ---'
    at com.plumtree.openfoundation.util.XPException.GetInstance(XPException.java:371)
    at com.plumtree.server.impl.users.providers.AWSProvider.GetMembers(AWSProvider.java:622)
    at com.plumtree.automationserver.agents.PTAuthSourceAgent.ProcessSingleGroupMemberships(PTAuthSourceAgent.java:3599)
    at com.plumtree.automationserver.agents.PTAuthSourceAgent.ProcessMemberships(PTAuthSourceAgent.java:2203)
    at com.plumtree.automationserver.agents.PTAuthSourceAgent.PerformOperation(PTAuthSourceAgent.java:330)
    at com.plumtree.automationserver.shell.PTJobShell.perform(PTJobShell.java:628)
    at com.plumtree.automationserver.shell.PTJobShell.runJob(PTJobShell.java:210)
    at com.plumtree.automationserver.shell.PTJobShell.run(PTJobShell.java:100)
    Caused by: com.plumtree.server.impl.soap.OpenSoapException: Error in function SOAPEnvelope.Restore (arrayText == [B@23bdd1): SOAP fault: faultcode='soap:Server' faultstring='System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> Plumtree.Remote.ServiceException: Collection index must be in the range 1 to the size of the collection. Error in GetChildUsers
    at com.plumtree.remote.auth.xp.XPSyncProvider.LogAndRethrow(IOKLogger logger, String functionName, Exception e) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 786
    at com.plumtree.remote.auth.xp.XPSyncProvider.loggingGetChildUsers(IXPGroup group) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 541
    at com.plumtree.remote.auth.xp.XPSyncProvider.GetMembers(String groupID) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 429
    at Plumtree.Remote.Auth.Soap.SyncProviderSoapBinding.GetMembers(String GroupID) in e:\latestbuild\Release\devkit\6.0.x\auth\src\dotnet\soap\SyncProviderSoapBinding.asmx.cs:line 208
    --- End of inner exception stack trace ---'
    at com.plumtree.openfoundation.util.XPException.GetInstance(XPException.java:371)
    at com.plumtree.server.impl.soap.SOAPEnvelope.Restore(SOAPEnvelope.java:68)
    at com.plumtree.server.impl.webservice.PTWebService.Invoke(PTWebService.java:1017)
    at com.plumtree.server.impl.webservice.PTWebService.Invoke(PTWebService.java:906)
    at com.plumtree.server.impl.users.providers.AWSProvider.GetMembers(AWSProvider.java:616)
    ... 6 more
    Caused by: com.plumtree.server.impl.soap.Ope
    nSoapException: SOAP fault: faultcode='soap:Server' faultstring='System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> Plumtree.Remote.ServiceException: Collection index must be in the range 1 to the size of the collection. Error in GetChildUsers
    at com.plumtree.remote.auth.xp.XPSyncProvider.LogAndRethrow(IOKLogger logger, String functionName, Exception e) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 786
    at com.plumtree.remote.auth.xp.XPSyncProvider.loggingGetChildUsers(IXPGroup group) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 541
    at com.plumtree.remote.auth.xp.XPSyncProvider.GetMembers(String groupID) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 429
    at Plumtree.Remote.Auth.Soap.SyncProviderSoapBinding.GetMembers(String GroupID) in e:\latestbuild\Release\devkit\6.0.x\auth\src\dotnet\soap\SyncProviderSoapBinding.asmx.cs:line 208
    --- End of inner exception stack trace ---'
    at com.plumtree.server.impl.soap.SOAPParser.LoadInternal(SOAPParser.java:681)
    at com.plumtree.server.impl.soap.SOAPParser.LoadBinary(SOAPParser.java:590)
    at com.plumtree.server.impl.soap.SOAPEn<i></i>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   

