Communication Client Access Issue
Hello,
I moved from a Motorola Droid Bionic to a Moto X after my Bionic started shutting off with a claim of 0% battery only to be at 80% once plugged in.
I spoke with some of the staff at the local VZW store (an "Actual" store, not a authorized reseller) and was assured that basically all the functionality I had with my Bionic would be pretty much the same on the current Moto X....Only better.
I purchased my X off-contract (paid full price) and I have one critical issue that needs to be addressed somehow.
In order to have my company contact list on my new phone (which they just updated for 4.4) the security suite needs root access (this is due to a proprietary security feature built into the overall communication suite my company developed)
Funny thing is despite being assured by the folks at the store that I would be able to unlock my phone if I paid full price for it.....there is no means or method to do this.
I am now beyond the time period where I can return my new phone to Motorola since I have had it longer than 14 days, and it does not function in the manner I was told it would.
Is there any resolution here, or do I have a $500 paperweight?
Sorry for the delayed response, but a couple of questions--did you get the phone via Verizon, or directly from Motorola?
Have you asked Motorola if there's any recourse to your situation?
Frankly, I would not have relied 100% on something told to me verbally in the VZW store (why do I know this?)--would want to check online to verify, places like xda-developers.com will always have good info. Bottom line is that workaday VZW Moto Xs cannot be rooted, except for the Developer Edition, which is only available from Motorola directly. If you contact them, perhaps there's a way to exchange your phone for a Developers model. Otherwise, my suggestion (if you like the phone well enough to keep using one) is to buy a Developers model from Motorola so you can root it, then sell your current phone on Ebay or swappa to someone who wants a stock model to just use. HTH.
Similar Messages
-
Client access issues when mailboxes are mounted on a specific mailbox server
One of our 3 mailbox servers gives us an error when mailbox databases are mounted on it.
All web services are not functioning properly, there is an event log error for each web service web.config file saying file not found, If I open each web.config file and look at the line in question they all point to:
<assemblies>
<add assembly="Microsoft.Exchange.Security, Version=15.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
</assemblies>
Does anyone know what this is pointing at or what my server is missing?
It is Exchange 2013 Sp1 RU7 as are my other 2 mbx servers which work fine...
all pre-req's are installed as I double checked and no difference between the 3 mbx servers that I can see...
***Don't forget to mark helpful or answer***IIS error
=== Pre-bind state information ===<o:p></o:p>
LOG: DisplayName = Microsoft.Exchange.Security, Version=15.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35<o:p></o:p>
(Fully-specified)<o:p></o:p>
LOG: Appbase = file:///C:/Program Files/Microsoft/Exchange Server/V15/ClientAccess/Autodiscover/<o:p></o:p>
LOG: Initial PrivatePath = C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\Autodiscover\bin<o:p></o:p>
Calling assembly : (Unknown).<o:p></o:p>
===<o:p></o:p>
LOG: This bind starts in default load context.<o:p></o:p>
LOG: Using application configuration file: C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\Autodiscover\web.config<o:p></o:p>
LOG: Using host configuration file: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet.config<o:p></o:p>
LOG: Using machine configuration file from C:\Windows\Microsoft.NET\Framework64\v4.0.30319\config\machine.config.<o:p></o:p>
LOG: Post-policy reference: Microsoft.Exchange.Security, Version=15.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35<o:p></o:p>
LOG: Attempting download of new URL file:///C:/Windows/Microsoft.NET/Framework64/v4.0.30319/Temporary ASP.NET Files/autodiscover/b455e468/cbaac37d/Microsoft.Exchange.Security.DLL.<o:p></o:p>
LOG: Attempting download of new URL file:///C:/Windows/Microsoft.NET/Framework64/v4.0.30319/Temporary ASP.NET Files/autodiscover/b455e468/cbaac37d/Microsoft.Exchange.Security/Microsoft.Exchange.Security.DLL.<o:p></o:p>
LOG: Attempting download of new URL file:///C:/Program Files/Microsoft/Exchange Server/V15/ClientAccess/Autodiscover/bin/Microsoft.Exchange.Security.DLL.<o:p></o:p>
LOG: Attempting download of new URL file:///C:/Program Files/Microsoft/Exchange Server/V15/ClientAccess/Autodiscover/bin/Microsoft.Exchange.Security/Microsoft.Exchange.Security.DLL.<o:p></o:p>
LOG: Attempting download of new URL file:///C:/Windows/Microsoft.NET/Framework64/v4.0.30319/Temporary ASP.NET Files/autodiscover/b455e468/cbaac37d/Microsoft.Exchange.Security.EXE.<o:p></o:p>
LOG: Attempting download of new URL file:///C:/Windows/Microsoft.NET/Framework64/v4.0.30319/Temporary ASP.NET Files/autodiscover/b455e468/cbaac37d/Microsoft.Exchange.Security/Microsoft.Exchange.Security.EXE.<o:p></o:p>
LOG: Attempting download of new URL file:///C:/Program Files/Microsoft/Exchange Server/V15/ClientAccess/Autodiscover/bin/Microsoft.Exchange.Security.EXE.<o:p></o:p>
LOG: Attempting download of new URL file:///C:/Program Files/Microsoft/Exchange Server/V15/ClientAccess/Autodiscover/bin/Microsoft.Exchange.Security/Microsoft.Exchange.Security.EXE.<o:p></o:p>
***Don't forget to mark helpful or answer*** -
No new mail notification in Outlook - CAS Exchange RPC Client Access problem
Hi, we're facing this problem:
Users start complaining they suddenly don’t receive new mail notifications in Outlook (2010/2013) anymore
Inbox does not show the new mail either
When the user changes folders in outlook, the new mail does show in the Inbox folder
Restarting Outlook shows the new mail as well.
The same new e-mail arrives instantly (with notifications) in Owa and on mobile devices
Sometimes the new mail notification pops up after a longer period of time (from 30 seconds to 10 minutes). But more often not at all.
This issue seems to occur at random. We’ve been problem free for a week, and sometimes it comes back three times a day.
Clients running Outlook 2010, 2013 cached or online, on site and off site. So it seems server related, not client.
It was seen first around January 8th. We did not make any changes around that time that we can link to this problem.
Only one CAS server (EXCH1-RTD) shows this issue. CAS servers on other sites are ok
EXCH1-RTD has CAS and HUB transport roles. The same site has two mailbox only servers. EXCH2-RTD (mailbox server for normal mailboxes). And EXCH3-RTD (mailbox server for archive mailboxes)
No entries in the event logs that seems to be related
As the problem only occurs with Outlook clients, I suspected RPC issues. We cannot gracefully stop the “Microsoft Exchange RPC Client Access” service on EXCH1-RTD while the issue occurs. We
can only kill the process and restart the service, solving the issue instantly.
