CE: An internal authentication error has occurred
Could anyone help me please? i have been play 'try and search game':( for serveral days for this problem.
i search this forum and find other people have been in same problem, but no progress for me
i look around at uwc.log, but doesn't give me clue, i already recheck LDAP, COOKIE setting n make sure everything are right.
FYI: SSO for CAL and ME are works fine.
my step for uwc:
1. run "config-uwc"
2. post configuration
a. Enabling SSO with identity server (CE and ME)
b. edit "ics.conf"
3. restart all jes component
so did i miss something?
=======================================
uwc.log
Jul 21, 2005 10:49:20 AM com.sun.uwc.common.util.UWCDomainManager loadDomainFromIS
SEVERE: Exception..LDAP authentication failed.
Jul 21, 2005 10:49:20 AM com.sun.uwc.common.util.UWCDomainManager loadDomainFromIS
SEVERE: Exception..LDAP authentication failed.
Jul 21, 2005 10:49:20 AM com.sun.uwc.common.auth.IdentitySSOAuthFilter doFilter
FINE: 1. session is not present.. get token manager..
Jul 21, 2005 10:49:20 AM com.sun.uwc.common.auth.IdentitySSOAuthFilter doFilter
WARNING: SSOException..LDAP authentication failed.
Jul 21, 2005 10:49:20 AM com.sun.uwc.common.auth.MessagingSSOAuthFilter doFilter
FINE: Validate Cookies
Jul 21, 2005 10:49:20 AM com.sun.uwc.common.auth.MessagingSSOAuthFilter doFilter
FINE: inValid Cookies
Jul 21, 2005 10:49:20 AM com.sun.uwc.common.auth.LDAPAuthFilter doFilter
FINE: Check If Identity is enabled
Jul 21, 2005 10:49:20 AM com.sun.uwc.common.auth.LDAPAuthFilter doFilter
FINE: Identity is enabled....return
Jul 21, 2005 10:49:20 AM com.sun.uwc.common.util.UWCPreferences node
SEVERE: Could not load the file: /var/opt/sun/uwc/WEB-INF/domain/en-us,en;q=0.5/i18n.properties (No such file or directory)
Jul 21, 2005 10:49:20 AM com.sun.uwc.common.util.UWCDomainCache loadUWCResourceBundle
WARNING: Unable to load default resource bundle for domain nohat.comand localeen-us,en;q=0.5
Jul 21, 2005 10:49:20 AM com.sun.uwc.common.util.UWCPreferences node
SEVERE: Could not load the file: /var/opt/sun/uwc/WEB-INF/domain/en-us/i18n.properties (No such file or directory)
Jul 21, 2005 10:49:20 AM com.sun.uwc.common.util.UWCDomainCache loadUWCResourceBundle
WARNING: Unable to load default resource bundle for domain nohat.comand localeen-us
Jul 21, 2005 10:49:20 AM com.sun.uwc.common.util.UWCDomainCache resolveLocale
FINE: sublangs ..en
Jul 21, 2005 10:49:20 AM com.sun.uwc.common.util.UWCDomainCache loadUWCTheme
WARNING: Theme for localeenandnohat.com is not configured
=======================================
any hint,suggestion,idea are always open
many big thanks for you all
Follow the following path :
Sun Java Enterprise System 2005Q1 Installation Guide
-> Chapter 10 Configuring Components After Installation
--> Configuring Messaging Server After a Configure Later Installation
---> If you intend to use Delegated Administrator Utility ...
----> Sun Java System Communications Services 6 2005Q1 Delegated Administrator Guide
-----> Chapter 3 Configuring Delegated Administrator
And yes, fully admitted, setting it all up is not easy. Or as Jay put it : "and getting SSO to work with UWC is somewhat of an art..." :)
Cheers, Ben
Similar Messages
-
RDS 2012 (An Authentication error has occurred 0x607) - WINDOWS 8 ONLY
Hi - please help. I've read many posts relating to this error, but none have fixed my issue.
We have an RDS 2012 setup. 2 Servers. Both session hosts. only 1 is the broker. Cert from official CA.
My authentication is set to ONLY allow devices with Network Level Authority. I don't want to remove this.
Windows XP and Windows 7 can connect both internally, and externally via the RDWeb address perfectly fine, but all Win8 machines get the error "An authentication error has occurred. Code 0x607.
Can anyone please advise why?
Many thanksHi,
I have seen other similar cases got resolved by setting the encryption level to low and security layer to Negotiate.
Here is a thread below:
An authentication error has occured (Code: 0x607)
https://social.technet.microsoft.com/Forums/windowsserver/en-US/94780a11-23ba-4a3c-b11a-734007c2d2fd/an-authentication-error-has-occured-code-0x607?forum=winserverTS
If it is not an option for you, I suggest you check whether the SSL certificate used by RDWeb access is trusted by the Windows 8 clients. There should be a corresponding root CA certificate installed in the Trusted Certification Authorities store.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] -
An internal software error has occurred. Error code: 1003
Dear, I am working on a FPGA programming. When I use the VI: "High Throughput Add Function". Some error occur.
Internal software error(s):
Error code: 1003 (refer to details)
Details:
An internal software error has occurred. Please contact National Instruments technical support at ni.com/support with the following information:
Error 1003 occurred at E:\Program Files (x86)\National Instruments\LabVIEW 2012\vi.lib\rvi\FXPMathLib\FxpAdd\modGen\nifxpmath_Add_EmitCode.vi: There's a broken VIHello Yjin,
Can you show me a VI in which this error occurs?
