2k12 server VPN fails after migration

I migrated my DC to another server using VMware ESXi 5.5 to do maintenance on the old server, so this new server is only temporary. The issue I'm having after using the VMware converter standalone (I've also used Veeam) is the VPN - Routing
and Remote Access no longer will work. When I try connecting through the VPN it gets to the points to verifying username and password, but errors out and I get an error 628.
What would cause the VPN no longer to work and what logs should I look at? I did read that error 628 is a certificate issue, but I checked the certificate and it matches and isn't expired. I have also tried reconfiguring and uninstalling and reinstalling RRAS,
but the only difference is under RRAS > IPv4 > General > I now see Ethernet being the only thing new, but when I connect I get the same error 628.
What should I do?

Hi,
Error 628 means that the port was disconnected. This error may occur in a lot of cases.
To find the reason why the connection is disconnected, please check the event of the
RemoteAccess in the server.
Besides, what's type you configured on the RRAS to assign the IP address to remote client. Please make sure that there is valid IP address in the address pool. If the RRAS client can't assgin the address to the client, the connection will be terminated.
Best Regards.
Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

Managed Server Startup failed after upgrade to 11.1.1.6 from 11.1.1.4

We tried to upgrade from SOA Suite 11.1.1.4 to 11.1.1.6.
After upgrade when we tried to start our managed servers we get the below error. Did anyone ran into this? If so how did you resolve it?.
Its still referring to some Weblogic 10.3.4 libraries. We were not able to find out where..
<Mar 22, 2012 3:21:29 PM CDT> <Critical> <WebLogicServer> <BEA-000386> <Server subsystem failed. Reason: java.lang.AssertionError: java.lang.ClassNotFoundException: weblogic.jndi.internal.ServerNamingNode_1034_WLStub
java.lang.AssertionError: java.lang.ClassNotFoundException: weblogic.jndi.internal.ServerNamingNode_1034_WLStub
at weblogic.jndi.WLInitialContextFactoryDelegate.newRootNamingNodeStub(WLInitialContextFactoryDelegate.java:610)
at weblogic.jndi.WLInitialContextFactoryDelegate.newRemoteContext(WLInitialContextFactoryDelegate.java:577)
at weblogic.jndi.WLInitialContextFactoryDelegate.newContext(WLInitialContextFactoryDelegate.java:482)
at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java:376)
at weblogic.jndi.Environment.getContext(Environment.java:315) Truncated. see log file for complete stacktrace
Caused By: java.lang.ClassNotFoundException: weblogic.jndi.internal.ServerNamingNode_1034_WLStub at java.net.URLClassLoader$1.run(URLClassLoader.java:202) at java.net.URLClassLoader.findClass(URLClassLoader.java:190) at java.lang.ClassLoader.loadClass(ClassLoader.java:306) at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308) at java.lang.ClassLoader.loadClass(ClassLoader.java:247) Truncated. see log file for complete stacktrace>
The WebLogic Server encountered a critical failure
Reason: Failed to load stub for class class weblogic.server.RemoteLifeCycleOperationsImpl
Exception in thread "Main Thread" java.lang.AssertionError: Failed to load stub for class class weblogic.server.RemoteLifeCycleOperationsImpl at weblogic.rmi.extensions.StubFactory.getStub(StubFactory.java:145) at weblogic.rmi.extensions.StubFactory.getStub(StubFactory.java:124) at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialReference(WLInitialContextFactoryDelegate.java:427) at weblogic.jndi.Environment.getInitialReference(Environment.java:245) at weblogic.server.ServerLifeCycleRuntime.getLifeCycleOperationsRemote(ServerLifeCycleRuntime.java:1083) at weblogic.t3.srvr.ServerRuntime.sendStateToAdminServer(ServerRuntime.java:429) at weblogic.t3.srvr.ServerRuntime.updateRunState(ServerRuntime.java:415)
at weblogic.t3.srvr.T3Srvr.setState(T3Srvr.java:206) at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:482) at weblogic.Server.main(Server.java:71)
Thanks,
Jp

Hi,
I found an oracle note with the next solution:
Add -Xverify:none to the JVM Arguments in the WebLogic console if you're using Node Manager to start managed servers:
1. Go into WebLogic Console
2. Navigate to Environment> Servers> [Sever_name]> Server Start> Arguments
3. Add -Xverify:none to the arguments
4. Restart the WebLogic server
5. Retest the issue.
6. Migrate the solution as appropriate to other environments.
Or
If you're not using Node Manager to start managed servers:
Edit the WebLogic start-up script to add -Xverify:none to the JVM arguments
See if it works for you
Arik