What we’ve tried until now:
Updated all Exchange servers from Exchange 2010 SP3 RU6 to RU8-v2 (server OS=W2K8R2)
Updated all Exchange servers to latest critical Windows updates
Recalculated requirements using MS Sizing tool. Upgraded EXCH1-RTD VM from 8GB and 2 vCPU (1 core/cpu) to 16GB
and 4vCPU (1 core/cpu)
Ran various perfmon counters and compared them with other Exchange servers, not finding any obvious anomalies.
Any ideas would be greatly appreciated!
RonHi Ron,
From your description, OWA works well, the issue is related to Outlook side. In your case, I recommend you use Outlook safe mode to determine whether the issue is related to add-ins. If the issue persists, you can create a new profile to check the result.
Hope this can be helpful to you.
Best regards,
Amy Wang
TechNet Community Support -
Migration to Exchange 2013 from 2010 - Client side issues
Hi Everyone,
I've been having issues with clients connecting to an existing Exchange server (Getting login prompt- but not usual reason).
We currently run Exchange 2010 with approx 200 mailboxes on the server. Last night I renewed the certificate on the 2010 server (go daddy SAN cert, all ok) and added the cert to my new Exchange 2013 server. I tested it with my account, and a
test account approx 12 times, and had not login prompt when launching Outlook. All seemed ok, until this morning.....
This morning, most (not all) users are getting the login prompt. We are able to get by this by inputting domain\username and Outlook opens fine and is able to connect. No users are on the Exchange 2013 server yet (only 1 test account)
I've been googling all morning and I'm not seeing anything directly relating to my issue. I've read about the Anon vs Negotiate issues (KB2834139) - But - the strange thing is all clients are set to negotiate network security (And encrypt data) This
is opposite of what the MS article says. CLients are all Outlook 2010
Here are my outlook anywhere settings:
ServerName : exchange2010
IISAuthenticationMethods : {Basic}
ServerName : exchange2013A
IISAuthenticationMethods : {Basic, Ntlm}
ServerName : exchange2013B
IISAuthenticationMethods : {Basic, Ntlm}
Identity ClientAuthenticationMethod IISAuthenticationMethods
exchange2010\Rpc (Default Web Site) Basic {Basic}
exchange2013a\Rpc (Default Web Site) Ntlm {Basic, Ntlm}
exchange2013b\Rpc (Default Web Site) Ntlm {Basic, Ntlm}
If I change the Exchange 2010 server to NTLM, will this resolve what I'm seeing? And do I need to restart RPC Client Access and Transport Service to make changes take effect? Or reboot the whole server?
If you need more info or logs please let me know
Thank you for any help!
-JeffHi,
Please confirm if the Login prompt issue occurs when users open the Outlook client at first time after renewing Exchange certificate or happens when opening the Outlook every time.
I noticed that the user can connect to Exchange server after inputting domain\username. Please confirm if the issue happens to external users who use Outlook Anywhere. For Outlook Anywhere coexistence,
please choose NTLM for IIS authentication.
Set-OutlookAnywhere -Identity "exchange2010\Rpc (Default Web Site)" -IISAuthenticationMethods Basic,Ntlm
Regards,
Winnie Liang
TechNet Community Support -
Hoping someone can point me in the right direction here.
Infrastructure:
SCCM 2012 R2 CU1:
Single Primary Site Server (Server 2012 R2 Update), With MP Role
Remote SQL 2012 Server (Server 2012 R2 Update)
Second Standalone MP (Server 2012 R2 Update)
HTTPS with PKI Certificate deployed for DP and MP roles
We have been testing client rollout to pilot machine over the past couple of weeks and everything (appears) to be working fine. OSD, Application deployments, etc. all working as expected.
The default ports for Client communication are select (80/443 and 10123)
Client Notification is not working however. I can go through the motions to create a "Download Machine Policy" notification, but the policy doesn't make it to the machine and all status messages for the notification stay at "unknown".
*Side note, the online tests to keep the client active appears to be working fine.
The BGBSetup logs show successful installation for both servers.
I get lots of messages similar to this in the BGBServer.log (on both MP's):
ERROR: Client ID is not 41 length. 8478e00c-d07b-4d93-b0f4-e01f4c78cc3b
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
ERROR: Client ID is not 41 length. 8478e00c-d07b-4d93-b0f4-e01f4c78cc3b
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
ERROR: Client ID is not 41 length. 8478e00c-d07b-4d93-b0f4-e01f4c78cc3b
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
ERROR: The message body is invalid. <BgbSignInMessage TimeStamp="2014-06-27T18:50:02Z"><ClientType>SCCM</ClientType><ClientVersion>5.00.7958.1203</ClientVersion><ClientID>8478e00c-d07b-4d93-b0f4-e01f4c78cc3b</ClientID></BgbSignInMessage>
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
ERROR: The message body is invalid. <BgbSignInMessage TimeStamp="2014-06-27T18:50:02Z"><ClientType>SCCM</ClientType><ClientVersion>5.00.7958.1203</ClientVersion><ClientID>8478e00c-d07b-4d93-b0f4-e01f4c78cc3b</ClientID></BgbSignInMessage>
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
ERROR: The message body is invalid. <BgbSignInMessage TimeStamp="2014-06-27T18:50:02Z"><ClientType>SCCM</ClientType><ClientVersion>5.00.7958.1203</ClientVersion><ClientID>8478e00c-d07b-4d93-b0f4-e01f4c78cc3b</ClientID></BgbSignInMessage>
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
Failed to process SignIn message from client [::ffff:10.100.122.71]:56195.
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
Failed to process SignIn message from client [::ffff:10.100.122.71]:56195.
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
Failed to process SignIn message from client [::ffff:10.100.122.71]:56195.
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
BGBmgr.log shows no errors:
Begin to handle file Bgbi1v41.BOS SMS_NOTIFICATION_MANAGER
6/27/2014 2:00:26 PM 6892 (0x1AEC)
Begin to process file C:\Program Files\Microsoft Configuration Manager\inboxes\bgb.box\Bgbi1v41.BOS
SMS_NOTIFICATION_MANAGER 6/27/2014 2:00:26 PM
6892 (0x1AEC)
Server Name: MP.DOMAIN.COM, Version: 704
SMS_NOTIFICATION_MANAGER 6/27/2014 2:00:26 PM
6892 (0x1AEC)
No records need to be BCPed SMS_NOTIFICATION_MANAGER
6/27/2014 2:00:26 PM 6892 (0x1AEC)
Successfully processed file C:\Program Files\Microsoft Configuration Manager\inboxes\bgb.box\Bgbi1v41.BOS
SMS_NOTIFICATION_MANAGER 6/27/2014 2:00:26 PM
6892 (0x1AEC)
Successfully processed file Bgbi1v41.BOS, clean it.