Which software versions are you using?
An easy way to find this information is as follows:
http://digital.ni.com/public.nsf/allkb/271F252B4EF0A2E0862570E70056A1E4?OpenDocument
Kind Regards,
Thierry C - Applications Engineering Specialist Northern European Region - National Instruments
CLD, CTA
If someone helped you, let them know. Mark as solved and/or give a kudo. -
I am getting an error message "An authentication error has occurred using your Adobe ID. (SHARED_UNKNOWN_ERROR)" when I press PUBLISH site in Muse.
Hi,
From Help Menu-> Sign out and Close Muse.
Restart Muse, and from Help menu-> Sign in again.
And see if that resolves the issue. -
Subject host OS: windows 8 pro.
I've turned os feater hyper-v on, restarted copmuter. In hyper-v manager added empty virtual machine. After double clikcing on my newly created machine windows with "virtual michine connection appeered". I turned button "power on" and
console has dropped error:
"remote desktop connection": "An authentication error has occurred. The supplied handle is invalid."
on the tiny image on the left bottom picture a can see quest console.
1) How can i install OS on my guest, where is default console for virtual machine?
2) What is RDP required
for on this firts stage of installation and how can i connect to the virtual machine console without it???Hi,
Regarding your first question, here is an article talking about install and configure the first virtual machine in Hyper-V, please refer to Step 2: Create a virtual machine and Step 3: Install the guest operating system in the below link:
Install Hyper-V and Configure a Virtual Machine
By saying the default console for Virtual machine, do you mean the Hyper-V manager?
The error might indicate that there is no VM available to connect. After we installed a OS, then we could connect it with the right-click in Hyper-V manager， see:
Connect to a Virtual Machine
The RDP connections is used to connect the VM in Windows 8, and for Windows 8.1, there are great improvements including what's called Enhanced Session Mode, more information, please see:
Overview: Client Hyper-V Enhanced Session Mode in Windows 8.1
If I misunderstand something, please let me know.
Best regards
Michael Shao
TechNet Community Support -
HELP!!!! An Internal Server Error Has Occurred when I try to redeem a gift.
When I try to redeem a 'gifted' album, I end up with a blank page with this message at the top:
An Internal Server Error Has Occurred.
When I try to "report a problem" the same page appears, even on a different computer.
When I try to "Report a Problem" in my account on iTunes, there is no field to type in my details.
I have tried to ring Apple, and they say they cannot support iTunes, and that all complaints have to go through the web site. HELP!!!!Shirley,
Unfortunately, this is the wrong forum for you. This forum is for those of us involved with Apple's iTunes U ("University"). iTunes U is a way for colleges and universities to post content within the iTunes Store. None of us here can help you resolve a money issue with the iTunes Store, must as we'd like to. Only Duncan works for Apple ... the rest of us work for colleges and universities all over the world and we have little control over your Apple account(s).
But, to be honest, I'd be pretty shocked that a call to Apple could not help you resolve this kind of problem. Compared to other tech companies, Apple is exceptional in its phone support. If it's helpful, this page:
http://www.apple.com/support/itunes/store/gift/
has a link at the bottom you can use to contact Apple directly about gift music problems. -
Another Compiler Bug (message: An internal build error has occurred... Unknown Flex Problem)
I was fighting with this problem for a few days. Finally I've got it resolved. I want to describe it and fill in BUG in the bug report, but I am not sure about Adobe support options. So, I am putting bug report here.
1. ASSUMPTION: All problems which compiler reports as unknown problem are the real compiler BUGs/Problems. Eventually MXML compiler/ActionScript compiler should be able to take C++ or FORTRAN code or an aribitrary text and nicely tell "Error: It is not ActionScript (Flex) code" or "the code is corrupted from Line so and so...". When compiler crashed, it is most probably due to one of the states not handled (or not handled correct). Keeping this in mind I assume, that my code has nothing to do with the compiler crash.
2. PROBLEM Description.
- I tried to port our internal project from Flex3.5/Flex Builder 3 to Flex4.1/Flash Builder 4.
- After checking out and trying to build code I start getting weird problems like Error 1037: Packages cannot be nested.
- After cleaning and compiling project by project, walking up dependency tree, I was able to get rid of this problem.
- On last Project I've got another problem (An internal build error has occurred... Unknown Flex Problem). Which I stuck with for a while.