881 VPN fails after 24hrs/IKE key lifetime

Hi all,
This is my first post on the support forms and I only just got my CCNA, so please bear with me and don't shoot me if I pose a slightly newbish perspective on things. Thanks in advance.
We've got a central office (actually quite small) where several IPSec connections connect to. Two of these connections are Cisco 881 routers. One of them works fine, the other craps out after 24 hours (coincidentally also the IKE key lifetime). When I mean "craps out", it means the VPN worked fine from the get go, until 24 hours later. Only a reload will bring back the VPN tunnel. I've verified my PFS and DPD configurations are solid, because these kind of symptoms would most likely occur when these configurations aren't in order.
The two 881 configurations are quite similar. The only differences between the two are some details in the PPPoE configurations and (quite obviously) the IP address space for the two sites. Both operate on the premise of a point to point connection (no multipoint stuff going on here).
I have examined all I can. It took me two weeks to make sure I exhausted all my options before I post my issue here.
Here is a brief list of things I've done.
- Checked configuration of central router (which is a Mikrotik RB800 btw)
- Verified that the central router is not the cause of the VPN not coming back. Rebooted it as a last resort; VPN stays down. Rebooted 881, VPN comes back.
- I've downgraded the 881 firmware image from version 152.4.M2 to 151.4.M4 (the succesful 881 was running the 151.4.M4 image, and I found some Ipsec issues in the caveat for version 152.4.M2), but to no avail.
- I've tried to clear several crypto components hoping to restore key exchanging, also to no avail. Only a reload will suffice.
I've included the 881's config:
Building configuration...Current configuration : 7795 bytes
! Last configuration change at 15:37:50 Paris Tue May 28 2013 by admin
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname <<removed>>
boot-start-marker
boot system flash c880data-universalk9-mz.151-4.M4.bin
boot-end-marker
logging buffered 102400
enable secret 4 <<removed>>
no aaa new-model
memory-size iomem 10
clock timezone Paris 1 0
clock summer-time Paris date Mar 30 2003 2:00 Oct 26 2003 3:00
crypto pki token default removal timeout 0
!no ip source-route
ip dhcp excluded-address 192.168.4.1 192.168.4.9
ip dhcp excluded-address 192.168.4.199 192.168.4.254
ip dhcp pool Main
network 192.168.4.0 255.255.255.0
dns-server 192.168.4.250 8.8.4.4
default-router 192.168.4.250
lease infinite
ip cef
ip domain lookup source-interface Dialer1
ip domain name <<removed>>
ip name-server 8.8.4.4
ip name-server 192.168.58.199
no ipv6 cef
password encryption aes!
object-group network SUBNET_DUITSLAND
description Hele subnet IC Duitsland
192.168.4.0 255.255.255.0
object-group network SUBNET_IC_ARNHEM
description Hele subnet IC Arnhem
192.168.58.0 255.255.255.0
object-group network WAN_IC_ARNHEM
description Het WAN IP adres van IC Arnhem
host <<removed>>
vtp mode transparent
username <<removed>> privilege 15 view root secret 4 <<removed>>
class-map type inspect match-all sdm-cls-VPNOutsideToInside-1
match access-group 102
class-map type inspect match-all sdm-cls-VPNOutsideToInside-2
match access-group 105
class-map type inspect match-all ccp-cls--1
match access-group name Outgoing
class-map type inspect match-all ccp-cls--2
match access-group name Incoming
policy-map type inspect ccp-policy-ccp-cls--1
class type inspect ccp-cls--1
pass
class class-default
drop
policy-map type inspect ccp-policy-ccp-cls--2
class type inspect ccp-cls--2
pass
class type inspect sdm-cls-VPNOutsideToInside-1
inspect
class type inspect sdm-cls-VPNOutsideToInside-2
inspect
class class-default
drop
zone security Inside
zone security Outside
zone-pair security sdm-zp-Inside-Outside source Inside destination Outside
service-policy type inspect ccp-policy-ccp-cls--1
zone-pair security sdm-zp-Outside-Inside source Outside destination Inside
service-policy type inspect ccp-policy-ccp-cls--2
crypto logging ezvpn
crypto isakmp policy 1
encr aes 256
authentication pre-share
group 5
crypto isakmp key <<removed>> address <<removed>>
crypto isakmp invalid-spi-recovery
crypto isakmp keepalive 10 periodic
crypto ipsec security-association lifetime seconds 28800
crypto ipsec transform-set ESP-AES256-SHA esp-aes esp-sha-hmac
crypto map SDM_CMAP_1 1 ipsec-isakmp
description Tunnel to CO
set peer <<removed>>
set transform-set ESP-AES256-SHA
set pfs group5
match address 104
interface FastEthernet0
no ip address
interface FastEthernet1
no ip address
interface FastEthernet2
no ip address
interface FastEthernet3
no ip address
interface FastEthernet4
description DeutscheTelekom$ETH-WAN$
no ip address
duplex auto
speed auto
pppoe-client dial-pool-number 1
interface Vlan1
description $FW_INSIDE$
ip address 192.168.4.250 255.255.255.0
ip mask-reply
ip nat inside
ip virtual-reassembly in
zone-member security Inside
ip tcp adjust-mss 1412
interface Dialer1
description $FW_OUTSIDE$
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly in
zone-member security Outside
encapsulation ppp
no ip route-cache
dialer pool 1
dialer-group 1
ppp authentication pap callin
ppp chap hostname <<removed>>
ppp chap password 7 <<removed>>
ppp pap sent-username <<removed>> password 7 <<removed>>
ppp ipcp dns request
ppp ipcp address accept
crypto map SDM_CMAP_1
ip forward-protocol nd
no ip http server
ip http access-class 2
ip http authentication local
ip http secure-server
ip nat inside source route-map SDM_RMAP_1 interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer1 permanent
ip access-list extended Incoming
remark CCP_ACL Category=128
permit ip any object-group SUBNET_DUITSLAND
ip access-list extended Outgoing
remark CCP_ACL Category=128
permit ip object-group SUBNET_DUITSLAND any
ip access-list extended SDM_HTTPS
remark CCP_ACL Category=1
permit tcp any any eq 443
ip access-list extended SDM_SHELL
remark CCP_ACL Category=1
permit tcp any any eq cmd
ip access-list extended SDM_SSH
remark CCP_ACL Category=1
permit tcp any any eq 22
no logging trap
access-list 1 remark CCP_ACL Category=2
access-list 1 permit 192.168.4.0 0.0.0.255
access-list 2 permit <<removed>>
access-list 2 remark Auto generated by SDM Management Access feature
access-list 2 remark CCP_ACL Category=1
access-list 2 permit 192.168.4.0 0.0.0.255
access-list 2 permit 192.168.58.0 0.0.0.255
access-list 101 remark Auto generated by SDM Management Access feature
access-list 101 remark CCP_ACL Category=1
access-list 101 permit ip 192.168.4.0 0.0.0.255 any
access-list 101 permit ip host <<removed>> any
access-list 101 permit ip 192.168.58.0 0.0.0.255 any
access-list 102 remark CCP_ACL Category=0
access-list 102 permit ip 192.168.58.0 0.0.0.255 192.168.4.0 0.0.0.255
access-list 103 remark CCP_ACL Category=2
access-list 103 remark IPSec Rule
access-list 103 deny ip 192.168.4.0 0.0.0.255 192.168.58.0 0.0.0.255
access-list 103 permit ip 192.168.4.0 0.0.0.255 any
access-list 104 remark CCP_ACL Category=4
access-list 104 remark IPSec Rule
access-list 104 permit ip 192.168.4.0 0.0.0.255 192.168.58.0 0.0.0.255
access-list 105 remark CCP_ACL Category=0
access-list 105 permit ip 192.168.58.0 0.0.0.255 192.168.4.0 0.0.0.255
dialer-list 1 protocol ip permit
route-map SDM_RMAP_1 permit 1
match ip address 103
line con 0
line aux 0
line vty 0 4
access-class 101 in
privilege level 15
password 7 <<removed>>
login local
transport input ssh
ntp update-calendar
ntp server de.pool.ntp.org prefer
end
Also, I have some ISAKMP debug output (when the VPN fails, I can still reach the router via the internet):
.May 29 08:31:22.848: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:31:28.848: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:31:30.016: ISAKMP: set new node 0 to QM_IDLE
.May 29 08:31:30.016: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local <<remote office WAN IP>>, remote <<central office WAN IP>>)
.May 29 08:31:30.016: ISAKMP: Error while processing SA request: Failed to initialize SA
.May 29 08:31:30.016: ISAKMP: Error while processing KMI message 0, error 2.
.May 29 08:31:30.016: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:31:30.016: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1
.May 29 08:31:30.016: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:31:30.016: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:31:30.016: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:31:34.848: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:31:40.016: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:31:40.016: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
.May 29 08:31:40.016: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:31:40.016: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:31:40.016: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:31:40.844: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:31:46.380: ISAKMP:(0):purging node 297623767