SMS_NOTIFICATION_MANAGER 6/27/2014 2:00:26 PM
6892 (0x1AEC)
BgbManager is waiting for file and registry change notification or timeout after 60 seconds
SMS_NOTIFICATION_MANAGER 6/27/2014 2:00:26 PM
6892 (0x1AEC)
CcmNotificationAgent.log on a client:
Access point is MP.DOMAIN.COM. (SSLEnabled = 0)
BgbAgent 6/27/2014 12:52:29 PM
5544 (0x15A8)
CRL Checking is Enabled. BgbAgent
6/27/2014 12:52:29 PM 5544 (0x15A8)
Both TCP and http are enabled, let's try TCP connection first.
BgbAgent 6/27/2014 12:52:29 PM
5544 (0x15A8)
Connecting to server with IP: 10.32.8.135 Port: 10123
BgbAgent
6/27/2014 12:52:29 PM 5544 (0x15A8)
Handshake was successful
BgbAgent
6/27/2014 12:52:29 PM 5544 (0x15A8)
Pass verification on server certificate.
BgbAgent 6/27/2014 12:52:29 PM
5544 (0x15A8)
Update the timeout to 900 second(s)
BgbAgent 6/27/2014 12:52:29 PM
5544 (0x15A8)
Receive signin confirmation message from server, client is signed in.
BgbAgent 6/27/2014 12:52:31 PM
5544 (0x15A8)
Successfully sent keep-alive message.
BgbAgent 6/27/2014 1:07:32 PM
5544 (0x15A8)
Successfully sent keep-alive message.
BgbAgent 6/27/2014 1:22:33 PM
5544 (0x15A8)
IIS log shows 200's across the board.
Any ideas on where to look next?You can check to see if Firewall is the issue.
You can also use the following log files to help you troubleshoot client notification problems.
Component
Log
Notification Manager
<smssiteserver setup dir>\logs\bgbmgr.log
Notification Server
<mp setup dir>\logs\BGBServer.log
<sms_ccm dir or client setup dir>\logs\BgbHttpProxy.log
For installation issues:
<mp setup dir>\logs\BgbSetup.log
<mp setup dir>\logs\bgbisapiMSI.log
Notification Agent
<client setup dir>\logs\CcmNotificationAgent.log
Refer to the blog posted by Yvette...
http://blogs.technet.com/b/configmgrteam/archive/2012/09/27/fast-channel-for-system-management.aspx
Krishna Santosh Maadasu Please remember to click “Mark as Answer” on the post that helps you, and click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. -
Exchange 2013 - Client Access Servers - Disk Space C:\ Running Low Space
Currently having an issue with both of our client access servers with exchange 2013.
The issue is that the C:\ drive will run low on disk space on one of the cas server and the other one will be fine. We have cleaned up all the logs etc to free space on the cas server that is running low on space but its not sufficient enough
as it keeps on running low on space, then what we do the free up the space is to reboot the cas server that runs low on space, and it free the space up after it has been restarted, then the other cas server starts running low on space.
has anyone seen this before?Hi,
If it is possible, I suggest re-installing Exchange Server on another path instead of C:\.
Thanks
Mavis
Mavis Huang
TechNet Community Support -
Good Morning,
We are getting this error
Outlook Web Access is currently unavailable. If the problem continues, contact technical support for your organization and tell them the following: No Client Access servers
of the appropriate version can be accessed from the Internet
We installed a new Exchange 2007 CAS on Windows 2008R2. Got rid of old CAS on Exchange 2007. Now seeing this error. Does anyone have an idea??Hi,
If the issue persists, I recommend you install Exchange 2007 SP3 RU7 and check the result. Also, ensure that Exchange 2010 SP2 RU1 or later version is installed. Old Exchange version may lead to the CAS-to-CAS proxy incompatibility.
What's more, here are some helpful blogs for your reference.
Exchange 2010 SP2 RU1 and CAS-to-CAS Proxy Incompatibility
http://blogs.technet.com/b/exchange/archive/2012/02/17/exchange-2010-sp2-ru1-and-cas-to-cas-proxy-incompatibility.aspx
OWA Coexistence With Legacy Versions
http://blogs.technet.com/b/sjimmie/archive/2010/07/09/owa-coexistence-with-legacy-versions.aspx
Hope this can be helpful to you.
Best regards,
Amy Wang
TechNet Community Support -
Exchange 2010 SP3 Rollup 8v2 causes client connectivity issues
I installed SP3 Rollup 8v2 this weekend, going from 7. Since then we are having random client connectivity issues. New profiles can't be created, and some users can't access resources when booking meetings. We can do a registry fix to their machines to add
a DS Server, but this is a workaround only. I have uninstalled the Rollup 8v2 and we are still having the issue.
I thought 8v2 was supposed to fix this issue!Hi,
According to your post, I understand that outlook client cannot connect to Exchange server to configure profile and cannot get list of resources room when upgrade to Exchange 2010 SP3 Rollup 8v2, the temporary solution is that specify the DC in registry.
If I misunderstand your concern, please do not hesitate to let me know.
Is there error message when configure Outlook failed?
Please run Test E-mail AutoConfiguration and Outlook connection status to double confirm the URL and FQDN of Exchange server.
As additional, please run below command to double check the state of Exchange system component:
Get-ServerComponentstate -Identity “servername”
If the state is Inactive, please run below command to active relevant component:
Set-ServerComponentState <Identity> -Component “component name” -Requester HealthAPI -State Active
More details about Server Component States in Exchange, for your reference:
http://blogs.technet.com/b/exchange/archive/2013/09/26/server-component-states-in-exchange-2013.aspx
Thanks
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Allen Wang
TechNet Community Support -
I’ve got a DNS client service issue:
I have a webserver in my local Domain, which is accessible locally only.
One client machine with Windows Server 2012 sometimes cannot access the websites situated on this local webserver. Its event viewer does not contain any issues. The machine can still access the internet. The thing I need to do then, is to restart the DNS client
service on this Windows Server client. After that these local websites are reachable again. The DNS Server is installed on the DC.
What approach could I follow to solve this issue?
PatrickAre you using the fqdn (host.domain.tld), a single label name or a custom dns name?