    I am able to import one group. The users in this group doesn't get imported, instead it imports 1 user with the same name as the group.
    The following are the job logs:-
    May 2, 2006 12:37:13 PM- Starting to run operations (1 total) for job 'Active Directory AS Job'. Will stop on errors.
    May 2, 2006 12:37:13 PM- *** Job Operation #1 of 1: AuthSource Agent [Run as owner 'Administrator']
    May 2, 2006 12:37:13 PM- Creating the Everyone In Auth Source group (if one doesn't already exist).
    May 2, 2006 12:37:13 PM- **********************************************************************************
    May 2, 2006 12:37:13 PM- Sync Agent is processing groups.
    May 2, 2006 12:37:14 PM- **********************************************************************************
    May 2, 2006 12:37:14 PM- Sync Agent is processing users.
    May 2, 2006 12:37:14 PM- ActiveDirectory\Technology - Portal
    May 2, 2006 12:37:14 PM- **********************************************************************************
    May 2, 2006 12:37:14 PM- Sync Agent is processing memberships.
    May 2, 2006 12:37:14 PM- ERROR: Authentication source sync agent failed to synchronize user and group memberships to parent group '9fa1505c-7ece-4f55-8d7a-76fa78684605' (ID=278).
    *** Exception was: com.plumtree.server.impl.soap.OpenSoapException: Error in function AWSProvider.GetMembers (sUniqueGroupName == '9fa1505c-7ece-4f55-8d7a-76fa78684605'): Error in function SOAPEnvelope.Restore (arrayText == [B@44d990): SOAP fault: faultcode='soap:Server' faultstring='System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> Plumtree.Remote.ServiceException: Collection index must be in the range 1 to the size of the collection. Error in GetChildUsers
    at com.plumtree.remote.auth.xp.XPSyncProvider.LogAndRethrow(IOKLogger logger, String functionName, Exception e) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 786
    at com.plumtree.remote.auth.xp.XPSyncProvider.loggingGetChildUsers(IXPGroup group) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 541
    at com.plumtree.remote.auth.xp.XPSyncProvider.GetMembers(String groupID) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 429
    at Plumtree.Remote.Auth.Soa
    p.SyncProviderSoapBinding.GetMembers(String GroupID) in e:\latestbuild\Release\devkit\6.0.x\auth\src\dotnet\soap\SyncProviderSoapBinding.asmx.cs:line 208
    --- End of inner exception stack trace ---'
    at com.plumtree.openfoundation.util.XPException.GetInstance(XPException.java:371)
    at com.plumtree.server.impl.users.providers.AWSProvider.GetMembers(AWSProvider.java:622)
    at com.plumtree.automationserver.agents.PTAuthSourceAgent.ProcessSingleGroupMemberships(PTAuthSourceAgent.java:3599)
    at com.plumtree.automationserver.agents.PTAuthSourceAgent.ProcessMemberships(PTAuthSourceAgent.java:2203)
    at com.plumtree.automationserver.agents.PTAuthSourceAgent.PerformOperation(PTAuthSourceAgent.java:330)
    at com.plumtree.automationserver.shell.PTJobShell.perform(PTJobShell.java:628)
    at com.plumtree.automationserver.shell.PTJobShell.runJob(PTJobShell.java:210)
    at com.plumtree.automationserver.shell.PTJobShell.run(PTJobShell.java:100)
    Caused by: com.plumtree.server.impl.soap.OpenSoapException: Error in function SOAPEnvelope.Restore (arrayText == [B@44d990): SOAP fault: faultcode='soap:Server' faultstring='System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> Plumtree.Remote.ServiceException: Collection index must be in the range 1 to the size of the collection. Error in GetChildUsers
    at com.plumtree.remote.auth.xp.XPSyncProvider.LogAndRethrow(IOKLogger logger, String functionName, Exception e) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 786
    at com.plumtree.remote.auth.xp.XPSyncProvider.loggingGetChildUsers(IXPGroup group) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 541
    at com.plumtree.remote.auth.xp.XPSyncProvider.GetMembers(String groupID) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 429
    at Plumtree.Remote.Auth.Soap.SyncProviderSoapBinding.GetMembers(String GroupID) in e:\latestbuild\Release\devkit\6.0.x\auth\src\dotnet\soap\SyncProviderSoapBinding.asmx.cs:line 208
    --- End of inner exception stack trace ---'
    at com.plumtree.openfoundation.util.XPException.GetInstance(XPException.java:371)
    at com.plumtree.server.impl.soap.SOAPEnvelope.Restore(SOAPEnvelope.java:68)
    at com.plumtree.server.impl.webservice.PTWebService.Invoke(PTWebService.java:1017)
    at com.plumtree.server.impl.webservice.PTWebService.Invoke(PTWebService.java:906)
    at com.plumtree.server.impl.users.providers.AWSProvider.GetMembers(AWSProvider.java:616)
    ... 6 more
    Caused by: com.plumtree.server.impl.soap.Open
    SoapException: SOAP fault: faultcode='soap:Server' faultstring='System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> Plumtree.Remote.ServiceException: Collection index must be in the range 1 to the size of the collection. Error in GetChildUsers
    at com.plumtree.remote.auth.xp.XPSyncProvider.LogAndRethrow(IOKLogger logger, String functionName, Exception e) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 786
    at com.plumtree.remote.auth.xp.XPSyncProvider.loggingGetChildUsers(IXPGroup group) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 541
    at com.plumtree.remote.auth.xp.XPSyncProvider.GetMembers(String groupID) in e:\latestbuild\Release\devkit\6.0.x\auth\src\xpj2c\impl\com\plumtree\remote\auth\xp\XPSyncProvider.cs:line 429
    at Plumtree.Remote.Auth.Soap.SyncProviderSoapBinding.GetMembers(String GroupID) in e:\latestbuild\Release\devkit\6.0.x\auth\src\dotnet\soap\SyncProviderSoapBinding.asmx.cs:line 208
    --- End of inner exception stack trace ---'
    at com.plumtree.server.impl.soap.SOAPParser.LoadInternal(SOAPParser.java:681)
    at com.plumtree.server.impl.soap.SOAPParser.LoadBinary(SOAPParser.java:590)
    at com.plumtree.server.impl.soap.SOAPEnv
    elope.Restore(SOAPEnvelope.java:65)
    ... 9 more                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               

