Running CM console from untrusted forest

Is it possible to get CM 2012 console to work from untrusted AD forest somehow? 

Yes. See here
http://configmgrblog.com/2012/07/13/connecting-with-the-console-to-configmgr-2012-in-a-different-domain/
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

Similar Messages

  • OSB1031: (solaris10) cannot run Test Console from sbconsole

    Hi all,
    when I run the Test Console from sbconsole I got the below error:
    "Error Accessing Test Configuration
    An unexpected error occurred accessing the test service: java.net.UnknownHostException: wasdv1r3n1.dev.b-soiurce.net"
    My OSB domain is a clustered domain with one admin (bnk01osbadm) and 2 managed servers (bnk01osbm01 & bnk01osbm02).
    I checked the log files under the admin (bnk01osbadm.log, bnk01osb.log) and 2 managed servers but I've found no error.
    On the WLS console, under Deployments the column Health is OK for the application named "ALSB Test Framework". I checked also the sbtestservice web application and the status is active.
    What could I check too ? How could I increase the logging level to get more details ?
    Regards
    ferp

    How could I increase the logging level to get more details ?In your OSB domain root there is a file alsbdebug.xml. Change the below to true to get more details logged (Server log severity level should be debug).
    <java:alsb-test-console-debug>false</java:alsb-test-console-debug>
    Manoj

  • How to run Content DB Client console from JDevloper

    Hi
    I have downloaded all the content db client console pages from server. Please let me know how to run the console from my local machine thru jdeveloper. When i tried to run it is giving some runtime exceptions.
    Sep 10, 2007 10:46:07 AM oracle.ifs.fdk.http.HttpNodeManager
    INFO: Creating HTTP Node ...
    07/09/10 10:46:07 Cannot create HTTP Node:
    oracle.ifs.common.IfsException: IFS-45061: Unable to create node
    oracle.ifs.common.IfsException: IFS-20016: Required parameters are null (either "Schema Name" or "Domain Name" should be non-null)
         at oracle.ifs.management.domain.HttpServletNodeUtilities.createNode(HttpServletNodeUtilities.java:243)
         at oracle.ifs.management.domain.HttpServletNodeUtilities.createNode(HttpServletNodeUtilities.java:156)
         at oracle.ifs.fdk.http.HttpServer.createNode(HttpServer.java:162)
         at oracle.ifs.fdk.http.HttpNodeManager.contextInitialized(HttpNodeManager.java:37)
    Please let me know if there is any documentation for this.
    Thanks
    Ravi

    Hi,
    I built berkeley DB 4.4.20 and use it from Jbuilder2005, I noticed that tha size of Jbuilderw.exe consumes about 96MB of memory and the size of javaw.exe consumes (in my application) about 63MB. so I thought that if I load the jdk1.4 only ( by running my code from the command line) this will save memory because not all compenents of Jbuilder will be loaded into memory. to do so, I copied the directory jdk1.4 from inside jbuilder2005 and put it on c:\, then I build berkeley DB using visaul c++ 6.0 and filled the following pathes in the include directory(tools-->options->directories)
    c:\jdk1.4\include
    c:\jdk1.4\include\win32
    and in the executable files directories I added the following path:
    c:\jdk1.4\bin
    then I set the classpath from inside windows (server2003), and I set the path as well but when I run the java class from the command line, I recieved message like "the packege com.sleepycat.db " not exist
    thanks

  • Untrusted Forest Discovery failed

    I'm having a issue with remote untrusted forest.  Forest Discovery fails, but I can publish site server information to this forest. 
    ERROR: [ForestDiscoveryAgent]: Failed to connect to forest domain.com. This can be because of disjoint DNS namespaces, network connectivity or server availibility issue. Error Information The specified forest does not exist or cannot be contacted.
    Entering function ReportForestConnectionFailureStatusMessage()
    Calling ReportStatus, keys= SMS_AD_FOREST_DISCOVERY_MANAGER, -2147474744, 2
    I have configured conditional forwarders between forests and name resolution works. There shouldn't be any firewall issues either and I tested SRV records via nslookup with this method
    Type nslookup, and then press ENTER.
    Type set type=all, and then press ENTER.
    Type _ldap._tcp.dc._msdcs.<var>Domain_Name</var>, where <var>Domain_Name</var> is the name of your domain, and then press ENTER.
    Nslookup lists correct domain controllers from remote forest.
    Any ideas what could be causing this? I think it's AD related problem.