If you use the single label name, dns name resolution depends on the suffixes, make sure these are configured.
If the issue occurs, you could use nslookup to check if the communication with all configured dns servers is working and the required records are there.
Use ping to check if the correct ip with FQDN is returned. No FQDN implies netbios was used for name resolution - no good -> check the dns configuration
If you use a custom dns name, check what IP it resolves (ping/nslookup); is it a server local IP? If not, check if the issue resolves by putting the dns alias in the hostsfile with a local ip (or 127.0.0.1 if the bindings for your site allow)
The issue might also be solely related to the dns cache maintained by the service. You could check if ipconfig /flushdns resolves the issue to confirm. Their is not much configuration or debugging info available on this, but issues I've seen all boil down
to dns servers not being corretcly configured on the client's ip settings.
You could enable the DNS Client Events operational log (eventviewer->applications and services logs\Microsoft\Windows to maybe get more info on the issue.
MCP/MCSA/MCTS/MCITP -
EMC Crash when i try to - reset client access virtual directory
Hi All,
I have one exchagne server 2010 sp3 rollup 7 installed on server 2012R2 Std.
When i try to reset client access virtual directory the MMC is crashing.
In the event viewer i can find 3 error after to crash:
1.
The program mmc.exe version 6.3.9600.17415 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 2360
Start Time: 01d04e7b531a4a0d
Termination Time: 4294967295
Application Path: C:\Windows\system32\mmc.exe
Report Id: 69db84d3-ba91-11e4-80c3-0050569b5787
Faulting package full name:
Faulting package-relative application ID:
2.
Application: mmc.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Reflection.TargetInvocationException
Stack:
at Microsoft.ManagementConsole.Executive.MmcThreadMessageWindow.OnThreadException(Exception e)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)
at System.Windows.Forms.UnsafeNativeMethods.DispatchMessageW(MSG& msg)
at System.Windows.Forms.Application.ComponentManager.System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop(IntPtr dwComponentID, Int32 reason, Int32 pvLoopData)
at System.Windows.Forms.Application.ThreadContext.RunMessageLoopInner(Int32 reason, ApplicationContext context)
at System.Windows.Forms.Application.ThreadContext.RunMessageLoop(Int32 reason, ApplicationContext context)
at Microsoft.ManagementConsole.Internal.SnapInMessagePumpProxy.Microsoft.ManagementConsole.Internal.ISnapInMessagePumpProxy.Run()
at Microsoft.ManagementConsole.Executive.SnapInThread.OnThreadStart()
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
at System.Threading.ThreadHelper.ThreadStart()
3.
Faulting application name: mmc.exe, version: 6.3.9600.17415, time stamp: 0x54504e26
Faulting module name: KERNELBASE.dll, version: 6.3.9600.17415, time stamp: 0x54505737
Exception code: 0xe0434352
Fault offset: 0x0000000000008b9c
Faulting process id: 0x2014
Faulting application start time: 0x01d04e9e432feaef
Faulting application path: C:\Windows\system32\mmc.exe
Faulting module path: C:\Windows\system32\KERNELBASE.dll
Report Id: b8276755-ba91-11e4-80c3-0050569b5787
Faulting package full name:
Faulting package-relative application ID:
When i try to preform the task from EMC that installed on my PC (Win 7 SP1 x64) everything works fine
Thank you.Hi Eliran,
Thank you for your question.
Are there any update recently?
We could refer to the following steps to troubleshoot:
1)disable A/V
2) Run: DISM.exe /Online /Cleanup-image /Restorehealth
http://support.microsoft.com/kb/947821/en-gb
3) follow http://support.microsoft.com/kb/929833/en-gb to upload %WinDir%\Logs\CBS\CBS.log
4) disable snap-ins exept DNS-snapin
5) run SDP
6) enable A/V
We could also re-install .Net 4.0 to check if the issue persist by the following link:
http://www.microsoft.com/en-us/download/details.aspx?id=17718
If the issue persist, we could install Exchange 2010 SP3 CU8 by the following link:
http://www.microsoft.com/en-us/download/details.aspx?id=45225
If there are any questions regarding this issue, please be free to let me know.
Best Regard,
Jim -
I want to uninstall Acrobat reader. I got support in the community to access my HD and to send to trash the internet plugs in for PDF viewer, but when I try to download a PDF from internet a black screen appears and preview doesn't open
Back up all data.
Triple-click the line of text below to select it, the copy the selected text to the Clipboard (command-C):
/Library/Internet Plug-ins
In the Finder, select
Go ▹ Go to Folder
from the menu bar, or press the key combination shift-command-G. Paste into the text box that opens (command-V), then press return.
From the folder that opens, remove any items that have the letters “PDF” in the name. You may be prompted for your login password. Then quit and relaunch Safari, and test.
The "Silverlight" web plugin distributed by Microsoft can also interfere with PDF display in Safari, so you may need to remove it as well, if it's present.
If you still have the issue, repeat with this line:
~/Library/Internet Plug-ins
If you don’t like the results of this procedure, restore the items from the backup you made before you started. Relaunch Safari again. -
Fwd'ing to security newsgroup
-------- Original Message --------
Subject: Client accessing MBeanHome for more than one domain receives
SecurityException
Date: 4 Mar 2004 07:27:33 -0800
From: Dinesh Bhat <[email protected]>
Reply-To: Dinesh Bhat <[email protected]>
Organization: BEA NEWS SITE
Newsgroups: weblogic.developer.interest.management
Hi,
When a client accesses MBeans of more than one domains (Weblogic 8.1)
that have
different passwords, it receives a SecurityException. This occurs when
the MBeanHome
for each domain is looked up at initialization and reused for each
request ( to
access MBeans ). The security exception does not occur if the MBeanHome
for each
domain is looked up for each request. On initial review, this behavoir
seems inconsistent.
Looking up the MBeanHome for each request may introduce a significant
overhead.
I am not sure if concurrent lookups would also cause the same problem.
I have read on another post that we can work around this problem by
establishing
a trust relationship between the servers, but this may not be feasible
when one
is monitoring a lot of servers and the overhead of configuration may be
an issue.
I have attached code that can reproduce the problem.
Please advise on the correct approach.
