Analysis auth issue

Hi,
We have a scenario where we have 2 user IDs:
X
Y
We have a report R1 which has values for an infoobject IO as 1,2,3,4,5
Now User X is restricted to see only data for values 1,2,3 and Y is restricted for 4,5
We have created Analysis auth object and assigned it to users. Then we added an auth variable in the report which will restrict data as per user authorization.
Now the issue is that when we execute the report for User X, only values for 1 is displaying and data for 2 and 3 are not showing up inspite of data being avalable in the underlying Infoprovider.
Same is the case with User Y where the data is only visible or 4.
What can be the issue?

Hi Debanshu,
Though I could not understand the exact issue, I would rather suggest you to check the authorizations checked while executing the report in Transaction RSECADMIN. In the Transaction goto Analysis tab ->Log Administration. there in the Configure Log recording provide the userid for which you want to test the authorizations And save it.
When that perticular user runs the report will will be able to see the logs for it using the option "Authorization Logs" screen. And this log will have a detailed information regarding the entire authorization trace for that user for that report.
Regards,
Pratap Sone

Similar Messages

Analysis Auth issue - multiple objects

Currently we have different roles define for each separate section of our business with Comp code and Profit center (along with Hierarchy on PC).
For e.g.
Section 1
          Company Code u2013 1010,1050,1500,1520,1700,1800
          Profit Center u2013 150000 u2013 159999 and Profit Center hierarchy u2013 ZPROFIT_CTR_GROUP/99991231/G_15
Section 2
          Company Code u2013 1110,1150,1500,1520,1700,1800,1980,2050
          Profit Center u2013 190000 u2013 199999 and Profit Center hierarchy u2013 ZPROFIT_CTR_GROUP/99991231/G_19
Currently there are 30 such roles define, we have quite a segregation within the business. So each BW user generally has one of the 30 roles assign to them. This is working perfectly fine.
Now because of the consolidations, there are some users who would manage information from different section. So now a user can have access to Section 1 as well as Section 2. Whenever we tried giving access to 2 roles directly to any user, the results of the query comes back as u201CNo Authorizationu201D
If you notice in the difference between section 1 and 2 is additional company code and some matching company codes along with that is complete different Profit center range and profit center hierarchy node. I am not sure where exactly it is failing.
Now one more thing for you information is that we have defined Auth variables on Company code (input/Auth/multiple Values) and Profit Center (Input/Authorization/Selection) and Profit Center hierarchy (hierarchy node variable / Authorization)
I am just trying to understand where the No Auth error msg is coming. Is there some intersection which is killing the query result itself?
Please let me know if any of you have any suggestion.

A common problem when authorizing using two different Characteristics is how the authorization variables are filled.
If a user has access to both section 1 and section 2, a authorization varible for Company Code will contain the values
1010,1050,1500,1520,1700,1800, 1110,1150,1980,2050
and the authorization variable for Profit Cetre will contain
150000 u2013 159999 and 190000 u2013 199999
If the user doesn't restrict the query further, the system will issue a correct authorization error since the user is not authorized for the selection CC=2050 PC=150000 and all the other "cross-combinations".
Try creating variants of the selection screen for section 1 and section 2 respectively and force the user to select one of these when executing the query.
Regards,
Lars

Analysis Authorization Issue

Hi:
I created an analysis authorization ZCO_CODE to trstrict it by a company code.
I added following objects in authorization with values.
0COMP_CODE = 1000
0TCAACTVT = 03
0TCAIFAREA = *
0TCAIPROV = *
0TCAVALID = *
Then I created a role Z:00:BW_REPORT, where I added following authorization objects S_RS_AUTH and restricted it by value ZCO_CODE. Then I assigned this role to a user test01.
When I execute a program RSEC_MIGRATION for this specific user, I do not see authorization object ZCO_CODE on 2nd step of this program. Any Idea Why? I think this object should show up as I want to migrate this specific object.
Help will be appreciated.