    LDAP://DCNAME.domain.com/OU=Computers,DC=domain,DC=com 
    I tested this last week and this works. Now I can discover computer objects from untrusted forest. There must be something wrong with the ad/dns infrastructure becasue
    normally you dont need to specify domain controller directly because it should find it with srvlookup.

  • Why client installation fails in untrusted forest?

    I have one untrusted forest and my ConfigMgr site is published to this untrusted forest ad successfully. When running ccmsetup.exe in untrusted forest it fails and when I look ccmsetup.log I can see that it fails to locate management point. Why is this happening
    because site information is available in AD? 

    If you are trying to do auto site assignment, is there a boundary published for site assignment that this client falls within?
    If not, have you considered just doing SMSSITECODE=<your site code> and also specifying an initial management point for it to contact with SMSMP=<accessible MP>?
    Nash
    Nash Pherson, Senior Systems Consultant
    Now Micro -
    My Blog Posts
    If you've found a bug or want the product worked differently,
    share your feedback.
    <-- If this post was helpful, please click "Vote as Helpful".

  • SCCM Console, untrusted forest

    Hi,
    I have a site system server with MP, DP in a untrusted forest. Is it possible to install SCCM console on it and connect back to Primary server?
    I have checked all ports that are in the documentation https://technet.microsoft.com/en-us/library/hh427328.aspx?f=255&MSPPError=-2147217396 regarding "Configuration Manager Console" but I still cannot run the console. I have tried opening
    SCCM Console with RunAs and a account in the Primary servers forest.
    Does the MP, DP need to have firewall ports open to the Primary servers forests domain controllers and to authenticate ?
    In that case what are ports needed?
    /A

    Hi Peter,
    We want to have a console on each untrusted forest site system server to be able to manage the computers in the untrusted forest with Right-Click Tools and Remote Control. Because the untrusted site system server is on the network already, many firewall
    ports all already allowed. We don't want to do it through the Primary because of the difficulty of opening for all firewall ports that are needed for remote tools.
    Does that make sense?

  • Error while running jBoss server from console

    I am facing a problem regarding running of Jboss server,When i am giving the run.bat command from my console a lot of lines of code is being displayed rapidly and the cursor is coming to a halt after giving the following message"[Error,Default] at java.lang.thread.run(Unknown Source)"What should i do now ?And when i am tryng to
    run the client class then also an error is coming.So,if u please provide me the appropiate instruction to run my ejb application then it will be of much help to me.Please provide the info as early as possible as my worh came to sttodstill due to this problem

    how can anybody help you? Let me cut down your story to what you are precisely saying:
    Hello. JBoss isn't working on my computer, it is giving me an error, I don't know how to fix it. Please help me.I would want to help you, but I cannot. Why don't you start by figuring out how to copy paste the output from the command prompt so that you can post it here?

  • Closing Console window while running Java application from Batch file

    Hi all,
    I have made a small application using Java swings,now i have made a jar file of my application and calling this jar file through batch file,when user clicks on that batch file it runs "java -jar applicationname.jar" command,but problem is that when i run that file from batch file it opens Dos console window at baclk of the screen which looks weird for a desktop application,i dnt want that Dos console window visible at the backend while my application is running,i have searched regarding this on google but found nothing usefull,if anybody can please help regarding that it will be a great releif for me,i have been stuck on this problem from last two days.
    Thanks.
    Simer

    warnerja wrote:
    georgemc wrote:
    warnerja wrote:
    start java -jar applicationname.jar
    That'll pop up another consoleI'm under the impression that the console window he is seeing is the one which cmd.exe opens when it is executing the batch file. And that batch file won't return until the java process has completed because he didn't start it in the background to let the batch file continue and terminate.
    So I don't think just simply substituting java with javaw will do much good either. Still think he needs a "start" command in that batch file.
    So now he can try:
    start java -jar ...
    or
    start javaw -jar ...Fair point