Thanks
Dinesh Bhat
Panacya Inc.
import java.util.ArrayList;
import java.util.Set;
import java.util.HashMap;
import java.util.Iterator;
import java.util.Hashtable;
import javax.management.MBeanServer;
import javax.naming.Context;
import weblogic.jndi.Environment;
import weblogic.management.MBeanHome;
* This class reproduces the Security Exception that is caused when a client tries to access
* MBeans of more than one domain with different weblogic passwords. Here is the stacktrace of the
* exception
* java.lang.SecurityException: [Security:090398]Invalid Subject: principals=[weblogic, Administrators]
at weblogic.rjvm.BasicOutboundRequest.sendReceive(BasicOutboundRequest.java:108)
at weblogic.rmi.internal.BasicRemoteRef.invoke(BasicRemoteRef.java:138)
at weblogic.management.internal.AdminMBeanHomeImpl_811_WLStub.getDomainName(Unknown Source)
at WLSecurityTest.getWeblogicInfo(WLSecurityTest.java:140)
at WLSecurityTest.runTest(WLSecurityTest.java:75)
at WLSecurityTest.<init>(WLSecurityTest.java:66)
at WLSecurityTest.main(WLSecurityTest.java:51)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at com.intellij.rt.execution.application.AppMain.main(Unknown Source)
Caused by: java.lang.SecurityException: [Security:090398]Invalid Subject: principals=[weblogic, Administrators]
at weblogic.security.service.SecurityServiceManager.seal(SecurityServiceManager.java:682)
at weblogic.rjvm.MsgAbbrevInputStream.getSubject(MsgAbbrevInputStream.java:181)
at weblogic.rmi.internal.BasicServerRef.acceptRequest(BasicServerRef.java:814)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:299)
at weblogic.rjvm.RJVMImpl.dispatchRequest(RJVMImpl.java:920)
at weblogic.rjvm.RJVMImpl.dispatch(RJVMImpl.java:841)
at weblogic.rjvm.ConnectionManagerServer.handleRJVM(ConnectionManagerServer.java:222)
at weblogic.rjvm.ConnectionManager.dispatch(ConnectionManager.java:794)
at weblogic.rjvm.t3.T3JVMConnection.dispatch(T3JVMConnection.java:570)
at weblogic.socket.NTSocketMuxer.processSockets(NTSocketMuxer.java:105)
at weblogic.socket.SocketReaderRequest.execute(SocketReaderRequest.java:32)
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:197)
at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:170)
* Note: the exception is caused only when the MBeanHome for each domain is cached and used for subsequent
* transactions. The exception does not occur if the MBeanHome for each domain is looked up for each transaction. This
* would significant overhead in practice. Also the transactions across the various domains occurs serially, hence
* the effect of concurrent lookups has to be tested.
* Usage:
* This class has been tested with weblogic 8.1
* The class needs weblogic.jar in its classpath
* One can specify the weblogic details as System properties. The properties need to be specified in
* the following format:
* wls.host.n, wls.userId.n, wls.password.n where n is the weblogix instance number. Also specify
* the boolean system property reconnect.each.iteration to toggle between reconnecting or not reconnecting
* for each iteration. When not reconnecting for each iteration, the MBeanHome is reused and the Security Exception
* occurs.
* Following is the example of system properties
* -Dwls.host.0=localhost:7001 -Dwls.userId.0=weblogic -Dwls.password.0=weblogic
* -Dwls.host.1=localhost:7011 -Dwls.userId.1=weblogic -Dwls.password.1=weblogic1
* -Dwls.host.2=localhost:7021 -Dwls.userId.2=weblogic -Dwls.password.2=weblogic2
* -Dreconnect.each.iteration=false
public class WLSecurityTest
ArrayList wlsDetailsList = new ArrayList();
HashMap connectionMap = new HashMap();
public static void main(String[] args)
try
WLSecurityTest wlSecurityTest = new WLSecurityTest();
catch (Exception e)
e.printStackTrace();
* Constructor
* @throws Exception
public WLSecurityTest() throws Exception
int noOfTries = 10;
getWLSDetails();
for( int i=0; i <= noOfTries; i++)
runTest();
* Runs the test
private void runTest()
for (int i = 0; i < wlsDetailsList.size(); i++)
WLSDetails wlsDetails = (WLSDetails) wlsDetailsList.get(i);
getWeblogicInfo(wlsDetails);
* Get Weblogic details from System properties
* @throws Exception
private void getWLSDetails() throws Exception
wlsDetailsList = new ArrayList();
String hostKeyTmpl = "wls.host";
String userIdKeyTmpl = "wls.userId";
String passwordKeyTmpl = "wls.password";
boolean done = false;
for (int i = 0; !done; i++)
WLSDetails wlsDetails = new WLSDetails();
String hostKey = hostKeyTmpl + "." + Integer.toString(i);
String userIdKey = userIdKeyTmpl + "." + Integer.toString(i);
String passwordKey = passwordKeyTmpl + "." + Integer.toString(i);
wlsDetails.hostName = System.getProperty(hostKey);
done = (wlsDetails.hostName == null) || (wlsDetails.hostName.length() == 0);
if (!done)
wlsDetails.userId = System.getProperty(userIdKey);
wlsDetails.password = System.getProperty(passwordKey);
connect(wlsDetails);
wlsDetailsList.add(wlsDetails);
* Lookup the MBeanHome for the specified weblogic server
* @param wlsDetails
* @throws Exception
public synchronized void connect(WLSecurityTest.WLSDetails wlsDetails) throws Exception
Context ctx = null;
MBeanHome mbHomeLocal = null;
try
Environment env = new Environment();
env.setProviderUrl("t3://" + wlsDetails.hostName);
env.setSecurityPrincipal(wlsDetails.userId);
env.setSecurityCredentials(wlsDetails.password);
Hashtable hashtable = env.getProperties();
System.out.println(hashtable.toString());
ctx = env.getInitialContext();
wlsDetails._mBeanHome = (MBeanHome) ctx.lookup(MBeanHome.ADMIN_JNDI_NAME);
catch (Exception e)
e.printStackTrace();
* Gets weblogic information using MBeans
* @param wlsDetails
public synchronized void getWeblogicInfo(WLSDetails wlsDetails)
try
boolean reconnectEachIteration =
Boolean.getBoolean("reconnect.each.iteration");
if( (reconnectEachIteration) || ((wlsDetails._mBeanHome == null) && (!reconnectEachIteration) ))
connect(wlsDetails);
MBeanHome mbHomeLocal = wlsDetails._mBeanHome;
String domainName = mbHomeLocal.getDomainName();
Set allMBeans = mbHomeLocal.getAllMBeans();
System.out.println("Size: " + allMBeans.size());
Set clusterMBeans = mbHomeLocal.getMBeansByType("Cluster", domainName);
System.out.println(clusterMBeans);
MBeanServer mBeanServer = mbHomeLocal.getMBeanServer();
catch (Exception ex)
ex.printStackTrace();
* Class that holds weblogic server details
class WLSDetails
String hostName = "";
String userId = "";
String password = "";
MBeanHome _mBeanHome = null;If Server version is 61.