- When I checked log file I found following messages:
============================================================
!ENTRY com.adobe.flexbuilder.project 4 43 2010-12-21 15:45:24.353
!MESSAGE Uncaught exception in compiler
!STACK 0
java.lang.ClassCastException: macromedia.asc.parser.InputBuffer cannot be cast to flex2.compiler.as3.CodeFragmentsInputBuffer
at flex2.compiler.as3.AbstractSyntaxTreeUtil.lineNumberToPosition(AbstractSyntaxTreeUtil.jav a:1266)
at flex2.compiler.mxml.ImplementationGenerator.generateBinding(ImplementationGenerator.java: 569)
at flex2.compiler.mxml.ImplementationGenerator.generateBindingsSetupFunction(ImplementationG enerator.java:863)
at flex2.compiler.mxml.ImplementationGenerator.generateBindingsSetup(ImplementationGenerator .java:812)
at flex2.compiler.mxml.ImplementationGenerator.generateInitializerSupportDefs(Implementation Generator.java:1878)
at flex2.compiler.mxml.ImplementationGenerator.generateClassDefinition(ImplementationGenerat or.java:1044)
at flex2.compiler.mxml.ImplementationGenerator.<init>(ImplementationGenerator.java:206)
at flex2.compiler.mxml.ImplementationCompiler.generateImplementationAST(ImplementationCompil er.java:499)
at flex2.compiler.mxml.ImplementationCompiler.parse1(ImplementationCompiler.java:197)
at flex2.compiler.mxml.MxmlCompiler.parse1(MxmlCompiler.java:168)
at flex2.compiler.CompilerAPI.parse1(CompilerAPI.java:2871)
at flex2.compiler.CompilerAPI.parse1(CompilerAPI.java:2824)
at flex2.compiler.CompilerAPI.batch2(CompilerAPI.java:446)
at flex2.compiler.CompilerAPI.batch(CompilerAPI.java:1274)
at flex2.compiler.CompilerAPI.compile(CompilerAPI.java:1496)
at flex2.tools.oem.Application.compile(Application.java:1188)
at flex2.tools.oem.Application.recompile(Application.java:1133)
at flex2.tools.oem.Application.compile(Application.java:819)
at flex2.tools.flexbuilder.BuilderApplication.compile(BuilderApplication.java:344)
at com.adobe.flexbuilder.multisdk.compiler.internal.ASApplicationBuilder$MyBuilder.mybuild(A SApplicationBuilder.java:276)
at com.adobe.flexbuilder.multisdk.compiler.internal.ASApplicationBuilder.build(ASApplication Builder.java:127)
at com.adobe.flexbuilder.multisdk.compiler.internal.ASBuilder.build(ASBuilder.java:190)
at com.adobe.flexbuilder.multisdk.compiler.internal.ASItemBuilder.build(ASItemBuilder.java:7 4)
at com.adobe.flexbuilder.project.compiler.internal.FlexProjectBuilder.buildItem(FlexProjectB uilder.java:480)
at com.adobe.flexbuilder.project.compiler.internal.FlexProjectBuilder.build(FlexProjectBuild er.java:306)
at com.adobe.flexbuilder.project.compiler.internal.FlexIncrementalBuilder.build(FlexIncremen talBuilder.java:157)
at org.eclipse.core.internal.events.BuildManager$2.run(BuildManager.java:633)
at org.eclipse.core.runtime.SafeRunner.run(SafeRunner.java:37)
at org.eclipse.core.internal.events.BuildManager.basicBuild(BuildManager.java:170)
at org.eclipse.core.internal.events.BuildManager.basicBuild(BuildManager.java:201)
at org.eclipse.core.internal.events.BuildManager$1.run(BuildManager.java:253)
at org.eclipse.core.runtime.SafeRunner.run(SafeRunner.java:37)
at org.eclipse.core.internal.events.BuildManager.basicBuild(BuildManager.java:256)
at org.eclipse.core.internal.events.BuildManager.basicBuild(BuildManager.java:218)
at org.eclipse.core.internal.events.BuildManager.build(BuildManager.java:360)
at org.eclipse.core.internal.resources.Project.internalBuild(Project.java:516)
at org.eclipse.core.internal.resources.Project.build(Project.java:94)
at org.eclipse.ui.actions.BuildAction.invokeOperation(BuildAction.java:221)
at org.eclipse.ui.actions.WorkspaceAction.execute(WorkspaceAction.java:162)
at org.eclipse.ui.actions.WorkspaceAction$2.runInWorkspace(WorkspaceAction.java:483)
at org.eclipse.core.internal.resources.InternalWorkspaceJob.run(InternalWorkspaceJob.java:38 )
at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55)
!SESSION 2010-12-22 09:48:27.766 -----------------------------------------------
eclipse.buildId=M20100909-0800
java.version=1.6.0_16
java.vendor=Sun Microsystems Inc.
BootLoader constants: OS=win32, ARCH=x86, WS=win32, NL=en_US
Framework arguments: -product org.eclipse.epp.package.jee.product
Command-line arguments: -data C:\Client_Flex4 -os win32 -ws win32 -arch x86 -product org.eclipse.epp.package.jee.product
================================================
3. RESOLUTION/WORK AROUND
- I was able to get this problem cleared by putting compiler option for Flex Application projects: -keep-generated-actionscript
4. SIDE NOTE
I do not really see putting this compiler option as the solution and living with the mistery is making me fill a bit bad.Hi Faser,
I just tried it on Vista with our latest FB Plugin build but
I was unable to reproduce your issue with the following setup:
- FB Plugin build installed by Administrator account user
under her Documents folder
- Administrator account user can launch, create Flex projects
under her own workspace without any problems
- Standard account user can launch the FB Plugin build (need
Admin's password) and create Flex project (default location) under
his own workspace
If your setup is different, can you please log a bug at
http://bugs.adobe.com/flex.
Be sure to include what build you are using, whether it's
reproducible, the detail of the setup, etc...
thanks,
Sharon -
When launching FaceTime - "internal facetime error has occurred"?
Trying to launch facetime and keep getting message "internal facetime error has occured". Anyone have any idea what that means?
If your webcam is powered by USB, make sure it is attached directly to your Mac and not a USB hub. In my case, I had my Rocketfish webcam attached to a peripheral USB hub and it wasn't drawing enough power to operate at capacity. Therefore, Facetime was quitting on me and giving me an error message. Once I attached the webcam directly to my Mac USB port, problem solved. Hope that helps.
-
Mathscript node: an internal mathscript error has occurred: 64-bit LabVIEW 2009
Hi Folks -
I have an installation now of
LabVIEW 2009 9.03f, Vision, and Advanced Signal Processing Toolkit, all
64-bit versions on a new computer so that I can convert some code from
32- to 64-bit.