  • ACS forwarding from untrusted domain 0x80090325 SEC_E_UNTRUSTED_ROOT

    I have SCOM 2012 R2 Update Rollup 4 installed with 2 management servers running WS12R2 in a single management group in my main AD domain. One of the management servers is also an ACS collector. I have an untrusted AD domain, with a SCOM gateway server in
    it, and I used the gateway to install a SCOM agent on a domain controller in that domain. Now I am trying to configure an ACS forwarder on that untrusted domain controller to talk to the ACS collector back on the management server.
    However, when I restart the
    Microsoft Monitoring Agent Audit Forwarding service on that domain controller, I get this error in its
    Event Viewer > Apps and Services > Operations Manager:
    1/23/2015 5:08:01 PM Source AdtAgent Event ID 4369 Forwarder unsuccessfully tried to connect to the following collector(s):
    <acsCollectorFQDN>:51909, status: 0x80090325 (TCP connect), source:registry addresses tried: <IP>:51909. If the list of collectors is blank, then AdtAgent was unable to locate a collector. Common reasons for this message are: The machinef(s)
    listed is not online. AdtServer is not running on the machine(s) listed. AdtServer on the machine(s) listed is not listening on the specified port. TCP connectivity to the AdtServer machine is blocked by firewall, IPSec, or other filtering mechanism AdtServer
    on the machine(s) listed actively refused the connection (due to policy or current activity load). For detailed failure information, enable trace logging using the TraceFlags registry key and examine the AdtAgent.log in the \temp subdirectory of the Windows
    directory.
    I followed these two articles in order to set up the ACS forwarder on the DC in the untrusted domain: "How to configure security events collection by using Audit Collection Services from computers in untrusted environment?" {1/3/12}https://gefufna.wordpress.com/2012/01/03/how-to-configure-security-events-collection-by-using-audit-collection-services-from-computers-in-untrusted-environment/ "Forwarder
    is unable to connect to collector Event id 4369 in forwarder event view" {5/5/14}
    http://jimmy-scom.blogspot.com/2014/05/forwarder-is-unable-to-connect-to.html
    EXTRA INFO Here are the detailed steps that I took (sorry for all this, but there are an awful number of steps!):
    1) I confirmed that the agent for the DC shows as Healthy in OM Console > Monitoring > Operations Manager > Agent Details > Agent Health State > Agent State (right) pane.
    2) On the ACS collector, I stopped
    Operations Manager Audit Collection Service, then from Admin cmd prompt I did this:
    c:> cd \windows\system32\security\adtserver
    c:> adtserver –c
    } 1 certificates found for server authentication usage.
    Enter the number of the certificate you want AdtServer to use for authenticating to AdtAgent or 0 to quit without saving: 1
    Certificate 1 selected. Attempting to save thumbprint to registry ...
    success.
    Then I started
    Operations Manager Audit Collection Service.
    3) On the DC in the untrusted domain, from Admin cmd prompt I did this:
    c:> cd c:\windows\system32
    c:> adtagent -c
    } No  Issued To                   Issued By                   Expires   
    Thumbprint
     1: <untrustedDCfqdn> <untrustedDomainCA>             2015-11-30 02:44:58    <thumbprint>
    2 certificates found for client authentication usage.
    Enter the number of the certificate you want AdtAgent to use for authenticating to AdtServer or 0 to quit without saving: > 1
    } Certificate 1 selected. Attempting to save thumbprint to registry… success.
    4) On the DC in the untrusted domain, I opened mmc > Certificates > Local Computer > Personal > Certificates > I exported the certificate from step 3 to a DER encoded binary X.509 (.CER) file.
    5) I also looked at the Certification Path for the certificate, and figured out which certificate is its Root CA certificate. I copied that certificate to a DER encoded binary X.509 (.CER) file.
    6) I copied the first .CER file to a computer in my main domain, which is at 2012 R2 level. From AD Users and Computers, I created a "dummy" computer object using the NetBios name of the DC back on the untrusted domain. I right clicked the computer
    object > Named Mappings > I added the .CER file, and left "Use Subject for alternate identity" checked. I unchecked "Use Issuer for alternate security identity".
    7) I copied the Root CA certificate .CER file over to the SCOM management server that doubles as my ACS collector, and from there I did mmc > Certificates > Local Computer > Trusted Root Certificates > Certificates > I imported the Root
    CA certificate.
    8) I also went to my CA server on my main domain, I ran pkiview.msc > right clicked “Enterprise PKI” > Manage AD Containers > NTAuthCertificates tab > and I imported the Root CA certificate there as well.
    9) I ran telnet from the DC on the untrusted domain, and confirmed that port 51909 is open from there to the ACS collector on the main domain.
    10) I enabled audit collection fot the DC on the untrusted domain. I did this from OM Console > Monitoring > Operations Manager > Agent Details > Agent Health State > Agent State (second column in middle pane) > I selected the Healthy <untrustedDCfqdn>
    > I clicked Enable Audit Collection.
    Then under "Task Parameters" > i clicked [Override] > for New Value I specified <ACScollectorFQDN>. For task credentials I specified Other account, and specified a domain admin account in the untrusted domain. The result was "The
    task completed successfully. Enable Audit Collection, status:Success".
    11) On the ACS collector, I restarted Operations Manager Audit Collection Service. On the DC in the untrusted domain I restarted Microsoft Monitoring Agent Audit Forwarding service.
    12) Result was this error on the DC in the untrusted domain, in its
    Event Viewer > Apps and Services > Operations Manager
    1/23/2015 5:08:01 PM Source AdtAgent Event ID 4369 Forwarder unsuccessfully tried to connect to the following collector(s):
    <acsCollectorFQDN>:51909, status: 0x80090325 (TCP connect), source:registry addresses tried: 10.1.1.91:51909. If the list of collectors is blank, then AdtAgent was unable to locate a collector. Common reasons for this message are: The machinef(s)
    listed is not online. AdtServer is not running on the machine(s) listed. AdtServer on the machine(s) listed is not listening on the specified port. TCP connectivity to the AdtServer machine is blocked by firewall, IPSec, or other filtering mechanism AdtServer
    on the machine(s) listed actively refused the connection (due to policy or current activity load). For detailed failure information, enable trace logging using the TraceFlags registry key and examine the AdtAgent.log in the \temp subdirectory of the Windows
    directory.
    13) On the DC in the untrusted domain I created DWORD reg value
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AdtAgent\Parameters\TraceFlags and set it to 524420 decimal. The resulting c:\windows\temp\AdtAgent.log file only confirmed that I'm getting 0x80090325 errors.
    After all this, why am I getting 0x80090325, which translates to SEC_E_UNTRUSTED_ROOT ??? Did I do something wrong in steps 5, 7 and 8? Thanks for reading all the way through :)
    Marko