Hi Sachin:
Okay here is my issue.
I have a Reporting authorization Object created earlier which is ZCOCODE. I though I'll have to create a new Analysis authorization object e.g. ZCO_CODE and then restrict it with other chars. as mentioned in Marc Bernards presentation and then you have to migrate it.
In selection list I can see old Reporting authorization object. If I select it and use option "Enhance existing profile" then It will update profile and not role? right....
How can I see whether it has updated existing profile?????
Do I need to create new Analysis Auth. for Company code or I can use old Reporting authorization for company code?
For testing purpose, I created a test user and assigned all reporting roles but It will not show up in RSEC_MIGRATION step???

BW Analysis authorization issue... need help urgently....

We have one BW query which is pulling data from Contract Division info-object. Now this report does not variable selection object so it is pulling data from all values of Contract Division. Values of Contract Division are CNC, CNS, CNE and CNL.
Now we have created an analysis auth. object called z_es_3 and added Contract division info-object. Now we have added that z_es_3 into role and given value to CNS. now when we are running report, we are getting No Authorization error. When we are giving * value in z_es_3, it is running fine.
Now we have to restrict report to contract division. please help.
Thanks in advance

Are you running unrestricted search on Contract division in your queries? You should restrict it to value which is maintained in the authorization for the InfoObject.
Also please run the analysis authorization trace from RSECADMIN. That will give you a clearer picture of what is wrong.

Stage Analysis Report Issue

Hi,
I have run a stage analysis report but it says no data inspite of open opportunities being present in the system. Could anyone kindly let me know what could be the issue?
Regards
Sharat

Hi Sharat,
Welcome you to the forum. Please close your first thread.
Regarding your Stage Analysis Report Issue, what selection has been made? This report show closed opportunity only.
Thanks,
Gordon

BI 7.0 Analysis Authorization issue: some reports displaying a blank page.

Hi All,
This is regarding BI 7.0 Analysis Authorization issue.
Overview:
we have restricted some queries at infoobject level.
Issue:
a. For some of the queries, we can see the selection screen but when we try to execute the query by clicking on the execute button (Queries WAD) we get a blank page, meaning nothing is displayed on the output (white/Blank screen).
b. When we execute the same query through RSRT, we get a message which says "Disconnecting from BW server..".
c. Let me explain further on this. Basically we are doing this in order to have limited access to Auditors at the client side. At the same time normal users should not get impacted due to this, hence we created two roles. One for normal users and other for Auditors.
d. Now the thing is that we execute the same report with normal user ID's the report executes properly and displays the output. it does not show the blank page.
e. But when we execute the same report with Auditors ID then we get a blank page.
Any idea why this is so?

Hi Neha,
I tried the below also,
GL Acnt
I EQ 0000134010
I EQ :
but still it didn't work.
No Infoobject is missing in Authorization Object.
For your point, "rsecadmin - > analysis -> execute as -> check for the desired user & analyze the log" it didnu2019t allow me to analyze, since as soon as click on execute button a pop-up comes up saying "Disconnecting from the BW server..."
As mentioned earlier also it is giving me the below message,
""I>> Row: 103 Inc: AUTHORITY_02 Prog: CL_RSR_RRK0_AUTHORIZATION RS_EXCEPTION 301CL_RSR_RRK0_AUTHORIZATION AUTHORITY_02"
Kindly suggest, since this is a show-stopper for us!
Thanks,
Ishdeep Kohli.

Creation of Analysis Auth from SU21

Hi All,
I gave a try to one auth. Just wanted anyone of you to clarify this.
I created one customised object from SU21, and created the field, which we have used in the Analysis Auth (rsecadmin) like, Compcode, salesorg, co area, etc.
I have entered the field values and generated. Now included this in a role for a reporting user which contains the objects s_rs_comp and s_rs_comp1 for which Comp1 given full *.
Now the test user is able to create the queries based on the restrictions assinged, like company code. But he is not able to execute his own query, where he was given full access. SU53 shows that he doesn't have the access to Execute in S_rs_comp1, where I have maintained * for that.
Does this mean that, the Charateristics for Analysis Auth will not work if assigned through the objects created from SU21. / or do i need to do something more.
Can anybody help please.
Thanks for the help.
Regards,
Venkat

Hi JC,
The idea given by you is good. I tried, it. But its not working securely.
I created one analysis auth for all common characteristics. and dvarious for different company codes and controlling areas.
like grouped the following as one
Company Code, Controlling Area, Keyfigues.
I assigned a user a role like this. Take for example ODS A and B. Comp Codes, CC1 and CC2, Controling areas CA1 and CA2.
assigned the Reporting roles like this. where
1) ODS A > CC1 (CA ) (KF)
2) ODS B > CA2 (CC) (KF)
when checked user is able to see all the controlling areas on ODS B,where i gave him only CA2.
That is the problem..