.May 29 08:31:46.380: ISAKMP:(0):purging node -1266458641
.May 29 08:31:46.452: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:31:49.848: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<<remote office WAN IP>>, prot=50, spi=0xCF8BD5F3(3482047987), srcaddr=<<central office WAN IP>>, input interface=Dialer1
.May 29 08:31:50.016: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:31:50.016: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1
.May 29 08:31:50.016: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:31:50.016: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:31:50.016: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:31:52.845: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:31:56.381: ISAKMP:(0):purging SA., sa=874CF15C, delme=874CF15C
.May 29 08:31:58.849: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:00.017: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:32:00.017: ISAKMP:(0):peer does not do paranoid keepalives..May 29 08:32:00.017: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer <<central office WAN IP>>)
.May 29 08:32:00.017: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer <<central office WAN IP>>)
.May 29 08:32:00.017: ISAKMP: Unlocking peer struct 0x874792E0 for isadb_mark_sa_deleted(), count 0
.May 29 08:32:00.017: ISAKMP: Deleting peer node by peer_reap for <<central office WAN IP>>: 874792E0
.May 29 08:32:00.017: ISAKMP:(0):deleting node -118750948 error FALSE reason "IKE deleted"
.May 29 08:32:00.017: ISAKMP:(0):deleting node -1193365643 error FALSE reason "IKE deleted"
.May 29 08:32:00.017: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
.May 29 08:32:00.017: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_DEST_SA.May 29 08:32:02.037: ISAKMP:(0): SA request profile is (NULL)
.May 29 08:32:02.037: ISAKMP: Created a peer struct for <<central office WAN IP>>, peer port 500
.May 29 08:32:02.037: ISAKMP: New peer created peer = 0x875BF6B8 peer_handle = 0x8000000A
.May 29 08:32:02.037: ISAKMP: Locking peer struct 0x875BF6B8, refcount 1 for isakmp_initiator
.May 29 08:32:02.037: ISAKMP: local port 500, remote port 500
.May 29 08:32:02.037: ISAKMP: set new node 0 to QM_IDLE
.May 29 08:32:02.037: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 85C6B420
.May 29 08:32:02.037: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
.May 29 08:32:02.037: ISAKMP:(0):found peer pre-shared key matching <<central office WAN IP>>
.May 29 08:32:02.037: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
.May 29 08:32:02.041: ISAKMP:(0): constructed NAT-T vendor-07 ID
.May 29 08:32:02.041: ISAKMP:(0): constructed NAT-T vendor-03 ID
.May 29 08:32:02.041: ISAKMP:(0): constructed NAT-T vendor-02 ID
.May 29 08:32:02.041: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
.May 29 08:32:02.041: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1.May 29 08:32:02.041: ISAKMP:(0): beginning Main Mode exchange
.May 29 08:32:02.041: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:32:02.041: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:32:04.849: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:10.845: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:12.041: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:32:12.041: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
.May 29 08:32:12.041: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:32:12.041: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:32:12.041: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:32:16.845: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:22.041: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:32:22.041: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
.May 29 08:32:22.041: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:32:22.041: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:32:22.041: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:32:22.449: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:28.846: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:32.038: ISAKMP: set new node 0 to QM_IDLE
.May 29 08:32:32.038: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local <<remote office WAN IP>>, remote <<central office WAN IP>>)
.May 29 08:32:32.038: ISAKMP: Error while processing SA request: Failed to initialize SA
.May 29 08:32:32.038: ISAKMP: Error while processing KMI message 0, error 2.
.May 29 08:32:32.042: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:32:32.042: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1
.May 29 08:32:32.042: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:32:32.042: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:32:32.042: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:32:34.846: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:40.846: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:42.042: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:32:42.042: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
.May 29 08:32:42.042: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:32:42.042: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:32:42.042: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:32:46.846: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:50.018: ISAKMP:(0):purging node -118750948
.May 29 08:32:50.018: ISAKMP:(0):purging node -1193365643
.May 29 08:32:51.346: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<<remote office WAN IP>>, prot=50, spi=0xCF8BD5F3(3482047987), srcaddr=<<central office WAN IP>>, input interface=Dialer1
.May 29 08:32:52.042: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:32:52.042: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1
.May 29 08:32:52.042: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:32:52.042: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:32:52.042: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:32:52.846: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:58.847: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:33:00.019: ISAKMP:(0):purging SA., sa=875BE8B8, delme=875BE8B8
.May 29 08:33:02.043: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:33:02.043: ISAKMP:(0):peer does not do paranoid keepalives..May 29 08:33:02.043: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer <<central office WAN IP>>)
.May 29 08:33:02.043: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer <<central office WAN IP>>)
.May 29 08:33:02.043: ISAKMP: Unlocking peer struct 0x875BF6B8 for isadb_mark_sa_deleted(), count 0
.May 29 08:33:02.043: ISAKMP: Deleting peer node by peer_reap for <<central office WAN IP>>: 875BF6B8
.May 29 08:33:02.043: ISAKMP:(0):deleting node 1839947115 error FALSE reason "IKE deleted"
.May 29 08:33:02.043: ISAKMP:(0):deleting node -1221586275 error FALSE reason "IKE deleted"
.May 29 08:33:02.043: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
.May 29 08:33:02.043: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_DEST_SA.May 29 08:33:02.455: ISAKMP:(0): SA request profile is (NULL)
.May 29 08:33:02.455: ISAKMP: Created a peer struct for <<central office WAN IP>>, peer port 500
.May 29 08:33:02.455: ISAKMP: New peer created peer = 0x874792E0 peer_handle = 0x8000000B
.May 29 08:33:02.455: ISAKMP: Locking peer struct 0x874792E0, refcount 1 for isakmp_initiator
.May 29 08:33:02.455: ISAKMP: local port 500, remote port 500
.May 29 08:33:02.455: ISAKMP: set new node 0 to QM_IDLE
.May 29 08:33:02.455: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 87060E68
.May 29 08:33:02.455: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
.May 29 08:33:02.455: ISAKMP:(0):found peer pre-shared key matching <<central office WAN IP>>
.May 29 08:33:02.455: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
.May 29 08:33:02.455: ISAKMP:(0): constructed NAT-T vendor-07 ID
.May 29 08:33:02.455: ISAKMP:(0): constructed NAT-T vendor-03 ID
.May 29 08:33:02.455: ISAKMP:(0): constructed NAT-T vendor-02 ID
.May 29 08:33:02.455: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
.May 29 08:33:02.455: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1.May 29 08:33:02.455: ISAKMP:(0): beginning Main Mode exchange
.May 29 08:33:02.455: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:33:02.455: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:33:04.847: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>ndebug crypto isakmp
.May 29 08:33:10.847: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>o debug crypto isakmp
Crypto ISAKMP debugging is off
IC-Deutschland#
.May 29 08:33:12.455: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:33:12.455: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
.May 29 08:33:12.455: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:33:12.455: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:33:12.455: ISAKMP:(0):Sending an IKE IPv4 Packet.
Can anyone shed some light as what could be going on?
Much obliged!