I figure I will address errors
one-by-one and here's the first one. I have a VI with a mathscript
node and the VI, which loaded and ran fine in the 32-bit environment,
is now broken and giving the error "mathscript node: an internal
mathscript error has occurred." My main concern - is mathscript not
supported in 64-bit LabVIEW right now?
I am attaching the VI. Any ideas are appreciated. I need to get this working.
Also, NI, is there a special 64-bit forum that we should post to in the future, or create to post to?
Sincerely,
Don
Solved!
Go to Solution.
Attachments:
sort.vi 753 KBFrom 2009 help
LabVIEW MathScript is a text-based language you can use to write functions and scripts. You can process scripts using LabVIEW MathScript in the LabVIEW MathScript Window or a MathScript Node. When you create a LabVIEW MathScript, you must use supported data types.
The MathScript syntax is an intuitive and logical
syntax predominantly based on standard mathematical and computer
programming terms, terms in widespread and common use, and/or
descriptive abbreviations, truncations and concatenations of standard
terms. The LabVIEW MathScript Window and MathScript
Nodes are able to process files you create using the current MathScript
syntax and, for backwards compatibility, files you created using legacy
MathScript syntaxes. The LabVIEW MathScript Window
and MathScript Nodes also can process certain of your files that use
other text-based syntaxes, such as files you created using the MATLAB® software. Because the MathScript RT Module engine is used to process scripts in the LabVIEW MathScript Window
and MathScript Nodes, and because the MathScript RT Module engine does
not support all syntaxes, not all existing text-based scripts are
supported.
(LabVIEW 64-bit) LabVIEW MathScript is not supported in LabVIEW (64-bit). -
HT201210 " An internal device error has occurred"
I am trying to update my IOS on my Generation 4 Ipod Touch but I keep getting a message that says " An internal device error has occurred"
- Try placing the iPod in Recovery Mode and then restore via iTunes.
- Next try placing the iPod in DFU mode and then restore
- Disable the computer's antivus and firewall
- Make an appointment at the Genius Bar of an Apple store.
Apple Retail Store - Genius Bar -
FPGA An internal software error has occurred. memory write
Hi everybody
We are encountering an error during compilation of an FPGA VI. It is probably related to our use of FPGA block memory. We have a non-timed while loop that is reading from an FPGA host-to-target FIFO and writing into block memory (inside a sub-VI called z_scan_write.vi). In another loop (this one is timed-loop), there is a subVI called we z_scan_read.vi, inside which we read from the block memory.
Does anybody have an idea what is going wrong and how we could avoid this problem? Thank you very much in advance for any hint!
The full error message is as follows. Note that it refers to the above-mentioned two subVIs z_scan_write.vi and z_scan_read.vi...
An internal software error has occurred. Please contact National Instruments technical support at ni.com/support with the following information:
nirviUIDToObject.vi<ERR>
Error getting object reference for UID.
All text parsed:
<CodeGenErr>
<ErrorCode>-61060</ErrorCode>
<DynamicText><TreeLineInfo><LineInfo><ErrorInfoCallback><VIPath>C:\Program Files (x86)\National Instruments\LabVIEW 2010\vi.lib\rvi\ClientSDK\Core\ErrorReporting\Private\nirviPersistentNameToProjectItemLineInfoCallback.vi</VIPath>
<Data>zIntensityTuples/{29C03A58-DC8D-4BC7-BAFA-66AFAE4E42D1}/%s</Data>
</ErrorInfoCallback>
</LineInfo>
<TreeInfo><TreeID>ProjItem</TreeID>
</TreeInfo>
</TreeLineInfo>
<TreeLineInfo><LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.z_scan_write.vi_FPGACompileCopy00000021.vi</VIPath>
<UID>2747</UID>
<ObjectName>Memory Write 'Memory Method Node'</ObjectName>
</DiagramObject>
</LineInfo>
<TreeInfo><ParentID>ProjItem</ParentID>
</TreeInfo>
</TreeLineInfo>
<TreeLineInfo><LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.z_scan_read.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>194</UID>
<ObjectName>Memory Read 'Memory Method Node'</ObjectName>
</DiagramObject>
</LineInfo>
<TreeInfo><ParentID>ProjItem</ParentID>
</TreeInfo>
</TreeLineInfo>
</DynamicText>
</CodeGenErr>
<CodeGenErr>
<ErrorCode>-61060</ErrorCode>
<DynamicText><TreeLineInfo><LineInfo><ErrorInfoCallback><VIPath>C:\Program Files (x86)\National Instruments\LabVIEW 2010\vi.lib\rvi\ClientSDK\Core\ErrorReporting\Private\nirviPersistentNameToProjectItemLineInfoCallback.vi</VIPath>
<Data>zIntensityTuples/{29C03A58-DC8D-4BC7-BAFA-66AFAE4E42D1}/%s</Data>
</ErrorInfoCallback>
</LineInfo>
<TreeInfo><TreeID>ProjItem</TreeID>
</TreeInfo>
</TreeLineInfo>
<TreeLineInfo><LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.z_scan_write.vi_FPGACompileCopy00000021.vi</VIPath>
<UID>2747</UID>
<ObjectName>Memory Write 'Memory Method Node'</ObjectName>
</DiagramObject>
</LineInfo>
<TreeInfo><ParentID>ProjItem</ParentID>
</TreeInfo>
</TreeLineInfo>
<TreeLineInfo><LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.z_scan_read.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>194</UID>
<ObjectName>Memory Read 'Memory Method Node'</ObjectName>
</DiagramObject>
</LineInfo>
<TreeInfo><ParentID>ProjItem</ParentID>
</TreeInfo>
</TreeLineInfo>
</DynamicText>
</CodeGenErr>
<CodeGenErr>
<ErrorCode>-61106</ErrorCode>
<DynamicText><TreeLineInfo><TreeInfo><TreeID>1</TreeID>
</TreeInfo>
<LineInfo><VI><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</VIPath>
<Name>NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</Name>
</VI>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>2</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2803</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>3</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2816</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
</DynamicText>
</CodeGenErr>
<CodeGenErr>
<ErrorCode>-61106</ErrorCode>
<DynamicText><TreeLineInfo><TreeInfo><TreeID>1</TreeID>
</TreeInfo>
<LineInfo><VI><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</VIPath>