  • Active directory schema error

    Dear all,
    We have an issue regarding active directory user registry. Our application wants to retrieve the user registry from active directory, 
    So after we type the domain name, username and password for the domain admin, the apps add a schema in the AD, usually we directly can get the respons from the active directory server. 
    Below is the log from the configuration                                 
    < 3/17/2013 - 8:26:43 PM                                                
    <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
    <<<<<<<<                                                                
    3/17/2013-8:27:03 PM: Configuring Access Manager Policy Server....      
    C:\PROGRA~2\Tivoli\POLICY~1\sbin\ivmgrd_setup.exe -y no -m "********" - 
    r 7135 -l 1460 -t 7200 -D no -f no                                      
    OpenConfFile: "C:\PROGRA~2\Tivoli\POLICY~1\etc\pd.conf"                 
    getentry: C:\PROGRA~2\Tivoli\POLICY~1\etc\pd.conf pdrte user-reg-type   
    CloseConfFile: C:\PROGRA~2\Tivoli\POLICY~1\etc\pd.conf                  
    OpenConfFile: "C:\PROGRA~2\Tivoli\POLICY~1\etc\activedir.conf"          
    getentry: C:\PROGRA~2\Tivoli\POLICY~1\etc\activedir.conf uraf-registry  
    hostname                                                                
    getentry: C:\PROGRA~2\Tivoli\POLICY~1\etc\activedir.conf uraf-registry  
    useEncryption                                                           
    getentry: C:\PROGRA~2\Tivoli\POLICY~1\etc\activedir.conf uraf-registry  
    domain                                                                  
    getentry: C:\PROGRA~2\Tivoli\POLICY~1\etc\activedir.conf uraf-registry  
    dnforpd                                                                 
    getentry: C:\PROGRA~2\Tivoli\POLICY~1\etc\activedir.conf uraf-registry  
    Multi-domain                                                            
    getentry: C:\PROGRA~2\Tivoli\POLICY~1\etc\activedir.conf uraf-registry  
    bind-id                                                                 
    getentry: C:\PROGRA~2\Tivoli\POLICY~1\etc\activedir.conf uraf-registry  
    bind-pwd                                                                
    CloseConfFile: C:\PROGRA~2\Tivoli\POLICY~1\etc\activedir.conf           
    OpenConfFile: "C:\PROGRA~2\Tivoli\POLICY~1\etc\pd.conf"                 
    getentry: C:\PROGRA~2\Tivoli\POLICY~1\etc\pd.conf pdrte user-reg-type   
    CloseConfFile: C:\PROGRA~2\Tivoli\POLICY~1\etc\pd.conf                  
    OpenConfFile: "C:\PROGRA~2\Tivoli\POLICY~1\etc\pd.conf"                 
    getentry: C:\PROGRA~2\Tivoli\POLICY~1\etc\pd.conf pdrte user-reg-type   
    CloseConfFile: C:\PROGRA~2\Tivoli\POLICY~1\etc\pd.conf                  
    C:\PROGRA~2\Tivoli\POLICY~1\sbin\mgrsslcfg.exe -config -f no -t 7200 -l 
    1460 -D no                                                              
    Creating the SSL certificate. This might take several minutes.          
    The SSL configuration of the Tivoli Access Manager policy server        
    has completed successfully.                                             
    The policy server's signed SSL certificate is base-64 encoded and       
    saved in text file "C:\PROGRA~2\Tivoli\POLICY~1\keytab\pdcacert.b64."   
    This file is required by the configuration program on each machine      
    in your secure domain.                                                  
    C:\PROGRA~2\Tivoli\POLICY~1\sbin\bassslcfg.exe -config -f no -c "C:     
    \PROGRA~2\Tivoli\POLICY~1\keytab\pdcacert.b64" -p 7135 -h TAMEB1        
    The SSL configuration of Access Control Runtime has completed           
    successfully.                                                           
    Tivoli Access Manager policy server domain name: Default                
    Tivoli Access Manager policy server host name: TAMEB1                   
    Tivoli Access Manager policy server listening port: 7135                
    2013-03-17-20:27:13.770-07:00I----- 0x16B48064 PID#2848 ERROR rgy ad E: 
    \build\am611\src\uraf\ad\schema\adschema_update.cpp 550 0x00000ad0      
    HPDRG0100E The operation in the Active Directory registry for           
    adschema_update.exe: ADSCHEMA_CHECK_SCHEMA_RIGHTS failed with return    
    error 8000500d.                                                         
    adschema_update: result 1, retcode -2147463155                          
    HPDBG0938E Configuration failed.                                        
    3/17/2013-8:29:13 PM: HPDBG0938E Configuration failed.                  
    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    >>>>>>>>                                                                
    > 3/17/2013 - 8:29:15 PM                                                
    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    >>>>>>>>                                         
    Please your advice,
    Thanks,
    Best Regards,
    Achmad