Make user "system" password of all weblogic servers same.
If Server version above 61(70,81)
In the Security Advanced Settings un check generated credential and specify a common credentail for all the weblogic servers(domains). -
How do I find the MAC address of a CLIENT ACCESS POINT created from the FILE SERVICES ROLE
I have several Client Access Points created within the clustered File Services Role. The only way I seem to be able to determine the MAC address of each of these, is by visiting the DHCP server.
Does anyone know if there is a way of reporting on this from the server (active node) itself? I have tried ipconfig all, checked the properties of the CAP in the FCS console etc.
Many thanks.
Kathleen Hayhurst Senior IT Support AnalystHi,
As far as I know there have no original option for query all the CAP MAC address, may you can create a PowerShell command then filter the configuration result, you can ask
in PowerShell forum for the further help.
More information:
PowerShell forum:
http://social.technet.microsoft.com/Forums/en-US/bf0e249b-a9f3-4bef-a536-c210b3f09340/powershell-script-to-alert-on-failed-system-state-backups?forum=winserverpowershell
The related KB:
Failover Clusters Cmdlets in Windows PowerShell
http://technet.microsoft.com/en-us/library/hh847239.aspx
The related article:
PowerShell for Failover Clustering: Frequently Asked Questions & Enabling CSV
http://blogs.msdn.com/b/clustering/archive/2009/05/23/9636665.aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
Hi everyone,
it's probably just me but I have tried real hard to get a simple AnyConnect setup working in a lab environment on my ASA 5505 at home, without luck. When I connect with the AnyConnect client I get the error message "User not authorized for AnyConnect Client access, contact your administrator". I have searched for this error and tried some of the few solutions out there, but to no avail. I also updated the ASA from 8.4.4(1) to 9.1(1) and ASDM from 6.4(9) to 7.1(1) but still the same problem. The setup of the ASA is straight forward, directly connected to the Internet with a 10.0.1.0 / 24 subnet on the inside and an address pool of 10.0.2.0 / 24 to assign to the VPN clients. Please note that due to ISP restrictions, I'm using port 44455 instead of 443. I had AnyConnect working with the SSL portal, but IKEv2 IPsec is giving me a headache. I have stripped down certificate authentication which I had running before just to eliminate this as a potential cause of the issue. When running debugging, I do not get any error messages - the handshake completes successfully and the local authentication works fine as well.
Please find the current config and debugging output below. I appreciate any pointers as to what might be wrong here.
: Saved
ASA Version 9.1(1)
hostname ASA
domain-name ingo.local
enable password ... encrypted
xlate per-session deny tcp any4 any4
xlate per-session deny tcp any4 any6
xlate per-session deny tcp any6 any4
xlate per-session deny tcp any6 any6
xlate per-session deny udp any4 any4 eq domain
xlate per-session deny udp any4 any6 eq domain
xlate per-session deny udp any6 any4 eq domain
xlate per-session deny udp any6 any6 eq domain
passwd ... encrypted
names
name 10.0.1.0 LAN-10-0-1-x
dns-guard
ip local pool VPNPool 10.0.2.1-10.0.2.10 mask 255.255.255.0
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
interface Vlan1
nameif Internal
security-level 100
ip address 10.0.1.254 255.255.255.0
interface Vlan2
nameif External
security-level 0
ip address dhcp setroute
regex BlockFacebook "facebook.com"
banner login This is a monitored system. Unauthorized access is prohibited.
boot system disk0:/asa911-k8.bin
ftp mode passive
clock timezone PST -8
clock summer-time PDT recurring
dns domain-lookup Internal
dns domain-lookup External
dns server-group DefaultDNS
name-server 10.0.1.11
name-server 75.153.176.1
name-server 75.153.176.9
domain-name ingo.local
object network obj_any
subnet 0.0.0.0 0.0.0.0
object network LAN-10-0-1-x
subnet 10.0.1.0 255.255.255.0
object network Company-IP1
host xxx.xxx.xxx.xxx
object network Company-IP2
host xxx.xxx.xxx.xxx
object network HYPER-V-DUAL-IP
range 10.0.1.1 10.0.1.2
object network LAN-10-0-1-X
access-list 100 extended permit tcp any4 object HYPER-V-DUAL-IP eq 3389 inactive
access-list 100 extended permit tcp object Company-IP1 object HYPER-V-DUAL-IP eq 3389
access-list 100 extended permit tcp object Company-IP2 object HYPER-V-DUAL-IP eq 3389
tcp-map Normalizer
check-retransmission
checksum-verification
no pager
logging enable
logging timestamp
logging list Threats message 106023
logging list Threats message 106100
logging list Threats message 106015
logging list Threats message 106021
logging list Threats message 401004
logging buffered errors
logging trap Threats
logging asdm debugging
logging device-id hostname
logging host Internal 10.0.1.11 format emblem
logging ftp-bufferwrap
logging ftp-server 10.0.1.11 / asa *****
logging permit-hostdown
mtu Internal 1500
mtu External 1500
ip verify reverse-path interface Internal
ip verify reverse-path interface External
icmp unreachable rate-limit 1 burst-size 1
icmp deny any echo External
asdm image disk0:/asdm-711.bin
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
object network obj_any
nat (Internal,External) dynamic interface
object network LAN-10-0-1-x
nat (Internal,External) dynamic interface
object network HYPER-V-DUAL-IP
nat (Internal,External) static interface service tcp 3389 3389
access-group 100 in interface External
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
aaa-server radius protocol radius
aaa-server radius (Internal) host 10.0.1.11
key *****
radius-common-pw *****
user-identity default-domain LOCAL
aaa authentication ssh console radius LOCAL
http server enable
http LAN-10-0-1-x 255.255.255.0 Internal
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec ikev2 ipsec-proposal DES
protocol esp encryption des
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal 3DES
protocol esp encryption 3des
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES
protocol esp encryption aes
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES192
protocol esp encryption aes-192
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES256
protocol esp encryption aes-256
protocol esp integrity sha-1 md5
crypto ipsec security-association pmtu-aging infinite
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev2 ipsec-proposal AES256 AES192 AES 3DES DES
crypto map External_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map External_map interface External
crypto ca trustpoint srv01_trustpoint
enrollment terminal
crl configure
crypto ca trustpoint asa_cert_trustpoint
keypair asa_cert_trustpoint
crl configure
crypto ca trustpoint LOCAL-CA-SERVER
keypair LOCAL-CA-SERVER
crl configure
crypto ca trustpool policy
crypto ca server
cdp-url http://.../+CSCOCA+/asa_ca.crl:44435
issuer-name CN=...