':' in SQL Format causes analysis auth failure

Hi,
When running a SEM-BPS planning folder it fails due to analysis authorisation errors. On doing a trace it fails as the SQL Format has PLANT = ':' and SALESORG = ':'. These values are not within the analysis auths set-up.
Talking to the SEM-BPS person here they don't know how those got into the query.
Any ideas how we can get round this?
Thanks,
Nick.

hello,
does oracle showing any errors in user_scheduler_job_run_details for this job ? I would advise try inserting some debug statement to identify where exactly its stuck. Also please check sample configurations syntax for user_scheduler_jobs.
Cheers
Sush

Analysis auth obj assigment

Hi
Iam created one auth obj in rsec admin. how can i assign the auth obj to user .My answer is 1)direct assigment 2) through roles.
for example: created analysis auth obj is : ztest_1
It have the info obj : 0customer. and iam entered two values(values : A & B) in detail tab.
In role tab where i have to find the created analysis auth obj.to assign values .like below
Now i would like to assign this auth obj to user1 through role only for the customer value A .
For user2 i have to restricted vale B.
In direct assigment path will be the user>assign>specify the user name (user A)> give the created analysis auth obj (ztest_1)>select insert.
This is the process ...right?
Now i would like to assign only one value (value A for the user A).How it is possiable in direct assigment..
Other wise i have to create diff analysis auth obj(ztest_1...etc) for diff values(A &B)f or particular info obj(customer)?
Thanks
B.K
Edited by: B.K on Jul 15, 2008 12:44 PM

Hello B.K.,
When you create an authorization ztest_1 with 0customer with values A & B, this will always have the two values for the customer just like it was before with the old authorization method.
So no matter what way you assign this authorization to the user it will always have the two values!
To separate (filter) only one value (A or B) you have to create two different authorizations, one for customer A and one for customer B.
To assign, the direct assignment is just like you referred.
To assign with the roles, go to the desired role in PFCG, enter in change mode, go to tab Authorizations tab and click on change authorization data (pencil button).
Inside there, click on manual insert objects (something like this) and insert the object name S_RS_AUTH.
You'll have a yellow sign.
Expand that tree where the yellow sign is and click on the pencil button in front of the last yellow sign of the tree.
In "Value from" in that next window insert the name of the authorization (in your example ztest_1).
Generate your role.
Now if you assign that role to the user "user1" in transaction su01.
If ztest_1 has the values A & B for customer then user1 will have both values. If you separate the two authorizations let's say ztest_1A and ztest_1B with respectively the values A and B separate for the 0customer object.
You could assign in the role the value ztest_1A in S_RS_AUTH values, and assign that role to the user "user1" in su01, and you could direct assign (just like you referred before) to the user2 the authorization object ztest_1B.
Therefore you'll have user1 with the value A and user2 with the value B.
Please assign points,
Diogo.

BI Role with Analysis Auth Object

Hi
How can i use Authorisation Object created in RECADMIN with all the list of Infoproviders in S_RS_COMP and S_RS_COMP1
So that user can perform mentioned action on the data providers mentioned in analysis authorization object.
As i need one place to list all the data targets user can access insted of maintaining in S_RS_COMP and S_RS_COMP1 and in Analysis Authorization object
Thanks in advance