    Hi you log states:
    adschema_update.exe: ADSCHEMA_CHECK_SCHEMA_RIGHTS failed
    with return    
    error 8000500d.  
    The error code is documented in
    this kbTo go short i think the running user does not have the required privilegs to edit the AD schema. You need to be member of 'Schema Admins' in the forest root domain to edit the AD schema.
    MCP/MCSA/MCTS/MCITP

  • SL Upgrade + Active Directory + Time Machine

    Hi all,
    We are running our Mac's in a Active Directory (AD) environment. Some users are using time machine backups and we are planning on doing upgrades to snow leopard for these users, and then restoring there account profiles (which are AD accounts) to put there information back on the system. Have any of you have experience with this, any hang ups, problems or concerns. I did read that when restoring the user account, you can not be logged into that account. But was wondering if I could log in to create the base profile, log out and into a local admin account and restore that user with no problems. Thanks in advance for your help.

    is this over kill?
    it usually is. but if you want you can do it that way. do it just as you described in your first post. restoring a whole home directory should only be done when logged in as a different user. again, no experience with AD here, but it works without issues on standalone machines and I don't see why it should create problems in your situation.

  • Sccm 2012 extent the active directory schema error

    Hello
    I am experiecing an issue when attempting to extend my AD Schema for SCCM 2012
    <12-10-2014 20:04:33> Modifying Active Directory Schema - with SMS extensions.
    <12-10-2014 20:04:33> DS Root:CN=Schema,CN=Configuration,DC=,DC=com
    <12-10-2014 20:04:33> Failed to create attribute cn=MS-SMS-Site-Code.  Error code = 8224.
    <12-10-2014 20:04:33> Failed to create attribute cn=mS-SMS-Assignment-Site-Code.  Error code = 8224.
    <12-10-2014 20:04:33> Failed to create attribute cn=MS-SMS-Site-Boundaries.  Error code = 8224.
    <12-10-2014 20:04:33> Failed to create attribute cn=MS-SMS-Roaming-Boundaries.  Error code = 8224.
    <12-10-2014 20:04:33> Failed to create attribute cn=MS-SMS-Default-MP.  Error code = 8224.
    <12-10-2014 20:04:33> Failed to create attribute cn=mS-SMS-Device-Management-Point.  Error code = 8224.
    <12-10-2014 20:04:33> Failed to create attribute cn=MS-SMS-MP-Name.  Error code = 8224.
    <12-10-2014 20:04:33> Failed to create attribute cn=MS-SMS-MP-Address.  Error code = 8224.
    <12-10-2014 20:04:33> Failed to create attribute cn=mS-SMS-Health-State.  Error code = 8224.
    <12-10-2014 20:04:33> Failed to create attribute cn=mS-SMS-Source-Forest.  Error code = 8224.
    <12-10-2014 20:04:33> Failed to create attribute cn=MS-SMS-Ranged-IP-Low.  Error code = 8224.
    <12-10-2014 20:04:33> Failed to create attribute cn=MS-SMS-Ranged-IP-High.  Error code = 8224.
    <12-10-2014 20:04:33> Failed to create attribute cn=mS-SMS-Version.  Error code = 8224.
    <12-10-2014 20:04:33> Failed to create attribute cn=mS-SMS-Capabilities.  Error code = 8224.
    <12-10-2014 20:04:33> Failed to create class cn=MS-SMS-Management-Point.  Error code = 8202.
    <12-10-2014 20:04:33> Failed to create class cn=MS-SMS-Server-Locator-Point.  Error code = 8202.
    <12-10-2014 20:04:33> Failed to create class cn=MS-SMS-Site.  Error code = 8202.
    <12-10-2014 20:04:33> Failed to create class cn=MS-SMS-Roaming-Boundary-Range.  Error code = 8202.
    <12-10-2014 20:04:33> Failed to extend the Active Directory schema, please find details in "C:\ExtADSch.log".
    any one help me to fix this issue