    Thanks Yan Li, you gave me an idea. I got the ACS forwarder in the untrusted domain to work (!), by analyzing the setup on the SCOM gateway that I set up in the untrusted domain. I issued the ACS forwarder a certificate from the domain that SCOM is in, INSTEAD
    of configuring the ACS forwarder to use the certificate that it already had from its own domain.
    So the new procedure is: do steps 1 and 2, then instead of step 3 I did this…
    2B) I issued a certificate from the AD domain containing SCOM to the domain controller in the untrusted domain that is my ACS forwarder. I did this from the AD Certificate Services web site, and asked it to use certificate template that I created for the
    SCOM gateway server in the untrusted domain.
    2C) The new certificate appeared in the Personal store of the domain controller. I exported it, then ran the MomCertImport utility so that I would not get an error in the next step (per
    http://www.systemcentercentral.com/scom-deployment-across-multiple-networks/)
    3) On the domain controller in the untrusted domain, I re-ran "adtserver -c", and selected the new certificate.
    3B) I then ran “MomCertImport /Remove”, since I already have a SCOM gateway in the untrusted domain.
    Then I proceeded with steps 4, skipped 5, did 6, skip 7-8, did 9-11, result was this on the DC in the untrusted domain, in its Event Viewer > Apps and Services > Operations Manager
    2/3/2015 12:20:01 PM Source AdtAgent Event ID 4368 Forwarder successfully connected to the following collector:
    <ACScollectorFQDN>:51909, status: 0x0 (success), source: registry
    addresses tried: <IPaddress>:51909
    ACS forwarding works now! I will confirm by repeating the procedure for another domain controller in the untrusted forest.
    Marko