Unfortunately I do not have a support contract for our hardware. I wouldn't even know how to get one.
However, we do pay top dollar for the equipment and it seems one it's components doesn't work as advertised. So if no support is given I will have to try warrenty instead. This does mean I have to replace the unit with a competitor brand which isn't something I'm keen to do because I want to use Cisco as our main brand. This issue effectively nukes my entire plan.
Given our work load, CPU power isn't an issue. The encryption level is set to this level because I'm paranoid. Which I reckon is a good thing when it comes to network security (correct me if I'm wrong). Do you suspect these settings could be of any influence in this particular case?
If I remember correctly I used the "debug crypto isakmp" or "debug crypto isakmp errors" and "debug crypto ipsec" (also perhaps with the "error" suffix), I'm not sure.

Report generation failed after migrated from 6i to 10g.

Hi All,
i have migrated the 6i application to 10g.
There was a report which was generated in .html format and saved to a remote server location.
Now after migration to 10g,when i run the report through the URL ,It is still generated on the same remote server location but the it is not showing in the application interface.
Please help....
Thanks,
DK

Hi, Mike,
user3211655 wrote:
Hi All,
We try to migrate a 8i database to 10g by using the exp and imp. All tables and data are already migrated by imp. During the imp, there are errors said the trigger compile with errors.
When login to the em to check, I found these 2 errors.
Line # = 2 Column # = 1 Error Text = PL/SQL: SQL Statement ignored
Line # = 2 Column # = 60 Error Text = PL/SQL: ORA-00942: table or view does not exist
My trigger is a very simple one:
BEGIN
Select TB_COUNTER_SEQ.NEXTVAL INTO :NEW.INCREMENT_NUM FROM DUAL;
END;
And I'm sure the "TB_COUNER_SEQ" is there.
Do I need to change anything on the trigger when migrating from 8i?
In fact, besides this trigger, all other trigger imp to this schema are having the same error. The schema in the 10g is a newly created one, is there any special right I need to create grant to this new user?Grant the necessary privileges on the tables (and any other objects used, like sequences) directly to the owner of the triggers. Privileges granted to a role don't count in AUTHID OWNER stored procedures; the privileges have to be granted to the owner of the stored procedure (or to PUBLIC).
It the error is occurring at position 60, then it looks like you don't have privileges on dual. Login as SYS and
GRANT SELECT ON dual TO PUBLIC;You may need synonyms (perhaps public synonyms) for the objects, too.