    Hi,
    It is most likley due to a replication Issue in your AD, check the previous thread on the topic:https://social.technet.microsoft.com/Forums/systemcenter/en-US/1d377109-4fa9-4608-8a3a-cefd436e82ee/error-8224-when-extending-active-directory-schema
    Make sure that all replication issues are solved and try again.
    Regards,
    Jörgen
    -- My System Center blog ccmexec.com -- Twitter
    @ccmexec

  • Weblogic 10.3.3 and Windows Active Directory connection error

    Hi,
    A i am trying to set up Windows AD LDAP realm.
    But the connection is not working. I have already double checked the passwords, user names and host. Everything is correct - but the only thing that i got in the log file is this (with enabled debug):
    <Debug> <JMXCore> <srv-13> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <Administrator> <> <4b403cde0296f14d:-16ba72e6:12edd7cc453:-8000-0000000000000060> <1300804098113> <BEA-000000> <Invoking method listUsers with (java.lang.String,java.lang.Integer,)>
    <Debug> <SecurityAtn> <srv-13> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <4b403cde0296f14d:-16ba72e6:12edd7cc453:-8000-0000000000000060> <1300804098113> <BEA-000000> <list users, user:*,max:1001>
    <Debug> <SecurityAtn> <srv-13> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <4b403cde0296f14d:-16ba72e6:12edd7cc453:-8000-0000000000000060> <1300804098113> <BEA-000000> <new LDAP connection to host 192.168.10.253 port 389 use local connection is false>
    <Debug> <SecurityAtn> <srv-13> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <4b403cde0296f14d:-16ba72e6:12edd7cc453:-8000-0000000000000060> <1300804098113> <BEA-000000> <created new LDAP connection LDAPConnection { ldapVersion:2 bindDN:""}>
    <Debug> <DiagnosticContext> <srv-13> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <Administrator> <> <4b403cde0296f14d:-16ba72e6:12edd7cc453:-8000-0000000000000060> <1300804098128> <BEA-000000> <new localDiagnosticContext for thread [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'>
    <Debug> <WorkContext> <srv-13> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <Administrator> <> <4b403cde0296f14d:-16ba72e6:12edd7cc453:-8000-0000000000000060> <1300804098128> <BEA-000000> <copyThreadContexts(weblogic.management.JMXContext, | SOAP)>
    <Debug> <WorkContext> <srv-13> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <Administrator> <> <4b403cde0296f14d:-16ba72e6:12edd7cc453:-8000-0000000000000060> <1300804098128> <BEA-000000> <copyThreadContexts(weblogic.diagnostics.DiagnosticContext, | MIME_HEADER)>
    <Debug> <SecurityAtn> <srv-13> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <4b403cde0296f14d:-16ba72e6:12edd7cc453:-8000-0000000000000060> <1300804098144> <BEA-000000> <connection failed netscape.ldap.LDAPException: error result (49); 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1772 >
    <Error> <Console> <srv-13> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <Administrator> <> <4b403cde0296f14d:-16ba72e6:12edd7cc453:-8000-0000000000000060> <1300804098160> <BEA-240003> <Console encountered the following error weblogic.security.providers.authentication.LDAPAtnDelegateException: [Security:090294]could not get connection
         at weblogic.security.providers.authentication.LDAPAtnDelegate.getConnection(LDAPAtnDelegate.java:3479)
         at weblogic.security.providers.authentication.LDAPAtnDelegate.getConnection(LDAPAtnDelegate.java:3466)
         at weblogic.security.providers.authentication.LDAPAtnDelegate.listUsers(LDAPAtnDelegate.java:2251)
         at weblogic.security.providers.authentication.LDAPAuthenticatorImpl.listUsers(LDAPAuthenticatorImpl.java:178)
         at weblogic.security.providers.authentication.ActiveDirectoryAuthenticatorMBeanImpl.listUsers(ActiveDirectoryAuthenticatorMBeanImpl.java:227)
         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
         at java.lang.reflect.Method.invoke(Method.java:597)
         at weblogic.management.jmx.modelmbean.WLSModelMBean.invoke(WLSModelMBean.java:437)
         at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:836)
         at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:761)