database path disk0:/LOCAL_CA_SERVER/
smtp from-address ...
publish-crl External 44436
crypto ca certificate chain srv01_trustpoint
certificate <output omitted>
quit
crypto ca certificate chain asa_cert_trustpoint
certificate <output omitted>
quit
crypto ca certificate chain LOCAL-CA-SERVER
certificate <output omitted>
quit
crypto ikev2 policy 1
encryption aes-256
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 10
encryption aes-192
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 20
encryption aes
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 30
encryption 3des
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 40
encryption des
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 enable External client-services port 44455
crypto ikev2 remote-access trustpoint asa_cert_trustpoint
telnet timeout 5
ssh LAN-10-0-1-x 255.255.255.0 Internal
ssh xxx.xxx.xxx.xxx 255.255.255.255 External
ssh xxx.xxx.xxx.xxx 255.255.255.255 External
ssh timeout 5
ssh version 2
console timeout 0
no vpn-addr-assign aaa
no ipv6-vpn-addr-assign aaa
no ipv6-vpn-addr-assign local
dhcpd dns 75.153.176.9 75.153.176.1
dhcpd domain ingo.local
dhcpd option 3 ip 10.0.1.254
dhcpd address 10.0.1.50-10.0.1.81 Internal
dhcpd enable Internal
threat-detection basic-threat
threat-detection scanning-threat shun except ip-address LAN-10-0-1-x 255.255.255.0
threat-detection statistics access-list
threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
dynamic-filter use-database
dynamic-filter enable interface Internal
dynamic-filter enable interface External
dynamic-filter drop blacklist interface Internal
dynamic-filter drop blacklist interface External
ntp server 128.233.3.101 source External
ntp server 128.233.3.100 source External prefer
ntp server 204.152.184.72 source External
ntp server 192.6.38.127 source External
ssl encryption aes256-sha1 aes128-sha1 3des-sha1
ssl trust-point asa_cert_trustpoint External
webvpn
port 44433
enable External
dtls port 44433
anyconnect image disk0:/anyconnect-win-3.1.02026-k9.pkg 1
anyconnect profiles profile1 disk0:/profile1.xml
anyconnect enable
smart-tunnel list SmartTunnelList1 mstsc mstsc.exe platform windows
smart-tunnel list SmartTunnelList1 putty putty.exe platform windows
group-policy DfltGrpPolicy attributes
vpn-tunnel-protocol ikev1 ikev2 l2tp-ipsec ssl-client ssl-clientless
webvpn
anyconnect profiles value profile1 type user
username write.ingo password ... encrypted
username ingo password ... encrypted privilege 15
username tom.tucker password ... encrypted
class-map TCP
match port tcp range 1 65535
class-map type regex match-any BlockFacebook
match regex BlockFacebook
class-map type inspect http match-all BlockDomains
match request header host regex class BlockFacebook
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 1500
id-randomization
policy-map TCP
class TCP
set connection conn-max 1000 embryonic-conn-max 1000 per-client-max 250 per-client-embryonic-max 250
set connection timeout dcd
set connection advanced-options Normalizer
set connection decrement-ttl
policy-map type inspect http HTTP
parameters
protocol-violation action drop-connection log
class BlockDomains
policy-map global_policy
class inspection_default
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect dns preset_dns_map dynamic-filter-snoop
inspect http HTTP
service-policy global_policy global
service-policy TCP interface External
smtp-server 199.185.220.249
privilege cmd level 3 mode exec command perfmon
privilege cmd level 3 mode exec command ping
privilege cmd level 3 mode exec command who
privilege cmd level 3 mode exec command logging
privilege cmd level 3 mode exec command failover
privilege cmd level 3 mode exec command vpn-sessiondb
privilege cmd level 3 mode exec command packet-tracer
privilege show level 5 mode exec command import
privilege show level 5 mode exec command running-config
privilege show level 3 mode exec command reload
privilege show level 3 mode exec command mode
privilege show level 3 mode exec command firewall
privilege show level 3 mode exec command asp
privilege show level 3 mode exec command cpu
privilege show level 3 mode exec command interface
privilege show level 3 mode exec command clock
privilege show level 3 mode exec command dns-hosts
privilege show level 3 mode exec command access-list
privilege show level 3 mode exec command logging
privilege show level 3 mode exec command vlan
privilege show level 3 mode exec command ip
privilege show level 3 mode exec command failover
privilege show level 3 mode exec command asdm
privilege show level 3 mode exec command arp
privilege show level 3 mode exec command ipv6
privilege show level 3 mode exec command route
privilege show level 3 mode exec command ospf
privilege show level 3 mode exec command aaa-server
privilege show level 3 mode exec command aaa
privilege show level 3 mode exec command eigrp
privilege show level 3 mode exec command crypto
privilege show level 3 mode exec command ssh
privilege show level 3 mode exec command vpn-sessiondb
privilege show level 3 mode exec command vpnclient
privilege show level 3 mode exec command vpn
privilege show level 3 mode exec command dhcpd
privilege show level 3 mode exec command blocks
privilege show level 3 mode exec command wccp
privilege show level 3 mode exec command dynamic-filter
privilege show level 3 mode exec command webvpn
privilege show level 3 mode exec command service-policy
privilege show level 3 mode exec command module
privilege show level 3 mode exec command uauth
privilege show level 3 mode exec command compression
privilege show level 3 mode configure command interface
privilege show level 3 mode configure command clock
privilege show level 3 mode configure command access-list
privilege show level 3 mode configure command logging
privilege show level 3 mode configure command ip
privilege show level 3 mode configure command failover
privilege show level 5 mode configure command asdm
privilege show level 3 mode configure command arp
privilege show level 3 mode configure command route
privilege show level 3 mode configure command aaa-server
privilege show level 3 mode configure command aaa
privilege show level 3 mode configure command crypto
privilege show level 3 mode configure command ssh
privilege show level 3 mode configure command dhcpd
privilege show level 5 mode configure command privilege
privilege clear level 3 mode exec command dns-hosts
privilege clear level 3 mode exec command logging
privilege clear level 3 mode exec command arp
privilege clear level 3 mode exec command aaa-server
privilege clear level 3 mode exec command crypto
privilege clear level 3 mode exec command dynamic-filter
privilege cmd level 3 mode configure command failover
privilege clear level 3 mode configure command logging
privilege clear level 3 mode configure command arp
privilege clear level 3 mode configure command crypto
privilege clear level 3 mode configure command aaa-server
prompt hostname context
no call-home reporting anonymous
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:41a021a28f73c647a2f550ba932bed1a
: end
Many thanks,
IngoHi Jose,
here is what I got now:
ASA(config)# sh run | begin tunnel-group
tunnel-group DefaultWEBVPNGroup general-attributes
address-pool VPNPool
authorization-required
and DAP debugging still the same:
ASA(config)# DAP_TRACE: DAP_open: CDC45080
DAP_TRACE: Username: tom.tucker, aaa.cisco.grouppolicy = DfltGrpPolicy
DAP_TRACE: Username: tom.tucker, aaa.cisco.username = tom.tucker
DAP_TRACE: Username: tom.tucker, aaa.cisco.username1 = tom.tucker
DAP_TRACE: Username: tom.tucker, aaa.cisco.username2 =
DAP_TRACE: Username: tom.tucker, aaa.cisco.tunnelgroup = DefaultWEBVPNGroup
DAP_TRACE: Username: tom.tucker, DAP_add_SCEP: scep required = [FALSE]
DAP_TRACE: Username: tom.tucker, DAP_add_AC:
endpoint.anyconnect.clientversion="3.1.02026";
endpoint.anyconnect.platform="win";
DAP_TRACE: Username: tom.tucker, dap_aggregate_attr: rec_count = 1
DAP_TRACE: Username: tom.tucker, Selected DAPs: DfltAccessPolicy
DAP_TRACE: Username: tom.tucker, DAP_close: CDC45080
Unfortunately, it still doesn't work. Hmmm.. maybe a wipe of the config and starting from scratch can help?