ZCC Login failed after Migration from 11.3.1 FRU1 to 11.3.2

Hey,
System: 6 Primary Server Sless 11 SP3
LDAP: EDIR
Primary: 11.3.2
Sats: 11.3.1 FRU1
After Migration from 11.3.1 FRU1 to 11.3.2
i'll try to login in ZCC
Message ZCC
Error: Login Error: com.novell.zenworks.datamodel.exceptions.InternalD ataModelException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
See the ZENworks Control Center log file (zcc.log) for the full stack trace.
I tryed with default admin and see that the USERSource is not reachable.
I take a look in the configuration / usersource and there is an Error like: Unable to read contexts. One or more of your connections don't support non-SSL.
ZCC.log sayed
[javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints] [] [com.novell.zenworks.datamodel.exceptions.InternalD ataModelException] [ZENServer]
[DEBUG] [12/30/2014 09:54:02.417] [3547] [ZENServer] [72] [zenworks] [ZCC] [] [Form.java CSRF TOKEN:d1b804076c63e7393af1a72442ced4b5 for the PageId:authoritativeSourceDetails] [] [] [] [ZENServer]
[DEBUG] [12/30/2014 09:54:03.144] [3547] [ZENServer] [85] [zenworks] [ZCC] [] [QuickTask build tasks called in createChildControls, normal flow before ajax] [] [] [] [ZENServer]
[DEBUG] [12/30/2014 09:54:03.348] [3547] [ZENServer] [69] [zenworks] [ZCC] [] [com.novell.zenworks.datamodel.exceptions.InternalD ataModelException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
at com.novell.zenworks.datamodel.services.Certificate ManagerImpl.getCertificates(CertificateManagerImpl .java:179)
at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. validateCertificateExpiry(LDAPUtil.java:1162)
at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:774)
at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:559)
at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:386)
at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:359)
at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:325)
at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:311)
at com.novell.zenworks.core.web.internal.UserSourceSt atusAJAX.getImageData(UserSourceStatusAJAX.java:77 )
at com.novell.web.ajax.ImageAJAX.service(ImageAJAX.ja va:38)
at com.novell.web.ajax.AJAXDataHandler.service(AJAXDa taHandler.java:40)
at com.novell.web.AjaxServlet.serviceImpl(AjaxServlet .java:100)
at com.novell.web.AjaxServlet.service(AjaxServlet.jav a:74)
at com.novell.zenworks.fw.web.internal.ZENworksAjaxSe rvlet.service(ZENworksAjaxServlet.java:47)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:727)
at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java:303)
at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:208)
at com.patchlink.sapphire.web.pages.vulnerability.ses sion.HibernateSessionFilter.doFilter(HibernateSess ionFilter.java:75)
at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java:241)
at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:208)
at org.apache.catalina.core.StandardWrapperValve.invo ke(StandardWrapperValve.java:220)
at org.apache.catalina.core.StandardContextValve.invo ke(StandardContextValve.java:122)
at org.apache.catalina.authenticator.AuthenticatorBas e.invoke(AuthenticatorBase.java:501)
at org.apache.catalina.core.StandardHostValve.invoke( StandardHostValve.java:171)
at com.googlecode.psiprobe.Tomcat70AgentValve.invoke( Tomcat70AgentValve.java:39)
at org.apache.catalina.valves.ErrorReportValve.invoke (ErrorReportValve.java:103)
at org.apache.catalina.core.StandardEngineValve.invok e(StandardEngineValve.java:116)
at com.novell.zenworks.tomcat.ZENRequestValve.invoke( ZENRequestValve.java:1346)
at org.apache.catalina.connector.CoyoteAdapter.servic e(CoyoteAdapter.java:408)
at org.apache.coyote.http11.AbstractHttp11Processor.p rocess(AbstractHttp11Processor.java:1070)
at org.apache.coyote.AbstractProtocol$AbstractConnect ionHandler.process(AbstractProtocol.java:611)
at org.apache.tomcat.util.net.JIoEndpoint$SocketProce ssor.run(JIoEndpoint.java:316)
at java.util.concurrent.ThreadPoolExecutor.runWorker( ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:615)
at org.apache.tomcat.util.threads.TaskThread$Wrapping Runnable.run(TaskThread.java:61)
at java.lang.Thread.run(Thread.java:745)
Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
at sun.security.ssl.Alerts.getSSLException(Alerts.jav a:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl .java:1884)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.jav a:276)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.jav a:270)
at sun.security.ssl.ClientHandshaker.serverCertificat e(ClientHandshaker.java:1439)
at sun.security.ssl.ClientHandshaker.processMessage(C lientHandshaker.java:209)
at sun.security.ssl.Handshaker.processLoop(Handshaker .java:878)
at sun.security.ssl.Handshaker.process_record(Handsha ker.java:814)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocke tImpl.java:1016)
at sun.security.ssl.SSLSocketImpl.performInitialHands hake(SSLSocketImpl.java:1312)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLS ocketImpl.java:1339)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLS ocketImpl.java:1323)
at com.novell.zenworks.security.certificates.Certific ateUtility.getCertChain(CertificateUtility.java:12 1)
at com.novell.zenworks.datamodel.services.Certificate ManagerImpl.getCertificates(CertificateManagerImpl .java:175)
... 35 more
Caused by: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
at sun.security.ssl.AbstractTrustManagerWrapper.check AlgorithmConstraints(SSLContextImpl.java:946)
at sun.security.ssl.AbstractTrustManagerWrapper.check AdditionalTrust(SSLContextImpl.java:872)
at sun.security.ssl.AbstractTrustManagerWrapper.check ServerTrusted(SSLContextImpl.java:814)
at sun.security.ssl.ClientHandshaker.serverCertificat e(ClientHandshaker.java:1421)
SR has been created.
Any Tipps /Hints for me ?
Thank You

Originally Posted by robpet
Should have said kind of the same problem...
That was sort of my gut feelings so I checked our certificates beforehand and they are using certs with sha1 fingerprint. But we are not using SSL - our connections are made using port 389. And the communication status is green.
But I cannot add SSL because it complains about "unable to obtain a valid certificate for SSL communication information. Please verify that the adress and port are correct and that the LDAP directory has been configured with a valid certificate.
So I cannot understand why users cannot authenticate with zenagent.
There's a TID about zcc login failures after 11.3 upgrade.
https://www.novell.com/support/kb/doc.php?id=7014716
We ran into the above.