  • Domain is not discovered in untrusted forest

    I have the following Setup.
    Domain A in forest A. ASCCM2012 Primary Server  with SCCM 2012 SP1 CU1 server installed with MP,DP and SUP. Domain A i a 2008 R2 domain.
    Domain B in Forest B, MP and DP and SUP installed on BSCCM2012. Domain B is a 2012 domain.
    There is no trust between forest A and forest B. For the testing the firewalls on the SCCM servers are disabled. There is full network connectivity between the servers. I have setup a forest discover account SCCMADDiscover that is created in domain B as a normal
    user.
    Problem.
    I have setup forest discovery (and thereby forest publishing) of the Forest B on the Primary SCCM server.
    In the console on the "Active Directory Forests" it says that both the discover and the publishing have been successfully.
    But when I look at the "Domains" tab for the Forest B it says “No Items Found”.
    When I look in the ADForestDisc.log file I see the following errors:
    Entering function GetUserCredentials() SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:20 7988 (0x1F34)
    ERROR: [ForestDiscoveryAgent]: Failed to save data for domain B in forest B due to ActiveDirectoryOperationException. Discovery will be attempted on next cycle. SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:21 7988 (0x1F34)
    Entering function ReportForestDiscoverySuccessStatusMessage() SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:21 7988 (0x1F34)
    Raising discovery success status message for forest B, in which we discovered 1 site(s) and 0 subnet(s). SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:21 7988 (0x1F34)
    Calling ReportStatus, keys= SMS_AD_FOREST_DISCOVERY_MANAGER, 1073750724, 0 SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:21 7988 (0x1F34)
    STATMSG: ID=8900 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_AD_FOREST_DISCOVERY_MANAGER" SYS=ASCCM2012 SITE=P01 PID=2344 TID=7988 GMTDATE=to maj 16 11:07:21.315 2013 ISTR0="AssensOpen.dk" ISTR1="" ISTR2="" ISTR3=""
    ISTR4="0" ISTR5="1" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:21 7988 (0x1F34)
    Entering function CActiveDirectoryForestDiscovery::UpdateForestNamesForAllSiteSystems() SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:21 7988 (0x1F34)
    Trying to update forest fqdn for all site systems associated with site P01 SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:21 7988 (0x1F34)
    Entering function CActiveDirectoryForestDiscovery::UpdateForestNamesForSiteSystems() SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:21 7988 (0x1F34)
    Entering function CActiveDirectoryForestDiscovery::GetForestName() SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:21 7988 (0x1F34)
    Trying to discover forest name for server BSCCM2012. SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:21 7988 (0x1F34)
    Failed to get the domain basic info for machine BSCCM2012. Error returned is: 5 SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:21 7988 (0x1F34)
    Entering function CActiveDirectoryForestDiscovery::GetForestName() SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:21 7988 (0x1F34)
    Trying to discover forest name for server BSCCM2012 SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:21 7988 (0x1F34)
    Failed to get the domain basic info for machine BSCCM2012 Error returned is: 5 SMS_AD_FOREST_DISCOVERY_MANAGER 16-05-2013 13:07:21 7988 (0x1F34)
    As it can be seen in the log file it fails to get forest name and domain name for the server BSCCM2012 in the untrusted domain. It gets an error 5 that I assume is a Access Denied.
    I have tried to give the SCCMADDiscover account domain and enterprise admin rights but that did not help. I have also tried to add the SCCMADDiscover to the local admin group on BSCCM2012 server but that didn’t help either.
    It also seems that the data is not saved correct.
    ERROR: [ForestDiscoveryAgent]: Failed to save data for domain B in forest B due to ActiveDirectoryOperationException
    Where is it the SCCMADDiscover account have insufficient rights?
    Thomas Forsmark Soerensen

    Thanks for letting me know. This means that this is not the root cause, so I can focus on other things.
    There´s also another problem I´m not sure if it related to the Forest Discovery and I wonder if it´s the same for you. I will create a separate topic if it´s not related, but maybe you can confirm from your side. For the Computers which have been discovered
    in the untrusted Forest, when I go to the properties of a system, the property "System OU Name" changes from time to time. When I look at the property throughout the day for different systems it´s sometimes empty, sometimes shows the complete OU paths and
    sometimes just the single OU Containers. For example when a System is located in EU\COMPUTERS\SERVERS, sometimes the whole path is shown (like for all systems in the trusted Forest) and sometimes it just shows "EU";"COMPUTERS";"SERVERS" or it´s just empty.
    All for the same system during different times throughout the day. Like it´s not able to grab the complete OU paths. I have no error in the AD System discovery log, so I wonder if this is related to the Forest Discovery too.
    This makes it impossible to build collections based on System OUs, so I am using the DN currently (which is populated properly).