         at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase$16.run(WLSMBeanServerInterceptorBase.java:449)
         at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase.invoke(WLSMBeanServerInterceptorBase.java:447)
         at weblogic.management.mbeanservers.internal.JMXContextInterceptor.invoke(JMXContextInterceptor.java:268)
         at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase$16.run(WLSMBeanServerInterceptorBase.java:449)
         at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase.invoke(WLSMBeanServerInterceptorBase.java:447)
         at weblogic.management.mbeanservers.internal.SecurityInterceptor.invoke(SecurityInterceptor.java:444)
         at weblogic.management.jmx.mbeanserver.WLSMBeanServer.invoke(WLSMBeanServer.java:323)
         at weblogic.management.mbeanservers.internal.JMXConnectorSubjectForwarder$11$1.run(JMXConnectorSubjectForwarder.java:663)
         at weblogic.management.mbeanservers.internal.JMXConnectorSubjectForwarder$11.run(JMXConnectorSubjectForwarder.java:661)
         at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:363)
         at weblogic.management.mbeanservers.internal.JMXConnectorSubjectForwarder.invoke(JMXConnectorSubjectForwarder.java:654)
         at javax.management.remote.rmi.RMIConnectionImpl.doOperation(RMIConnectionImpl.java:1426)
         at javax.management.remote.rmi.RMIConnectionImpl.access$200(RMIConnectionImpl.java:72)
         at javax.management.remote.rmi.RMIConnectionImpl$PrivilegedOperation.run(RMIConnectionImpl.java:1264)
         at javax.management.remote.rmi.RMIConnectionImpl.doPrivilegedOperation(RMIConnectionImpl.java:1366)
         at javax.management.remote.rmi.RMIConnectionImpl.invoke(RMIConnectionImpl.java:788)
         at javax.management.remote.rmi.RMIConnectionImpl_WLSkel.invoke(Unknown Source)
         at weblogic.rmi.internal.ServerRequest.sendReceive(ServerRequest.java:174)
         at weblogic.rmi.internal.BasicRemoteRef.invoke(BasicRemoteRef.java:222)
         at javax.management.remote.rmi.RMIConnectionImpl_1033_WLStub.invoke(Unknown Source)
         at javax.management.remote.rmi.RMIConnector$RemoteMBeanServerConnection.invoke(RMIConnector.java:993)
         at weblogic.management.jmx.MBeanServerInvocationHandler.doInvoke(MBeanServerInvocationHandler.java:544)
         at weblogic.management.jmx.MBeanServerInvocationHandler.invoke(MBeanServerInvocationHandler.java:380)
         at $Proxy149.listUsers(Unknown Source)
         at com.bea.console.utils.security.UserUtils.getUsers(UserUtils.java:78)
         at com.bea.console.actions.security.users.UserTableAction.getCollection(UserTableAction.java:100)
         at com.bea.console.actions.security.ManagementBaseTableAction.execute(ManagementBaseTableAction.java:82)
         at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
         at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.access$201(PageFlowRequestProcessor.java:97)
         at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor$ActionRunner.execute(PageFlowRequestProcessor.java:2044)
         at org.apache.beehive.netui.pageflow.interceptor.action.internal.ActionInterceptors.wrapAction(ActionInterceptors.java:91)
         at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processActionPerform(PageFlowRequestProcessor.java:2121)
         at com.bea.console.internal.ConsolePageFlowRequestProcessor.processActionPerform(ConsolePageFlowRequestProcessor.java:261)
         at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236)
         at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processInternal(PageFlowRequestProcessor.java:556)
         at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.process(PageFlowRequestProcessor.java:853)
         at org.apache.beehive.netui.pageflow.AutoRegisterActionServlet.process(AutoRegisterActionServlet.java:631)
         at org.apache.beehive.netui.pageflow.PageFlowActionServlet.process(PageFlowActionServlet.java:159)
         at com.bea.console.internal.ConsoleActionServlet.process(ConsoleActionServlet.java:257)
         at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:416)
         at com.bea.console.internal.ConsoleActionServlet.doGet(ConsoleActionServlet.java:134)