Thanks Everybody for giving suggestions; I really appreciate alll your efforts.
I followed step by step book of kamaljeet and findout that , I was missing to add related info objects of the inforprovider .added those info objects to auth analysis object.
Now query is working fine without errors;
problem is i am not able to restict the query since it showing all the data ; i am trying to put only few values in "0wbs_elemt " .
I added 0wbs_elemt in my analysis auth object;
Clicked on 0wbs_elemt and kept values in value authorizations and also kept wbsh in hierarchy name , selected type 1, HI 0.
still i am unable to restrict the data;
Functinal consultants build WBSE set up on a hierarchy. like
18ICT-07/2011
      18ICT-07/2011-1
            18ICT-07/2011-1-AUDTM
                  18ICT-07/2011-1-AUDTM-01
            18ICT-07/2011-1-CETX_
                  18ICT-07/2011-1-CETX_-01
they want to restrict like if we are giving 181ct-07 then they want to access every thing under it;
same way like 181ct-08 etc etc..
looks like they want to restrict the date very granuler level like restriction on " Attribute Navigation   "
Can anybody please do let me know how can we achieve Navigation Restriction.
Thanks.

BI Analysis Auth Error

Hi Have two analysis auths
1)
0TCAACTVT        02 03
0TCAIPROV          X
0TCAKYFNM       *
0TCAVALID          *
ZOBJ1                    A
ZOBJ2                     B
ZOBJ3                 1
2)
0TCAACTVT        02 03
0TCAIPROV          X
0TCAKYFNM       *
0TCAVALID          *
ZOBJ1                    *
ZOBJ2                     *
ZOBJ3                 2
Both Auths will go together to same user.
I want to restrict access to A and B for ZOBJ1 & ZOBJ2 for value 1 (ZOBJ3)
but I want to give * access for ZOBJ1 & ZOBJ2 for value 2.
When I assign both auths user get * access for ZOBJ1 & ZOBJ2 for for 1 also.
Is there any way I can limit this access.

Closing so that I can post new quesiton

Microsoft Exchange / Analysing backpressure issue

Hi,
We are migrating Exchange 2010 to Exchange 2013.
The mailflow still goes through the old Exchange 2010 and via internal relay to the new Exchange 2013 servers.
Yesterday i saw that almost every email that i can see in this queue gets delay with
"452 4.3.1 Insufficient system resources"
I immediately thought about "Back Pressure" and searched for entries in the EventLog.
After i couldn't find anything i disabled back pressure in the "edgetransport.exe.config" for
some time, to proof that the issue is caused by that.
During the disabled state i had no delays or messages with that error in the queue, so i'm pretty sure that the issue is caused by
back pressure.
My problem now is that i don't have any idea how to find out which one of the back pressure thresholds is causing the issue.
Any ideas how i can deeper analyse this issue, to find out what the exact reason is?
Thanks in advance
Simon

Hi,
I recommend you refer to the following article:
How to fix error: 452 4.3.1 Insufficient system resources on Exchange Server
Fixing Back pressure problems & Thresholds
Queue database path (“C:Program FilesMicrosoftExchange ServerV14TransportRolesdataQueuemail.que”) = 15% [Normal] [Normal=95% Medium=97% High=99%]
Increase Hard Drive space if this is an issue
Queue database logging path (“C:Program FilesMicrosoftExchange ServerV14TransportRolesdataQueue”) = 15% [Normal] [Normal=94% Medium=96% High=98%]
Increase Hard Drive space is this is an issue
Version buckets = 0 [Normal] [Normal=80 Medium=120 High=200]
Physical memory load = 60% [limit is 94% to start dehydrating messages.]
Increase physical memory if this is an issue
Private bytes = 76% [High] [Normal=71% Medium=73% High=75%]
Increase physical memory if this is an issue. This can appear an issue if you are using dynamic memory.
Batch Point = 0 [Normal] [Normal=2000 Medium=4000 High=8000]
Submission Queue = 0 [Normal] [Normal=1000 Medium=2000 High=4000]
Perform monitoring to determine issue. If high volume of emails you might need to upgrade your hardware or balance the load with another server.
Hope this helps!
Thanks.
Niko Cheng
TechNet Community Support

UCMON auth issue

We have an issue which I'm not sure if it's an authorization issue. One test user TST101 has a role assignement ZBC-CU-FULL which has all authorization to run UCWB & UCMON however, test user TST101 can run UCMON with no problem at all but when I go to menu GOTO > List of Totals Records and input the 0010 in the company field, it gives me an authorization issue that is says "Insufficient authorization for data from InfoProvider" but when I run the SU53, it gives me no missing objects or anything and even in ST01 it gives me no error auth issue.
But when I add SAP_ALL & SAP_NEW profile to the test user TST101, it then gave me a result.
The problem now here is, the client doesn't want us to use SAP_ALL/NEW profile in production.
Your help is very much appreciated.
Regards,
ted