<Name>NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</Name>
</VI>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>2</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2803</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>3</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2816</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
</DynamicText>
</CodeGenErr>
<CodeGenErr>
<ErrorCode>-61106</ErrorCode>
<DynamicText><TreeLineInfo><TreeInfo><TreeID>1</TreeID>
</TreeInfo>
<LineInfo><VI><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</VIPath>
<Name>NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</Name>
</VI>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>2</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2803</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>3</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2816</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
</DynamicText>
</CodeGenErr>
<CodeGenErr>
<ErrorCode>-61106</ErrorCode>
<DynamicText><TreeLineInfo><TreeInfo><TreeID>1</TreeID>
</TreeInfo>
<LineInfo><VI><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</VIPath>
<Name>NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</Name>
</VI>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>2</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2803</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>3</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2816</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
</DynamicText>
</CodeGenErr>
Solved!
Go to Solution.Removing the two subVIs that read from/write to the block memory doesn't avoid the error showing up during compilation. The error details are obviously different now; they don't refer to the two subVIs (mentioned in the previous post) anymore...
An internal software error has occurred. Please contact National Instruments technical support at ni.com/support with the following information:
nirviUIDToObject.vi<ERR>
Error getting object reference for UID.
All text parsed:
<CodeGenErr>
<ErrorCode>-61106</ErrorCode>
<DynamicText><TreeLineInfo><TreeInfo><TreeID>1</TreeID>
</TreeInfo>
<LineInfo><VI><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</VIPath>
<Name>NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</Name>
</VI>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>2</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2735</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>3</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2748</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
</DynamicText>
</CodeGenErr>
<CodeGenErr>
<ErrorCode>-61106</ErrorCode>
<DynamicText><TreeLineInfo><TreeInfo><TreeID>1</TreeID>
</TreeInfo>
<LineInfo><VI><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</VIPath>
<Name>NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</Name>
</VI>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>2</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2735</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>3</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2748</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
</DynamicText>
</CodeGenErr>
<CodeGenErr>
<ErrorCode>-61106</ErrorCode>
<DynamicText><TreeLineInfo><TreeInfo><TreeID>1</TreeID>
</TreeInfo>
<LineInfo><VI><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</VIPath>
<Name>NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</Name>
</VI>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>2</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2735</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>3</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2748</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
</DynamicText>
</CodeGenErr>
<CodeGenErr>
<ErrorCode>-61106</ErrorCode>
<DynamicText><TreeLineInfo><TreeInfo><TreeID>1</TreeID>
</TreeInfo>
<LineInfo><VI><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</VIPath>
<Name>NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi</Name>
</VI>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>2</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2735</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
<TreeLineInfo><TreeInfo><TreeID>3</TreeID>
<ParentID>1</ParentID>
</TreeInfo>
<LineInfo><DiagramObject><VIPath>C:\NIFPGA\compilation\FPGAWrapperAK101_PXI-7813R_main_C0C9511F\MungedForFPGA\NI.Munge.main.vi_FPGACompileCopy00000001.vi</VIPath>
<UID>2748</UID>
<ObjectName>SubVI: 'NI.Munge.generate_DAC_voltages.vi_FPGACompileCopy00000001.vi'</ObjectName>
</DiagramObject>
</LineInfo>
</TreeLineInfo>
</DynamicText>
</CodeGenErr> -
I cannot log in to volume purchasing--an internal server error has occurred
I cannot log in to volume purchasing--an internal server error has occurred
just tried again and got XML code.
-
An internal build error has occurred. Right-click for more information
Greetings!
We are using Eclipse 3.4 or 3,5 with Flash 4 plugin and Flex SDK 3.3.0.
Project set comprises several, more than a couple dozen, dependent Flex and Java projects.
Time-to-time we run across an internal build error on all Flex projects.
The stack trace where topmost entries are:
So far we did not find how to get around the problem except delete project set and start from
scratch.
Pleas help!
!ENTRY com.adobe.flexbuilder.project 4 43 2010-07-23 14:40:38.353
!MESSAGE Uncaught exception in compiler
!STACK 0
java.lang.NullPointerException
at com.adobe.flexbuilder.multisdk.compiler.internal.ASBuilder.applySettings(ASBuilder.java:3 25)
at com.adobe.flexbuilder.multisdk.compiler.internal.ASApplicationBuilder.setup(ASApplication Builder.java:67)
at com.adobe.flexbuilder.multisdk.compiler.internal.ASItemBuilder.setup(ASItemBuilder.java:5 4)
at com.adobe.flexbuilder.project.compiler.BuilderFactory.createBuilder(BuilderFactory.java:8 0)
at com.adobe.flexbuilder.project.compiler.BuilderFactory.createBuilder(BuilderFactory.java:5 9)
at com.adobe.flexbuilder.project.compiler.BuilderManager.getBuilder(BuilderManager.java:192)
When it happens you can not open project "Properties | Flex Compiler" dialog because error
message pops up saying "The currently displayed page contains invalid values."