  • Error while running the console on WLCS 3.5

    Hi there,
    I'm running WLCS3.5/WL 6.1 and I'm getting very often this exception when
    using the console:
    <Dec 30, 2001 2:21:48 PM EST> <Error> <HTTP> <Connection failure
    java.net.SocketException: Error in poll for fd: '60', revents: '24'
    at
    weblogic.socket.PosixSocketMuxer.deliverBadNews(PosixSocketMuxer.java:429)
    at
    weblogic.socket.PosixSocketMuxer.processSockets(PosixSocketMuxer.java:384)
    at
    weblogic.socket.SocketReaderRequest.execute(SocketReaderRequest.java:24)
    at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:139)
    at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)
    >
    I also get the same behaviour under WL 6.1 alone when accessing the console.
    My environment is:
    Weblogic Version: WebLogic Server 6.1 SP1
    JDK Vendor: Blackdown Java-Linux Team
    JDK Version: 1.3.1
    Operating System: Linux
    Does anybody know where this is coming from?
    Thanks,
    Dan

    Daniel,
    Thanks for the hint.
    Indeed, these are all file descriptors and the error has to do something
    with the way poll(2) is implemented in the gcc library
    and/or used by WebLogic. revents is a bitmask constructed by OR-ing a
    combination of some event flags.
    It is weird though that this appears only when running the console and never
    when running any other application.
    I'll keep digging, maybe I'll find why this happens. I will also try to
    install it on different Linux distros.
    Thanks again,
    Dan
    "Daniel Selman" <[email protected]> wrote in message
    news:3c476601$[email protected]..
    Dan,
    I'm no LINUX guru but I would guess that "fd" is file descriptor (for the
    socket connection), and WebLogic cannot acquire one for a socket it is
    trying to open. I would root around for config information surrounding the
    number of sockets you can open simultaneously.
    Sincerely,
    Daniel Selman
    "Dan" <[email protected]> wrote in messagenews:[email protected]..
    Hi there,
    I'm running WLCS3.5/WL 6.1 and I'm getting very often this exceptionwhen
    using the console:
    <Dec 30, 2001 2:21:48 PM EST> <Error> <HTTP> <Connection failure
    java.net.SocketException: Error in poll for fd: '60', revents: '24'
    at
    weblogic.socket.PosixSocketMuxer.deliverBadNews(PosixSocketMuxer.java:429)
    at
    weblogic.socket.PosixSocketMuxer.processSockets(PosixSocketMuxer.java:384)
    at
    weblogic.socket.SocketReaderRequest.execute(SocketReaderRequest.java:24)
    at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:139)
    at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)
    >
    I also get the same behaviour under WL 6.1 alone when accessing theconsole.
    My environment is:
    Weblogic Version: WebLogic Server 6.1 SP1
    JDK Vendor: Blackdown Java-Linux Team
    JDK Version: 1.3.1
    Operating System: Linux
    Does anybody know where this is coming from?
    Thanks,
    Dan

  • Active Directory : Replication Issue - "Disconnected" sub-domain from the Forest