Thanks,
Ingo -
No client access on DAG switchover - Single site
Let’s summarize my environment:
I have 3 Exchange 2013 SP1 (cu4) server in one site. CAS01, only have cas role and MBX01&MBX02 have only mailbox. Both mailbox are in a DAG (DAG01).
The server mounting my database is MBX02. Whenever a switchover to MBX01 occur (or when I force it whith Move-ActiveMailboxDatabase –server MBX02 -ActivateOnServer MBX01), all my client get disconnected so no more outlook, active sync
and even owa. As soon as I roll them back on MBX02, everything returns to normal. However, every single email delivered while the DAG was mounted on MBX01 are getting delivered to the mailbox server so dag is working properly for the mail flow, minus the client
access HA.
Now I know that on Exchange 2010 and the issue could have been with the value of –rpcclientaccessserver on my database, but this value is not used anymore on 2013.
Any ideas?
ThanksHi S.Nithyanandham
1. No my servers are working pretty fine is I create a non dag DB on MBX01, Client access and mail flow is fine. Turning off both Windows firewall didn’t
change anything
2.
Server Check Result Error
MBX01 ClusterService Passed
MBX01 ReplayService Passed
MBX01 ActiveManager Passed
MBX01 TasksRpcListener Passed
MBX01 TcpListener Passed
MBX01 ServerLocatorService Passed
MBX01 DagMembersUp Passed
MBX01 ClusterNetwork Passed
MBX01 QuorumGroup Passed
MBX01 FileShareQuorum Passed
MBX01 DatabaseRedundancy Passed
MBX01 DatabaseAvailability Passed
Server Check Result Error
MBX02 ClusterService Passed
MBX02 ReplayService Passed
MBX02 ActiveManager Passed
MBX02 TasksRpcListener Passed
MBX02 TcpListener Passed
MBX02 ServerLocatorService Passed
MBX02 DagMembersUp Passed
MBX02 ClusterNetwork Passed
MBX02 QuorumGroup Passed
MBX02 FileShareQuorum Passed
MBX02 DatabaseRedundancy Passed
MBX02 DatabaseAvailability Passed
MBX02 DBCopySuspended Passed
MBX02 DBCopyFailed Passed
MBX02 DBInitializing Passed
MBX02 DBDisconnected Passed
MBX02 DBLogCopyKeepingUp Passed
MBX02 DBLogReplayKeepingUp Passed
3. I’ve double check that and recreated the dag binding multiple time with no luck.
4. yes they are
[PS] C:\Windows\system32>get-mailboxdatabasecopystatus | ft -au
Name Status CopyQueueLength ReplayQueueLength LastInspectedLogTime ContentIndexState
DB1\MBX01 Mounted 0 0
Healthy
DB2\MBX01 Mounted 0 0
Healthy
DB3\MBX01 Mounted 0 0
Healthy
DB4\MBX01 Mounted 0 0
Healthy
[PS] C:\Windows\system32>get-mailboxdatabasecopystatus -server mbx02 | ft -au
Name Status CopyQueueLength ReplayQueueLength LastInspectedLogTime ContentIndexState
DB1\MBX02 Healthy 0 0 2015-01-12 19:57:58 Healthy
DB2\MBX02 Healthy 0 0 2015-01-12 19:58:10 Healthy
DB3\MBX02 Healthy 0 0 2015-01-12 19:58:07 Healthy
DB4\MBX02 Healthy 0 0 2015-01-12 20:00:23 Healthy
5. None except those related to the failover if I bring MBX02 down
6. File share is fine and acessible.
Then please explain me what you are trying to say on the below mentioned line?
When I have a failover and database are mounted and healthy I can’t connect trougth any devices but email sent to my organization are devilered in databases correctly. I can see them with Get-MessageTrackingLog. In addition, my Wtachguard
in front of my cas is not reporting any bounce or error, everything is delivred and queue is empty inside it.
A big Thank you for your help
Alex
Alexandre Contant
Maybe you are looking for
-
Achievements Sync Problem to Game Center
I have an iPhone 4s and I just made a Game Center account.I've been playing many games with compatibility to Game Center achievements for a long time now, such as tiny wings, subway surf and many more. I felt like playing tiny wings or subway surf. A
-
Permissions problem with Disk Burning / Mounting
I have an account on OS 10.4.x under which a blank CD RW does not mount properly. Instead, Disk Utility is launched and the blank disk does not mount on the Desktop. The account has admin privileges and I've performed a repair permissions multiple ti
-
I just got my MacBook Pro shipped back to me from apple repair, fixing my keyboard light. When turning on my keyboard light, I noticed that it flickers on and off for a couple of times, and then starts working. This seems to be affecting the auto bri
-
Connect the schema via oracle 10g stored procedures
Hi, How to connect the another schema through the oracle stored procedures?.I have the 3 in parameters like username,password,hoststring and i have admin password also.For example i have logged to the admin user and i need to execute the procedures w
-
i update ios 7 but it got sim loked and even i enter pin it is showing unlocking please wait but it is not getting opened