I am not sure how "an internal build error..." relates to "...displayed page contains invalid values"
but it worth to mention anyway.
Thanks for your help.Getting the same error and deleting bin-debug files doesn't help. All switch statements have a case so that isn't an issue either.
Says to right click on the error for more info but that brings ups broken webpage.
Adobe I think you really rushed Flash Builder out to fast. These weird errors and the namespace debacle is just totally unprofessional. -
An authentication error has occured (Code: 0x607)
Hi all,
This one is driving me NUTS! The problem itself is when I go to connect to a session host using a web access server I get the error in the title. This is only happening to some of my session hosts and not all. I have compared them and can't find
a single difference. I also cant find anything useful in the event logs about this. Below is my setup.
A full RDS environment using all Windows Server 2012 Data Center. Nothing 2008 R2. All Clean installs.
I have 6 servers a VM's split evenly between 2 ESXi 5.1 Hosts.
1. MP-RDP-CB1.inucoda.net (Connection Broker 1)
2. MP-RDP-CB2.inucoda.net (Connection Broker 2)
3. MP-RDP-GW1.inucoda.net (Gateway Server 1)
4. MP-RDP-GW2.inucoda.net (Gateway Server 2)
5. MP-RDP-WA1.inucoda.net (Web Access Server 1)
6. MP-RDP-WA2.inucoda.net (Web Access Server 2)
inucoda.net is an network that is the Domain that all servers are joined to via 2 Domain Controllers splits between each ESXi Host.
My outside domain that you can get to from the web is ucoda.net
The connection brokers have all servers used including session hosts added to the server pool and are configured in HA mode. They use a SQL Server 2012 Fail-over cluster that is on a separate set of VMs for their database and the DNS is configured as round
robin. MP-RDP-CB.inucoda.net. There are two entries of this each with one of the two IPs of the CB1 and CB2 servers.
On each CB server there is a RDS License server role installed with CALs installed and activated/registered. Both LIC servers have been added to the RDS deployment properties.
The GW servers each have the NLB role installed with an extra network adepter for NLB use. There is a DNS name of MP-RDP-GW.inucoda.net that points to the NLB IP of the GW Cluster. Also both GW servers were added to the GW Server Farm part of the the
GW properties.
The WA servers are also in a NLB Cluster with an extra adapter and a DNS of MP-RDP-WA.inucoda.net pointing to the NLB IP.
Up steam from our inside Windows Domain at our ISP level there is a DNS entry of MP-RDP-WA.ucdoa.net and it points to the NLB IP of the WA NLB Cluster. (This is not a public IP, we require you be on our VPN to be able to access the IP).
For certificates we have a Comodo issued wildcard of *.ucoda.net with the corresponding Comodo Root Trust and Intermediate Certs. We also have a wildcard *.inucoda.net created by our inside CA.
The *.inucoda.net cert is used for the CB SSO, CB Publishing, and GW while the *.ucoda.net cert is used for the WA.
All session hosts have been configured to use the *.inucoda.net for their RDP sessions.
I can confirm that the *ucoda.net cert is used for the WA part and all other parts are reporting the *inucoda.net, all with no errors or warnings.
For each session collection only one session host is used with no apps, (just RDP). Security is set to only use NLA, SSL 1.0, High.
On each session host I have verified that the *inucoda and *ucoda certs are installed and the internal CA and Comodo CA/Intermediate CA is installed in the correct stores. I have also verified that COM Security has the domain\TS Web Access group set
with full perms for the Access and Launch/Activation. Also for WMI Root\CMIV2\TermicalServcies Security has the domain\Ts Web Access group set with full perms. Lastly each group/user that has access to RDS is listed in the Remote Desktop users.
I've checked that both WA servers are listed in the TS Web Access group.
The GW servers RAS/RAP policies are set to be pretty open for testing with using any port, any network resource, and Domain Users and Domain Admins listed.
I have been trying to connect with Windows 8 and Windows 7 clients as the domain\administrator account. Some of my session hosts connect fine and other don't . It's always the same ones that connect and don't connect. I can't find any difference
between the. I've also blown away my entire RDS and started over with just a 3 server single node model with no NLB or RR DNS and the same exact error happens on certain servers. I have sense gone back to the 6 server setup described here
and again the same error on the same session hosts.
I have also tried Negotiate and RDS Compatible and disabling NLA only for security. No change. Now here is the interesting part. If I remove GW servers from RDS by just saying not to use them (not actually uninstalling them or anything), all
session hosts connect just fine every time. When I first did my RDS setup I got he same error with code 0x607 for every connection attempt and found i had to set the RAS/RAP to use any network resource instead of Domain Computers. However, it is
currently set like that and some still don't connect. So it works with out the GW servers just fine. It also works without them in the 6 node setup as well as the 3 node setup.
I don't want to use it without the GW servers because since I am using all inside subnets with a VPN I have to add the CB IP/Name to my host file or it will not resolve and give an error about reaching the Connection Broker. Because I want to use a HA setup
this is no good as there are two servers for it. That's why I use the NLB IP of the WA and publish it with outside DNS with our ISP.
Any ideas at all??