    Hello everyone,
    I'm managing a multi-domain forest (with 7 sub-domain).  All are working fine except for one.  Throught repadmin (Repadmin /replsum /bysrc /bydest /sort:delta), I noticed I got both domain controllers of a subdomain (there are only 2 DCs in that
    subdomain), who hadn't replicated with the rest of the forest for more than 60 days.
    According to my research, it's usually recommended to Depromote and repromote the problematic DC to avoid the issue of lingering objects.  In this case, it's both DC of a sub-domain.  Of course, on the others DCs in the forest, I got the event
    ID 2012 "it has been too long since this machine last replicated with the named source machine....". 
     HKLM\System\CurrentControlSet\Services\NTDS\Parameters\Allow Replication With Divergent and Corrupt Partner
    to a value of 1. 
    As I understand it, this may cause lingering objects to appear (they can be removed with repadmin /removelingeringobjects command with the DSA GUID, naming context, etc..).  So far, I haven't used that registry key yet because of the associated risks.
    I didn't noticed any other issue so far.  Users in the problematic sub-domain are fine, and the problematic sub-domain seems to be able to pull replication data from the others DCs in the forests. (at least, I'm not getting any error in the A.D. Sites
    and Services)
    I added two new DCs for the affected sub-domains, so the number of DCs for that domain went from 2 to 4 DCs.  The two old DCs that hadn't replicated for 60 days are windows Server 2003 and the two new DCs are Server 2008 R2. 
    Unfortunately (and I was half expecting this, but did it anyway since I must eventually replace the old DCs), that didn't solve my issue, since the rest of the forest "doesn't see" the two new DCs of the sub-domain.  By that, I mean that I
    cannot add an Active Directory Domain Services Connection in Sites & Services console (from a DC in another domain of the forest or even the root domain).  I see all the DCs, including the two old DCs that are server 2003, but not the new ones. 
    I believe it's because the others DCs doesn't pull/replicate the information from the old DCs anymore, so they aren't "aware" of the two new DCs for that problematic sub-domain.
    I was wondering what is the best course of action. Is it worthwhilte to use the registry key force replication with the old DCs ?  (and hopefully, the new DCs will get their AD Services connection/replication vector created, so I can depromote
    the old DCs.
    Since the Old DCs from the problematic sub-domain seems to be able to pull the replication from the rest of the forest, does the risk of Lingering object isn't that great ?
    Or is it too risky and I must create a new sub-domain and migrate one way or another the users ? (which would be time-consuming)
    Thanks in advance,
    Adam

    Thanks for the reply.  One of the link had another link to a good article about the use of repadmin :
    So, I ran the command "repadmin /removinglingerobjects " on one of the problematic DCs ().
    For clarity purpose, let's say I used the domain :
    domain = main domain
    subdomain = the domain whose DC are problematic (all of them).
    AnotherSubDomain = Just another subdomain I used as a "reference" DC to cleanup the appropriate partition.
    Command (the DSA guid is from a DC "clean" in another domain)
    repadmin /removelingeringobjects adrec01.mysubdomain.domain.ca C4081E00-921A-480D-9FDE-C4C34F96E7AC dc=ANOTHERsubdomain,dc=domain,dc=ca /advisory_mode
    I got the following message in the event viewer :
    Active Directory Domain Services has completed the verification of lingering objects on the local domain controller in advisory mode. All objects on this domain controller have had their existence verified on the following source domain controller.
    Source domain controller:
    c4081e00-921a-480d-9fde-c4c34f96e7ac._msdcs.mydomain.ca
    Number of objects examined and verified:
    0
    Objects that have been deleted and garbage collected on the source domain controller yet still exist on this domain controller have been listed in past event log entries. To permanently delete the lingering objects, restart this procedure without using the
    advisory mode option.
    How should I interpret the message "number of objects examined and verified 0".  Does it mean it just didn't find any object to compare ? (which would be odd IMHO)  Or there is another problem ?
    Thanks in advance,
    Adam

  • I need a code to run a report from a forms on 10G...

    Hi!! I´m migrating from 6i to 10G and i cant run a report... can someone send me a sample code to run a report from a form in 10G??
    Thanks!!
    Regards!

    iam using Javabean in oracle 10g forms to tun the report....
    First create a block with a name control and add an bean to it with a name
    userid_bean.click the proerty of the bean and changes its width and height
    so that u cannot see it when u run the particular form.
    now use the below code where u are coding to run the report.
    Declare
    rep_url varchar2(2000);
    begin
    rep_url := '/reports/rwservlet?report=filepath\rep1.RDF' ||
    '&desformat=htmlcss&destype=cache&userid=sample/sample@oracle' || '&paramform=yes';
    -- Write Log messages to the Forms JInitiator console.The Next line must
    -- be disabled before running this code in any production environment.
    set_custom_property('control.userid_bean',1,'ADD_USERID',
    get_application_property(username)||'/'||
              get_application_property(password)||'@'||
              get_application_property(connect_string));
    -- writing the cookie
    set_custom_property('control.userid_bean',1,'WRITE_USERID_COOKIE','10g');
    web.show_document(rep_url,'_blank');
    end;

  • How to access solaris management console from web browser??