Vpn fails after upgrade to 10.8.5

After upgrading from SL to Mountain Lion the Apple vpn client connections fail. They were connecting fine before the upgrade. They also work fine from other computers (Windows) on my network to the same addresses, so the remote side is functioning, and there have been no changes on the remote side.
The error message is "The L2TP-VPN server did not respond. Try reconnecting. If the problem continues, verify your settings and contact your Administrator." The Console messages indicate the server does in fact respond, but there is a problem with Phase 1 IKE. Message lines are pasted here with the IP addresses masked (the addresses are correct though).
10/12/13 5:33:39.340 PM configd[18]: SCNC: start, triggered by SystemUIServer, type L2TP, status 0
10/12/13 5:33:39.360 PM pppd[2104]: pppd 2.4.2 (Apple version 596.15.2) started by admin, uid 503
10/12/13 5:33:39.363 PM pppd[2104]: L2TP connecting to server '999.999.999.999' (999.999.999.999)...
10/12/13 5:33:39.363 PM pppd[2104]: IPSec connection started
10/12/13 5:33:39.379 PM racoon[2105]: Connecting.
10/12/13 5:33:39.380 PM racoon[2105]: IPSec Phase1 started (Initiated by me).
10/12/13 5:33:39.380 PM racoon[2105]: IKE Packet: transmit success. (Initiator, Main-Mode message 1).
10/12/13 5:33:39.465 PM racoon[2105]: IKE Packet: receive success. (Initiator, Main-Mode message 2).
10/12/13 5:33:39.469 PM racoon[2105]: IKE Packet: transmit success. (Initiator, Main-Mode message 3).
10/12/13 5:33:39.583 PM racoon[2105]: IKE Packet: receive success. (Initiator, Main-Mode message 4).
10/12/13 5:33:39.588 PM racoon[2105]: IKE Packet: transmit success. (Initiator, Main-Mode message 5).
10/12/13 5:33:42.671 PM racoon[2105]: IKE Packet: transmit success. (Phase1 Retransmit).
10/12/13 5:33:45.754 PM racoon[2105]: IKE Packet: transmit success. (Phase1 Retransmit).
10/12/13 5:33:45.760 PM racoon[2105]: Received retransmitted packet from 999.999.999.999[500].
10/12/13 5:33:48.839 PM racoon[2105]: IKE Packet: transmit success. (Phase1 Retransmit).
10/12/13 5:33:57.752 PM racoon[2105]: Received retransmitted packet from 999.999.999.999[500].
10/12/13 5:34:00.832 PM racoon[2105]: IKE Packet: transmit success. (Phase1 Retransmit).
10/12/13 5:34:09.465 PM pppd[2104]: IPSec connection failed
10/12/13 5:34:09.466 PM racoon[2105]: IPSec disconnecting from server 999.999.999.999
About the configuration -- the apple client is using preshared key with ppp user/password auth. The user/password and psk all work in other clients, have re-entered them many times, have deleted then recreated the connection in Network Preferences. Have restarted the racoon service, and even rebooted several times.
Googled around and found a number of reports of similar problem after upgrade to Lion or Mountain Lion, haven't found anything that works so far. Have disabled my antivirus, have rebooted network router, have changed access control in Keychain Access to allow access from all applications. Can't change the remote side configuration because of other users, need to find a way to solve this on my client side. I do have backups that would allow me to roll back to Snow Leopard, but does anyone have any other solution, would like to have a better alternative. Appreciate any/all suggestions, thanks.

Thanks again, good point. I wasn't doing this on first few tries but eventually realized I needed to clean up Keychain Access because of all the duplicates I created (orphans) so yes I did delete connection and corresponding keychains then recreate then change access. Along the way I noticed that every time I later applied a change to an existing connection setting I had to return to Keychain Access and change the access control settings again, they revert back to 'confirm' from 'all access' at each change. So even if it worked for me I realize it isn't a permanent fix.
And iCloud is 'inactive', so I guess Back to My Mac is disabled too, I don't know that app but assume so since it needs iCloud. Is there a better way to be sure it can't interfere? I do think I'm getting some phase 1 traffic out and back to the remote server evidenced by the console log, so seems the ports are not being blocked.

NEW PIN mode fails after migrating to new ACS version

Old setup.
CiscoSecure ACS v3.x
Windows server also has the RSA/ACE agent that queries a second server for SecurID authentication
C3745 and a PIX used for inbound remote access
Users access w/Cisco Systems VPN Client
Works great
New setup.
CiscoSecure ACS v4.0, running on a different Windows server
Slightly newer version of the RSA/ACE agent
Same C3745 and PIX
Same use4rs, same client.
Works great as long as the SecurID card is not in NEW PIN mode
If the card is in NEW PIN mode, the Cisco Systems VPN client of course prompts if the users wants to create a new pin. The answer is ?y? or ?n.? The client is then supposed to prompt for the PIN and then prompt a second time for the PIN. This never happens. Instead, w/in three seconds of the user saying ?y?, CSACS fails the user and the client terminates the connection.
Help!
Thanks,
Shane

Hi
You may want to ping the Cisco TAC. I remember there were loads of issues with RSA authentication that may have been fixed after 4.0 shipped.
If you run csauth from the command line:
csauth -z -p
you'll see a whole load of debug.. look for "[Securid" to see all related messages.
Darran

"There was a problem connecting to the server" in iTunes after migrating to new mac

I have a problem that is driving me crazy with my brand new iMac. I see many other people posting similar issues, but none of the other solutions seem to work for me.
I had a MacPro and bought a new iMac, on which I used Migration Assistant to set up. So the new iMac is virtually the same as my old machine in terms of appearance and installed applications. Both machines have Mountain Lion 10.8.2. All software on both machines has been through Software Update and is fully up to date, as are the connected devices (iPhone and iPad).
The problem is with iTunes. Every time I start iTunes (I think at the moment it checks my two connected devices) I get a pop up dialogue saying:
There was a problem connecting to the server "MacPro".
The server may not exist or it is unavailable at this time. Check the server name or IP address, check your network connection, and then try again.
This dialogue continues to pop up constantly as long as iTunes is open, interrupting my work and frustrating me no end. The old machine is of course turned off and indeed is not available -- but I can't find what on the new iMac is so desperate to connect to it.
So far I have tried completing erasing my iTunes library, deleting all the preferences, reinstalling iTunes from a fresh download of the dmg, safe rebooting several times with no peripherals connected at all, and deleteing other preferences like the Login Items, iPhone config and iPhoto. I have also cleared Recent Items from the apple menu and opened "Connect to Server" in the finder and cleared all servers from the dropdown menu.
Last night I also completely restored my iPhone from scratch to see if that would clear away the issue and I have connected both iPhone and iPad to go through any apps that have permission to write content to my computer and deleted all of them completely from the devices.
Nothing has changed at all after all that, and I have run out of ideas. Clearly there is something somewhere that has my old machine's name hard coded in it but I can't see any way to search for it. I would grep my Library folder but I think a lot of the files are binary so I'm not sure that would unearth anything. I've seen many posts saying that Apple phone support (which I would qualify for) can't help with this issue and so I have put off phoning them to simply run through all the things I've already tried.
Any advice that anyone could offer would be extremely helpful. I can't use iTunes at all like this as it disrupts everything I try to do on the new machine.
many thanks!!