Thanks,
ChrisHi All,
I'm the original poster and if you have been following this I was never fully able to get things working. Sometimes it would just work and other times it would just fail with the 607 error. I have finally got it all working
for over a week now with multiple systems using it! Below is a rather large explanation of what I had to do and what I learned about RDP. I've included links to guides that helped a lot.
First a small recap of my environment.
Using all windows server 2012.
Using two Gateways, Connection Brokers, and Web Access servers.
Two domain names, ucoda.net for external connection via web to web access servers and inucoda.net to inside windows domain that all servers are members of.
No external client systems are domain members, all just workstations.
Using two wildcard *.domain certs for both domain names.
External wildcard cert is from Comodo CA and internal wildcard cert is from my internal CA.
Now for how I setup the RDS environment.
I used this guide for setting up high availability of the connection brokers.
http://blogs.msdn.com/b/rds/archive/2012/06/27/rd-connection-broker-high-availability-in-windows-server-2012.aspx
I used a back end SQL Server 2012 that was configured in a two node failover cluster for maximum HA. As you can see by the guide it uses round robin DNS for load balancing the two CBs and does not require any hardware or software NLB.
For both the two gateways and web access servers you need to use some kind of NLB. You can use the MS NLB to create a virtual Cluster IP and set a DNS record for you gateway and web access name to point to that cluster IP. HOWEVER! If you are
in a virtualized vmware environment as I am then you have some other things to do. I can not comment as to Hyper-V setups, only vmware on ESXi-5.1. If you use MS NLB then you must use it in Multicast mode and not Unicast. You must also setup static
ARPs on your Layer 3 router/firewall and Layer 2 switches. The static ARP should match the NLB cluster IPs to the NLB Cluster MAC address. Below are the guides for a Cisco Cat switch and ASA firewall.
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1006525
http://www.cisco.com/en/US/docs/security/asa/asa84/asdm64/configuration_guide/mode_fw.html#wp1224694 see adding a static arp section.
Now in the end I still was not fully happy with MS NLB as it is not Layer 7 aware and can only check the network health. So I ditched my MS NLB for a linux solution. HAProxy. It is a software NLB that is Layer 7 aware and easy to setup.
I used two Ubuntu Server 12 VMs with 1 GB RAM, 8GB HDD, and 1 vCPU each. I also used Keepalived to setup virtual cluster IPs for HAProxy to use with failover. so the HAProxy NLB is in high availability mode as well.
Setup HAProxy on Ubuntu
http://www.networkinghowtos.com/howto/compile-haproxy-from-source-on-ubuntu/
Configure HAProxy and Keepalved
http://leowadsworth.com/blog/2012/02/21/high-availability-load-balanced-web-servers-using-ubuntu-10-04-haproxy-keepalived-apache/ Skip the install part and see just the config parts for HAProxy and Keepalived.
Now once NLB is done and you have DNS pointing to it you need to add both Gateways to a Gateway Web Farm. Not required for the Web Access Servers only the Gateways. for the Web Access server you only need NLB with a common DNS.
Setup Gateway Farm
http://technet.microsoft.com/en-us/library/cc732370.aspx
Also as my client systems are not a part of the domain and have different subnets I needed to set the gateway RAP and CAP to allow users to connetc to any network resource.
Now that the main configuration was done and running I had to fix/fine tune/and mess with a bunch of other things!
There should be a domain user group account called TS Web Access Computers. It should be populated with the Web Access server computers. However in my deployment it was empty! great. However, I also found other documentation that states
it should be populated with the Gateway servers. So for me I added both Gateways, Web Access, and Connection Broker Servers. I figured it can't hurt.
Now this group account needs to be added to COM security and WMI security for terminal services. Below is a guide for both of these. I applied this configuration to every single system including all session hosts.
http://technet.microsoft.com/en-us/library/ee891251%28v=ws.10%29.aspx
Now something interesting. Most of my systems were all server 2012 but a few were 2008R2 that had been upgraded in place to 2012. For these systems the above config is till needed but you will find on the local systems user groups a TS Web Access Computers
group. This is not in the local groups for 2012 but got merged over from 2008 R2. So for it I also added the domain\TS Web Access Computers group to the local TS Web Access Computers group and added the local one to COM and WMI security as well.
Further into local user groups. On all systems in the deployment there is a local RDS Management Server group and it should have both Connection Broker servers listed. I found this to be true on all my session hosts but
on the Connection Brokers them self they only have their own server listed but not the other connection broker server. I added both to each. I also found a few of my systems had a third ? SID account listed that was no longer was a real
account in the domain. I removed it. Possibly from how many freaking times I had to re do my setup.
Now on the Connection Brokers local group accounts there is a RDS Remote Access Servers group. It should have all the Gateway and Web Access Server listed here. In my setup I found only the Web Access Servers were listed and no Gateways.
GREAT! This only needs to be populated on the Connection Broker Servers. There is also a RDS End Point Servers group and it should have every Session Host server listed. Again only needed on the Connection Brokers.
That concludes user accounts/groups.
Now onto the fun land of Certs!
Something you need to make sure works is Revocation Checks!!!!!! It needs to pass from both the external client systems and internal server systems. I had two certs used. I used my *ucoda.net (external) for my Web Access Server Deployment and
my *inucoda.net (Internal) for The Gateway and both Connection Broker parts.