    Hi,
    I am running Sol9 with the latest patches. The console gui freezes every time I try to admin NIS users in my NIS toolbox. It used to work but now it doesn't. I need to access this thing from a web browser if that's possible since there is no console that I can install on my windows laptop that can connect to the server.
    Can this be done?? I can't find any info on docs.sun.com on what URL and port to use.
    I did find something that says there is a /usr/sadm/bin/smcwebserver but it does not exist on any of my machines.
    Help?? Please???
    Thanks,
    Tom

    On my machine, when I point my browser to http://<hostname>:898 (the management server port) I get a nice message telling me that a web version of the Solaris Management Console is not currently available. Running the console tells me I'm running v2.1 which is what came out of the box.
    I think the webserver component you refer to only ships with v3.0 and later. You can go to http://wwws.sun.com/software/solaris/sunmanagementcenter/index.html and download a base version for free to check it out.
    By the way, I don't use a remote console to manage remote servers. It's too clunky. My solution for running the SMC remotely is to start an XServer on my laptop, telnet to the Sun host, su - root, set DISPLAY=<mylaptop>:0 and then run smc directly from the host. As long as there's no firewall blocking port 6000 between you and your host, you should be OK. This should be straightforward if you've run any graphical X apps before.
    However, I don't administer NIS and my laptop is a Mac. Your mileage may vary considerably.

  • Run command line from receiver

    Hello,
    I write script to transfer file from our local drive to sFTP server.
    I try to run  the script from Run Operating System Command After Message Processing in CC
    The script not run.
    When I try to run this script from our XI server from CMD the script running.
    I add the script command line:
    "C:\Program Files\WinSCP\WinSCP.exe" /console /script="C:\Program Files\WinSCP\fromnetafim.txt"&"C:\Program Files\WinSCP\script.bat"
    I'll be happy to hear what I need to add to this line to run the script from communication channel.
    Elad

    Hi,
    You just post ur output file in some folder , lets say /usr/sap/sapout/test/.and the shell script in this path /usr/sap/bin/convert.sh.
    Inside the File access parameters put target directory and filename scehme and for shell script give processing parameters as File construction mode , File type and OS Command and use a space after the shell script name and the %F.
    And for input can use it directly.
    Check out these links. First one will help you in acheiving want you want.
    /people/sameer.shadab/blog/2005/09/21/executing-unix-shell-script-using-operating-system-command-in-xi
    /people/michal.krawczyk2/blog/2007/02/08/xipi-command-line-sample-functions
    /people/michal.krawczyk2/blog/2005/08/17/xi-operation-system-command--error-catching
    http://help.sap.com/saphelp_nw70/helpdata/en/e3/94007075cae04f930cc4c034e411e1/content.htm
    Also have a look on this thread.
    Re: RUN OPERATING SYSTEM COMMAND BEFORE MESSAGE PROCESING?
    regards
    Aashish Sinha
    PS : reward points if helpful

Maybe you are looking for

  • Issues with opening PDF in browser

    I am trying to open a pdf in my browser but it will only save or save as.  I need it to open in my browser as I need to complete the areas allowed and save/send back. I looked in the Reader and it shows Web Browser options is correct.  I have Windows

  • Best method for keeping iMovie projects long term?

    I read through 30 pages of posts as I think this is a pretty basic question, but didn't see it directly addressed, so please forgive me... Some of my movies are mammoth in size (as much as 30GB for 1 movie), which I've learned are due to iMovie handi

  • HT201198 how do i know my apple protection plan is activated or not

    how do i know my apple protection plan is activated or not

  • Cannot find symbol error when compiling in different packages

    Hey all, I'm trying to divide my project into a sensible hierarchy. This is what I want: MyProject MyProject/src ................................. where all the source files are (no further directories) MyProject/classes MyProject/classes/Main.class

  • Need Instance level failover in Windows Azure

    Hi, I have windows azure and sql server 2008 r2. I need to incorporate instance level failover (like widows failover cluster). How do i configure failover cluster in windows azure. Please dont recommend as Always on. since it has only DB level failov