Nothing at all? Can't anyone help with this issue at all? I would be grateful for any suggstions as it is driving me crazy. It happens every time I open iTunes and also every time I open Mail.

Aliases failing after migrating to new disk

I migrated from my original 500GB disk to a new 1TB disk by using Disk Utility's "Restore" function. For those of you that are not familiar with Restore, it should be the highest fidelity form of coping a partition given that it does a "block copy" - e.g. it copies the data byte-by-byte instead of doing a file based copy. Also it verifies after the copy is done. In my opinion, it is the gold standard for copying an entire partition.
The new disk booted up fine, but I was surprised to find out that about half of my 190 aliases were broken. When I looked inside the alias files themselves I saw that they contain a lot of data, including a path to the target file. In all cases where the aliases stopped working on the new drive, this path was not correct. In other words, I had moved the target file on the old drive before cloning the whole partition onto a new drive.
I reinstalled the old drive and verified that all my aliases were in fact functioning so this was not an issue in on the source disk. The aliases were able to work properly even with outdated path data in them.
After doing some reading on how OS X aliases work, I found out they use multiple ways to find the target file. If the path inside the alias is not good, OS X has other means to find the original target file. But somehow this broke after copying to the new disk.
So the question is if there is a way to force aliases to get refreshed so that all their data is correct? In other words, before I do a migration to a new disk, can I run some command that causes all the aliases on my existing disk to be resolved to their targets and then have the contents of the aliases be made fully consistent with that resolved target data. This would fix the broken paths in the aliases which would allow them to work after the migration to the new disk.

Try this:
Make a folder on your destop called F.
Inside folder F make two subfolders called A and B.
Inside A create a text file called T.
Now creas an alias to T which we will call T.alais.
Test out T.alias. It should open T.
Now move T to folder B.
Again, test out T.alias. It should open T even though it has been moved.
Now use CCC to copy F to another disk.
Delete the original F and empty the trash.
Now try to open T.alias. It will fail.
The reason it fails is that you moved the target of an alias (from A to B) then copied the whole thing (both alias and target) to a new disk.
I just tried it and it failed for me.
This is what happens to me en-mass when I move from one disk to another.

Reports with prompt fails after migration

Post Author: vrivero
CA Forum: WebIntelligence Reporting
Hi everybody!I have developed some reports and afterwards I have migrated them to another Business Objects XI R2 server, in order to use them under InfoView.The problem is that the reports that use a prompt, are failing in the new server, the ones not using prompts are working OK.I'm getting the following error message: error calling API 'openDocumentMDP' error WIS 30270, INF: (might not be the exact message, since I'm getting the message in spanish) I have read that using dd:mm:yyyy as user input date format, might be related to this problem. Please, help!!

if the new depreciation engine is active, there might be some differences, please read the note 965032
blaz

Outlook Web Access fails after migrating SSL certificate to dedicated SSL gateway

Hi we have just migrated our SSL certificate form our Outlook exchange server, outlook web access works perfectly but two of our users who have Blackberry devices set up to get their email via owa now fail.
Everything worked fine before the migration.
The new SSL gateway is an Apache box running mod_proxy, mod_SSL and mod_sec. Protecting the box running owa and IIS6.
I can provide the http.conf etc, but I can see the traffic passed by Apache but I am getting a 401 message on the way back through to the device.
Is there a specific IIS/Exchange or Apache config I need to enable to allow BB access?
Thanks in advance
Mike

Hello there!
You may have run up against some of the complexities between BIS and OWA. There are a couple of circumstances where BIS can't integrate to OWA. Plus, if the mailbox name changed, that may be the problem as well. While I'm neither a BIS nor OWA admin, I can point you to information resources that hopefully can help you.
Try this article.
And this one.
And this one.
And this one.
You also can search the public KBs for more relevant articles:
http://www.blackberry.com/btsc/microsites/microsite.do
Good luck and let us know!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

Instant Messaging Server configuration failed after installation

Hi,
I have a problem with the configuration of Instant Messaging server as part Sun Java Communications Suite 6u2.
IM had been installed using commpkg install --altroot -installroot /opt/sun/comms2 (should run in cluster environment).
Running configure failed when looking for package SUNWiimin. Due to the altroot installation the package information resides under /opt/sun/comms2/var/sadm/...
Since configure is just a shell script those incorrect calls could be fixed (e.g. pkgparam -R /var/opt/sun/comms2 SUNWiimin instead of
pkgparam SUNWiimin.
Unfortunately configure calls com.sun.im.config.core.Configurator as a Java program. In this program IM_BASE seems not tobe set which leads to:
Executing command : null/sbin/impermissions inetuser r /var
Error in executing command : null/sbin/impermissions inetuser r /var
java.io.IOException: null/sbin/impermissions: not found
at java.lang.UNIXProcess.forkAndExec(Native Method)
at java.lang.UNIXProcess.<init>(UNIXProcess.java:53)
at java.lang.ProcessImpl.start(ProcessImpl.java:65)
at java.lang.ProcessBuilder.start(ProcessBuilder.java:451)
at java.lang.Runtime.exec(Runtime.java:591)
at java.lang.Runtime.exec(Runtime.java:429)
at com.sun.im.util.Command.execute(Unknown Source)
at com.sun.im.config.util.CommandExecutor.execute(CommandExecutor.java:134)
at com.sun.im.config.util.CommandExecutor.executeRuntimeCommand(CommandExecutor.java:41)
at com.sun.im.config.validation.SROValidator.createRuntimeDir(SROValidator.java:220)
at com.sun.im.config.validation.SROValidator.isValid(SROValidator.java:133)
at com.sun.im.config.validation.PanelValidator.isValid(PanelValidator.java:33)
at com.sun.im.config.core.CLIEngine.renderUI(CLIEngine.java:124)
at com.sun.im.config.core.Configurator.main(Configurator.java:157)
Return value: -1
Is this bug fixed somewhere??
Regards,
Rudiger

rudidotk wrote:
Is this bug fixed somewhere?? This has been known issue for some time that still hasn't been fixed:
bug #6733030 - "IM7.3: altroot installation causes configure to error with null/sbin/impermissions: not found"
Please raise a Sun support request to have this bug escalated.
Regards,
Shane.