Hi,
I hope it is not to late...
You need also BI/BW-Authorization-Objects to allow "writing" on InfoProviders!
You Sum-Cube is BW, so that user needs a role with permission to write and read the Sum-cube of SEM-BCS! It should be S_RS_ICUBE.
Check these authorization-objects, these reguard development and usage of SEM-BCS, its customizing and reporting.
AAAB
S_TCODE
Business Information Warehouse (RS)
S_RS_HIER
S_RS_ICUBE
S_RS_MPRO
S_RS_ODSO
S_RS_IOMAD
Strategic Enterprise Management (SEM)
R_UC_ODSM
R_UC_PERIO
R_UC_RECON
R_UC_TASK
R_UGMD_ATT
R_UGMD_CHA
R_UGMD_FLD
Financial Basis (FINB)
FB_SRV_DMS
FB_SRV_GC
FB_SRV_TR
R_CONFIG
R_FINB_TYP
R_UGMD_SNG
BR
Benjamin Maier

BW Analysis authorization issue on cost center range

Hello BIW security experts
I have a problem where I created an analysis authorization on a cost center range and it looks like the interval is not working. The report is just a list of cost centers (demo to users to prove that analysis authorizations work in order to skip 2 managerial cost centers.
. Cost centers are numeric. Example: 2000100. In the drop down list they appear as such.
. I want to have the following cost center range: 1000000 to 1000771, 1000773 to 2000771, 2000773 to 9999999.
Thereofore 1000772 and 2000772 should not appear in the list.
. In the analysis authorization I have put the 3 ranges above on 3 separate lines. 'BT' is the operator. The cost centers have been selected from the drop down list.
Results: I get only 1 record from the report.... 2000772. (which is one I want to exclude..
Steps tried to debug:
. When I put a list of cost centers in the analysis authorization on separate line with the 'EQ' operator, then the report works.
. I tried putting ' ' delimiters since cost center is a char field but it fails.
. I tried adding leading and trailing zeros to fill up the char(10) but no luck.
. I tried creating a hierarchy with the interval and put it in the hierachy auth. tab and it does not work either. It gives the same number of records than the first step.
. A hierarchy with single values work.
I do not know what else to try..
Thanks.
YB.

Good morning
Here it is from RSECVAL
ZCC_TEST     0COSTCENTER                    I       BT        1000000                                                      1000771
ZCC_TEST     0COSTCENTER                    I       BT        1000773                                                      2000771
ZCC_TEST     0COSTCENTER                    I       BT        2000773                                                      9999999
ZCC_TEST     0COSTCENTER                    I       EQ        #
ZCC_TEST     0COSTCENTER                    I       EQ        :
ZCC_TEST     0INFOPROV                         I       CP        *
ZCC_TEST     0TCAACTVT                        I       EQ        03
ZCC_TEST     0TCAIPROV                         I       CP        *
ZCC_TEST     0TCAKYFNM                       I       CP        *
Thank you for your help.