My external was issued by Comodo so it passed rev checks just fine. While my internal was issued from my internal CA and needed some work. For the internal servers it could pass a rev check fine as it used the LDAP path in the CRL CDP
part of the cert. However my clients are external and not part of the domain. So it can't use LDAP. To check rev checks I used:
certutil -f –urlfetch -verify <your_certificate>.cer
You can download it for Windows 7 and 8 systems from:
http://www.microsoft.com/en-us/download/details.aspx?id=7887 win 7
http://www.microsoft.com/en-us/download/details.aspx?id=28972 win 8
To get it to pass on my client systems I had to add a CRL CDP http point that they could access instead of the LDAP point. In short on you internal CA you need to add a CRL that uses the FILE path to publish rev lists to a file share. The file share
is located on a server that has IIS and public access. You then create a virtual directory with read rights to the that share in IIS and add a CRL HTTP point using the external FQDN of public web server for the CRL site. Below is a guide
to do all of this.
http://blogs.technet.com/b/configmgrteam/archive/2009/05/01/how-to-publish-the-crl-on-a-separate-web-server.aspx
Now once this is done you need to re generate a new cert and apply it to your RDS environment so it has the updated CRL CDP.
Now after this I was able to pass using certutil tool. But! wait there's more! When I tried to connect to a server using normal RDP (not the full web access and gateway deployment), just direct to the end server I still got the warning about
a rev check fail! I just didn't get it! After a ton of researching it appears that RDP will only use LDAP and OCSP CDPs and not HTTP. Great! So while it passes the rev check from the tool it still fails for RDP.
So next was to add a OCSP CDP and Online Responder. I chose to add the Online Responder role to my public web server where I had just added the HTTP CRL CDP. Below are a few guides about setting this up and configuring your CA
to use it.
http://www.windowsitpro.com/content1/topic/online-certificate-status-protocol-ocsp-in-windows-server-2008-and-vista--103523/catpath/security
http://blogs.technet.com/b/askds/archive/2009/06/24/implementing-an-ocsp-responder-part-i-introducing-ocsp.aspx
http://www.sysads.co.uk/2012/10/install-and-configure-ca-online-responder-ad-cs-part3/
I fond all helpful. Now here comes a part that drove me NUTS!. All these guides show that after installing the Online Responder role it automatically adds a ocsp webapp to IIS! This is to be the CDP point you add to
the CA. THIS IS NOT TRUE FOR 2012! It does not add the IIS config what so ever. Luckily I manged to find this:
certutil -vocsproot
You need to run that command on the web server where you installed the Online Responder role. It will add the IIS config and app pool!
Now once this is all done and tested you need to re issue the cert again so it has the new OCSP CDP in it and install it in RDS deployment.
Finally after this I received no rev check errors for RDP!
Some more things on certs.
For all my servers I installed the internal and external cert to their computer personal store and made sure the corresponding root and intermediate root certs were installed in the correct stores. I also did this on my external client systems. Be
sure to add your internal CA's root cert to the trusted root store of you client systems or again the certs generated from it will not pass fully as the client system will not know to trust the CA that issued the cert.
Now you also need to install a cert for each session host to use for RDP. I really recommend wildcards as it much easier to just use a *domain cert for RDS deployment and install it on each session host for RDP than to have unique ones for
each session host. You use to be able to easily add a RDP cert in 2008R2 to a session host. This is now gone in 2012. So to do it you need to use the power shell. Below is guide on how to do this.
http://blog.skadefro.dk/2012/08/windows-server-2012-server-8-remote.html
Now I also used a little utility to help check that my certs were installed on each server correctly. I found on a few of my servers where one of my certs was missing the private key or had other problems. This free tool from DigiCert can help and
can also be used to test certs for rev checks.
https://www.digicert.com/util/
Lastly there is the issue of what RDP version you are using. For me my systems they are all server 2012. I found the only way to get SSO to fully work without a 2nd login prompt was to update all my Windows 7 RDP clients to the latest RDP.
http://blogs.msdn.com/b/rds/archive/2012/10/23/rdp-8-0-update-for-windows-7-sp1-released-to-web.aspx
Well after all that I was able to access every RDSH in my environment without a single error! It has been a ridiculously long and pain full journey. I think MS needs to do more work and documentation of 2012
RDS as it's changed so much, needs a better way to issue session host certs for RDP instead of just the power shell, and needs more documentation and clarity on RDP rev checks. I hope this helps others and if anyone wants to see what my configs
look like for HAProxy if they decide to use it feel free to ask.
Thanks and Good Luck!
Chris -
My account is set up, but can not publish a temporary site!!!
Any help will be highly appreciate.Hi,
Could you please try these steps
in muse, go to Help Menu-> Sign Out
Restart Muse,
Login to Muse again.
Try to publish the site again.
Let us know if that works
Maybe you are looking for
-
Is there an easy way to add a desktop shortcut for all users?
Looking for an easy way to add a shortcut to an app for all users.
-
Setting voltage level Digital Out in NI 6221
Hi all, I am working with a NI 6221. I am wondering if it is possible to change voltage level of digital out channels? Currenty I am using "Digital Bool 1line 1 point" as my DAQmx write. Thanks, Saridar Solved! Go to Solution.
-
Even when I clicked on 'help' in Thunderbird it opened in IE. All of the help articles I've read tell me to make Firefox the default browser but it already is.
-
How can i get my photos from iPhoto on snow leopard to lion?
I had to have my photos restored from my old mac. I was running SL. I have them on an external drive. Have the mini now with lion and want to know how to get my photos! Help!
-
Unable to see Oracle Secure Backup Selections in EM (10g-10.2.0.1)
I cannot see the Oracle Secure Backup choices on the maintenance tab page. I see Backup/Recovery and Backup/Recovery Settings but no third column Oracle Secure Backup. I logon to EM as SYS. Any ideas ? Thanks