Autoconfig failed after migration

autoconfig failed with below errors.
AutoConfig could not successfully execute the following scripts:
Directory: /euu01/app/euapplqa1/euqacomn/admin/install/EUQA_euebsappqa201
txkMultinode.sh INSTE8_SETUP 1
wdbsvr.sh INSTE8_SETUP 1
[PROFILE PHASE]
AutoConfig could not successfully execute the following scripts:
Directory: /euu01/app/euapplqa1/euqacomn/admin/install/EUQA_euebsappqa201
abmwebprf.sh INSTE8_PRF 1
affrmprf.sh INSTE8_PRF 1
afwebprf.sh INSTE8_PRF 1
amswebprf.sh INSTE8_PRF 1
ibywebprf.sh INSTE8_PRF 1
icxwebprf.sh INSTE8_PRF 1
jtfictx.sh INSTE8_PRF 1
oksfrmprf.sh INSTE8_PRF 1
The following error is in most of the scrips.
ERROR:
ORA-12154: TNS:could not resolve service name
Thanks in advance

AIX to LINUX migration at the apps
yes it is RAC DB. we are able to connect to apps from apps tier to DB. see below results.
[euapplqa1@euebsappqa201 EUQA_euebsappqa201]$ sqlplus apps
SQL*Plus: Release 8.0.6.0.0 - Production on Wed Apr 6 10:34:30 2011
(c) Copyright 1999 Oracle Corporation. All rights reserved.
Enter password:
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - 64bit Production
With the Partitioning, Real Application Clusters, OLAP and Data Mining options
SQL> exit
Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - 64bit Production
With the Partitioning, Real Application Clusters, OLAP and Data Mining options
[euapplqa1@euebsappqa201 EUQA_euebsappqa201]$ sqlplus apps@EUQA
SQL*Plus: Release 8.0.6.0.0 - Production on Wed Apr 6 10:34:53 2011
(c) Copyright 1999 Oracle Corporation. All rights reserved.
Enter password:
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - 64bit Production
With the Partitioning, Real Application Clusters, OLAP and Data Mining options

Concurrent Reports failing after migrating to UNIX and RAC

Hi,
One of our customer was running Oracle Apps 11i (11.5.10.2) with Apps Tier on Windows 2003 and Db Tier on Sun Spark Solaris. Recently they migrated and upgraded the Apps Tier to Sun Spark Solaris and the db tier to Oracle 10g R2 RAC.
Since then some of the concurrent reports (custom) in the Arabic interface are not working properly. We found out that when the report is run and when the session NLS_LANG is explicitly set to AMERICAN in the Before Report Trigger the report runs fine. But if the NLS_LANG is "ARABIC" the reports returns error like "Program was terminated by signal 11" in Arabic.
As a workaround we have put NLS_LANG=american in before report trigger to alter the session as a workaround.
Any hint to resolve this issue?
Rgds
Thiru

Hi,
Plz find the below log file.
+-----------------------------
| Starting concurrent program execution...
+-----------------------------
Arguments
P_ACCOUNT_ID='550454'
P_INSTANCE_ID='1503139'
P_ORG_ID='101'
P_USER_NAME='MOSTAFA'
APPLLCSP Environment Variable set to :
XML_REPORTS_XENVIRONMENT is :
/u01/mmapps/mmappsora/8.0.6/guicommon6/tk60/admin/Tk2Motif_UTF8.rgb
XENVIRONMENT is set to /u01/mmapps/mmappsora/8.0.6/guicommon6/tk60/admin/Tk2Motif_UTF8.rgb
Current NLS_LANG and NLS_NUMERIC_CHARACTERS Environment Variables are :
AMERICAN_AMERICA.UTF8
stat_low = 8B
stat_high = 0
emsg:was terminated by signal 11
Start of log messages from FND_FILE
End of log messages from FND_FILE
Program was terminated by signal 11
Concurrent Manager encountered an error while running Oracle*Report for your concurrent request 3626976.
Review your concurrent request log and/or report output file for more detailed information.
Executing request completion options...
------------- 1) PUBLISH -------------
Beginning post-processing of request 3626976 on node ALHAMRA at 20-JUL-2010 08:56:04.
Post-processing of request 3626976 failed at 20-JUL-2010 08:56:04 with the error message:
One or more post-processing actions failed. Consult the OPP service log for details.
Finished executing request completion options.
Concurrent request completed
Current system time is 20-JUL-2010 08:56:04
---------------------------------------------------------------------------

Connection to windows server sometimes fails after standby

Hello,
I am using a Macbook Pro with 10.5.5.
Connections to Windows file servers works well. But sometimes after resuming from standby the it is not possible to connect. The "Connect to..." hangs and in the konsole i see:
23.11.08 11:37:34 com.apple.launchd[90] (com.apple.netauth.useragent[3770]) Exited abnormally: Segmentation fault
After rebooting the mac it works again.
Does anybody know how to solve this?
Thanks in advance
Alex

Hello nobody loopback,
The following is unrelated to this post, however it is the only way I know to contact you.
I found this page
http://discussions.apple.com/thread.jspa?threadID=1218394&start=60&tstart=0
I have a nearly identical situation where a backed up my entire "Macintosh HD" to a compressed DMG image file. During the restore process on the Leopard Install DVD it froze and I had to force restart. Upon restarting, I found my internal HD with only an Applications folder filled alphabetically with 73 and a half apps ending with a half restored iDVD.app and worst of all my single copy DMG (I know, foolish) reporting a "No mountable file systems" error. Due to the highly proprietary and closed nature of Disk Utility DMG images, I have chosen to contact you directly for help as the Apple Reps turn me to 3rd party data recovery and Data Recovery companies claim they don't do file repair. I feel someone with a wealth of knowledge concerning the DMG file format is my only option.
I was wondering if you could help me out.
So what do you say?
Here is the thread I posted for my case.
http://discussions.apple.com/thread.jspa?threadID=1699574&tstart=0
thank you for your time,
Marcus Schieffert
marcus3k AT gmail

2k12 server VPN fails after migration

Similar Messages

Maybe you are looking for