         at org.apache.beehive.netui.pageflow.PageFlowUtils.strutsLookup(PageFlowUtils.java:1199)
         at com.bea.portlet.adapter.scopedcontent.ScopedContentCommonSupport.executeAction(ScopedContentCommonSupport.java:686)
         at com.bea.portlet.adapter.scopedcontent.ScopedContentCommonSupport.renderInternal(ScopedContentCommonSupport.java:266)
         at com.bea.portlet.adapter.scopedcontent.StrutsStubImpl.render(StrutsStubImpl.java:107)
         at com.bea.netuix.servlets.controls.content.NetuiContent.preRender(NetuiContent.java:292)
         at com.bea.netuix.nf.ControlLifecycle$6.visit(ControlLifecycle.java:429)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:727)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739)
         at com.bea.netuix.nf.ControlTreeWalker.walk(ControlTreeWalker.java:146)
         at com.bea.netuix.nf.Lifecycle.processLifecycles(Lifecycle.java:395)
         at com.bea.netuix.nf.Lifecycle.processLifecycles(Lifecycle.java:361)
         at com.bea.netuix.nf.Lifecycle.runOutbound(Lifecycle.java:208)
         at com.bea.netuix.nf.Lifecycle.run(Lifecycle.java:162)
         at com.bea.netuix.servlets.manager.UIServlet.runLifecycle(UIServlet.java:389)
         at com.bea.netuix.servlets.manager.UIServlet.doPost(UIServlet.java:258)
         at com.bea.netuix.servlets.manager.UIServlet.doGet(UIServlet.java:212)
         at com.bea.netuix.servlets.manager.UIServlet.service(UIServlet.java:196)
         at com.bea.netuix.servlets.manager.SingleFileServlet.service(SingleFileServlet.java:253)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:821)
         at com.bea.console.utils.MBeanUtilsInitSingleFileServlet.service(MBeanUtilsInitSingleFileServlet.java:47)
         at weblogic.servlet.AsyncInitServlet.service(AsyncInitServlet.java:131)
         at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
         at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
         at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
         at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:27)
         at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
         at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
         at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
         at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.doIt(WebAppServletContext.java:3684)
         at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3650)
         at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
         at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
         at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
         at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
         at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
         at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
         at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
    Caused by: java.lang.reflect.InvocationTargetException
         at weblogic.security.providers.authentication.LDAPAtnDelegate$LDAPFactory.newInstance(LDAPAtnDelegate.java:4153)
         at weblogic.security.utils.Pool.newInstance(Pool.java:37)
         at weblogic.security.utils.Pool.getInstance(Pool.java:33)
         at weblogic.security.providers.authentication.LDAPAtnDelegate.getConnection(LDAPAtnDelegate.java:3474)
         ... 117 more
    Caused by: netscape.ldap.LDAPException: error result (49); 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1772
         at netscape.ldap.LDAPConnection.checkMsg(LDAPConnection.java:4871)
         at netscape.ldap.LDAPConnection.simpleBind(LDAPConnection.java:1766)
         at netscape.ldap.LDAPConnection.authenticate(LDAPConnection.java:1264)
         at netscape.ldap.LDAPConnection.authenticate(LDAPConnection.java:1273)
         at netscape.ldap.LDAPConnection.bind(LDAPConnection.java:1562)
         at weblogic.security.providers.authentication.LDAPAtnDelegate$LDAPFactory.newInstance(LDAPAtnDelegate.java:4130)
         ... 120 more
    >
    could any one know where is the problem or do i need some patch to apply? I am running out of ideas what could be the cause to it.
    Thanks in advance!