Domain Controller cannot access \\domain\netlogon causing Auth issues

Hi everyone, I have been spent all day trying to figure out what is going on here, I have a Domain controller (only DC in the environment) that is acting funny
I first noticed when I was attempting to RDP into a server in my domain I was getting "access denied" (but I could log in as a local admin). So when I looked at the Domain Controller, I ran a DCDiag DNS test and got some an AUTH error, but am not
able to figure out how to fix this.
Another thing I notice is when I am signed into the domain Controller (GP2010-a), I cannot browse to
\\contoso.com\netlogon or any similar share.
Here is the kicker, other servers on this domain, server3, server4, server5 etc... THEY CAN access
\\contoso.com\netlogon It is ONLY the Domain controller and Server2 that CANNOT access this share. The other servers also allow me to RDP into them fine, it is only 1 server that is affected by this strange behavior.
I have checked for no IP conflicts and as far as I can tell all the DNS records are correct.
Regarding the DYNAMIC ip warning, we have a reservation that assigns the IP
thanks for any input here as i'm really stuck,
Directory Server Diagnosis
Performing initial setup:
   Trying to find home server...
   Home Server = GP2010-A
   * Identified AD Forest.
   Done gathering initial info.
Doing initial required tests
   Testing server: Default-First-Site-Name\GP2010-A
      Starting test: Connectivity
         ......................... GP2010-A passed test Connectivity
Doing primary tests
   Testing server: Default-First-Site-Name\GP2010-A
      Starting test: DNS
         DNS Tests are running and not hung. Please wait a few minutes...
         ......................... GP2010-A passed test DNS
   Running partition tests on : ForestDnsZones
   Running partition tests on : DomainDnsZones
   Running partition tests on : Schema
   Running partition tests on : Configuration
   Running partition tests on : contoso
   Running enterprise tests on : contoso.com
      Starting test: DNS
         Test results for domain controllers:
            DC: GP2010-A.contoso.com
            Domain: contoso.com
               TEST: Authentication (Auth)
                  Error: Authentication failed with specified credentials
               TEST: Basic (Basc)
                  Warning: Adapter 00:0D:3A:00:0D:01 has dynamic IP address
                  (can be a misconfiguration)
         Summary of test results for DNS servers used by the above domain
         controllers:
            DNS server: 128.8.10.90 (d.root-servers.net.)
               1 test failure on this DNS server
               PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 128.8.10.90
            DNS server: 2001:500:1::803f:235 (h.root-servers.net.)
               1 test failure on this DNS server
               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:1::803f:235
            DNS server: 2001:500:2::c (c.root-servers.net.)
               1 test failure on this DNS server
               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:2::c
            DNS server: 2001:500:2d::d (d.root-servers.net.)
               1 test failure on this DNS server
               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:2d::d
            DNS server: 2001:500:2f::f (f.root-servers.net.)
               1 test failure on this DNS server
               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:2f::f
            DNS server: 2001:500:3::42 (l.root-servers.net.)
               1 test failure on this DNS server
               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:3::42
            DNS server: 2001:500:84::b (b.root-servers.net.)
               1 test failure on this DNS server
               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:84::b
            DNS server: 2001:503:ba3e::2:30 (a.root-servers.net.)
               1 test failure on this DNS server
               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:503:ba3e::2:30
            DNS server: 2001:503:c27::2:30 (j.root-servers.net.)
               1 test failure on this DNS server
               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:503:c27::2:30
            DNS server: 2001:7fd::1 (k.root-servers.net.)
               1 test failure on this DNS server
               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:7fd::1
            DNS server: 2001:7fe::53 (i.root-servers.net.)
               1 test failure on this DNS server
               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:7fe::53
            DNS server: 2001:dc3::35 (m.root-servers.net.)
               1 test failure on this DNS server
               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:dc3::35
         Summary of DNS test results:
Auth Basc Forw Del Dyn RReg Ext
            Domain: contoso.com
               GP2010-A                     FAIL WARN PASS PASS PASS PASS n/a
         ......................... contoso.com failed test DNS

Hi,
TEST: Basic (Basc)
                  Warning: Adapter 00:0D:3A:00:0D:01 has dynamic IP address
                  (can be a misconfiguration)
Do you have any NIC conifgured to get dynamic IP on your DC which is having issue? If yes, please disable that NIC. Also, please provide me the result of the below
1) On your DC which is having issue, run "ipconfig /all"
2) Repadmin /showrepl
Thanks,
Umesh.S.K
Thanks, there is only 1 nic card. It is getting a dhcp address because this is an AZURE Hyper-v machine and I have set an IP reservation for it. I have no way to hardcode the IP because it gets shut off/on all the time
C:\Users\Administrator>repadmin /showrepl
Repadmin: running command /showrepl against full DC localhost
Default-First-Site-Name\GP2010-A
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: 007c755c-f56c-4e51-a211-fd4431f63927
DSA invocationID: 007c755c-f56c-4e51-a211-fd4431f63927

Analysis auth issue

Similar Messages

Maybe you are looking for