    Hi ,
    From the error stack trace I could find the below error.
    Caused by: netscape.ldap.LDAPException: error result (49); 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1772
    This error occurs if there is a LDAP authentication issue for the user used to bind to Active Directory, the value
    Data 525, refers to user not found error that is used to bind to the Active Directory.
    Make sure you have the correct credentials to connect to the Active Directory.
    You can simplify the test using the LDAP Broswer, which helps you to connect to the LDAP servers.
    A sample usage of LDAP Broswer is given below.
    http://weblogic-wonders.com/weblogic/2010/05/20/connecting-to-weblogic-server-embedded-ldap-using-ldap-browser/
    Note: The LDAP Browsers help us to traverse the LDAP Tree, there are many LDAP Broswers available in the market.
    You can download a sample version of softerra.
    http://www.ldapbrowser.com/download.htm
    You can also refer the below link for details about WebLogic and Active Directory configuration.
    http://weblogic-wonders.com/weblogic/2010/12/04/configuring-active-directory-authenticator-with-weblogic-server/
    For more details about different LDAP Issues.
    http://weblogic-wonders.com/weblogic/2010/11/08/common-ldap-server-issues/
    Regards,
    Anandraj
    http://weblogic-wonders.com

  • Synchronization with Active Directory issue - Error ID 1004

    I  found the Application Event Log error below.  
    Error ID 1004: The resource 'D:\SharePoint 2010\14.0\Service\Microsoft.ResourceManagement.Service.exe' does not exist.
    This means, the Network Service account does not have rights to the %programfiles%\Microsoft Office Servers\14.0 folder so,
    the User Profile Synchronisation with Active Directory does not run properly.
    The solution is to grant read access to the Network Service account to the  ...\14.0 folder.
     https://support2.microsoft.com/kb/2473430?wa=wsignin1.0
    But I cannot find %programfiles%\Microsoft
    Office Servers\14.0 folder. Instead
    there is a folder in D drive: 'D:\SharePoint 2010\14.0 and I granted read access to the Network Service account to this
    folder and ran Full synchronization but still not a joy.
    Could you please advise me?
    Thanks

    Thanks Victoria, 
    I granted full access to the user
    NETWORK SERVICE:, which
    is listed in the error message on the folder D:\SharePoint 2010\14.0.
    Then reset IIS and ran a full
    synchronization, but there are still some user accounts who are a member of an AD group (this AD group has contribute right to the Intranet)  and when
    I check permission for those users, it seems they don't inherit permission from that AD group.
    For example :
    AD group name: TeamMembers
    TeamMembers has contribute
    permission.
    user1, user2, user3 and user4 are  members of TeamMembers
    user1 and user2 have contribute
    permissionGiven through the "TeamMembers"
    group.
    user3 and user4 have no permission!!!
    I don't know what the problem is. I don't have access to Active Directory but the people who have access to  say all users are  members of that AD group.
    Could you please advise?
    Thanks

  • Active Directory accountExpires=Error:87

    Hi, does anyone know what this error code means for the attribute accountExpires of a user account in AD?

    If a user account has never had an expiration date, the accountExpires attribute will have the value 2^63 -1, the largest 64-bit integer allowed (equal to 9,223,372,036,854,775,807). This corresponds to September 14 in the year 30,828, which is not a valid
    PowerShell datetime value. Is it possible this is causing your error? What code are you using? A workaround may be to check for the max date allowed, checking with PowerShell code similar to:
    If ($Value -gt [DateTime]::MaxValue.Ticks)
    $Value = 0
    $Date = [DateTime]$Value
    If ($Date -eq 0)
    $AcctExpires = "<Never>"
    Else
    $AcctExpires = $Date.AddYears(1600).ToLocalTime()
    Richard Mueller - MVP Directory Services

  • Active Directory Binding Errors

    I'm having an issue binding a server to AD. I've traced the error to the computer and not the AD account. I can bind other computers with the account I'm using for the server, it just won't bind using from the server. It won't bind using any account at all.
    I've tried deleting the following files: everything inside /Library/Preferences/DirectoryService, Library/Preferences/edu.mit.kerberos and /etc/crb5.keytab, but the error remains.
    The error I get from the ADPlugin is: Setting Computer Password FAILED for existing record. This doesn't make sense since I can bind using the same account on other computers.
    Other things I should try?
    XServe G4 Mac OS X (10.4.7)

    Try the suggestions on this page.
    (14603)

Maybe you are looking for