CSM: server-initiated connections
Hello
I hope you can help me to figure out this question, I have a CSM module with more than 10 serverfarms, all of them working fine, and all of them are on different vlans. We are using route mode for all of them.
For example:
ServerFarm01-> Vlan10
Client_Side01-> Vlan11
ServerFarm02-> Vlan20
Client_Side02-> Vlan21
ServerFarm03-> Vlan30
Client_Side03-> Vlan31
and so on...
I noticed something, When I generate outbound traffic from a real server, it does not matter it belong to SeverFarm01, 02 or 03; the packet leaves the CSM using alway the vlan31.
Can you please help to determine what’s going on?
Actually, we want realservers from ServerFarm01 to sent traffic to internet through the CSM, and those traffic should be seen on vlan11.
Thankds and Regards
Edgar
Hi Edgar,
Few things to check.
Check if the servers has two interface. It may be sending traffic through other interface.
Please go through below configuration guidelines that will help you to associate Particular serverfarm with their respective VLAN.
Configuring Server-Initiated Connections
The NAT for the server allows you to support connections initiated by real servers and to provide a default configuration used for servers initiating connections that do not have matching entries in the server NAT configuration. By default, the CSM allows server-originated connections without NAT.
To configure NAT for the server, perform this task:
Command
Purpose
Step 1
Router(config)# static [drop | nat
[ip-address | virtual]]
Configures the server-originated connections. Options include dropping the connections, configuring them with NAT with a given IP address, or with the virtual IP address that they are associated with1 , 2 .
Step 2
Router(config-slb-static)# real ip-address
[subnet-mask]
Configures the static NAT submode where the servers will have this NAT option. You cannot use the same real server with multiple NAT configuration options.
1 Enter the exit command to leave a mode or submode. Enter the end command to return to the menu's top level.
2 The no form of this command restores the defaults.
For Example :
static nat 199.200.9.140 ( IP can be virtual IP as well)
real 192.168.24.0 255.255.252.0
real 192.168.20.0 255.255.252.0
Similar Messages
-
CSM in Bridge mode and Server initiated connections
I know one can use Source NAT for server initiated connections back to VIP using CSM in routed mode. How do I achieve the same for bridge mode?
Thanks in advance,
ShahidShahid,
that's a well-known problem for all loadbalancer in the world.
With a sniffer trace, or just thinking about TCP/IP rules you can figure out why client nat is required.
If you go from a server to a vip, the CSM will forward the traffic to a random server.
The CSM forwards the traffic with the source ip unchanged by default.
The server receiving the traffic will forward the response back to the source that initiated the request.
If the source is also a server in the same subnet, the response does not need to be sent through a gateway. Since both source and destination are in the same subnet, the traffic is sent based on mac address and it bypasses the CSM which can't perform the nating.
The source receiving the response from the server directly will just ignore it.
Using client nat forces the response to go back to the CSM which can perform the nating before sending it to the client.
This has been discussed tons of times in this forum.
It's a classic question :-)
Gilles. -
CSM server originated connections
Hi,
I have a CSM running in router mode with one client vlan, one server vlan and two server vlans for SCAs. Load Balancing is ok, connections directly to the servers and the SCAs through the CSM are ok.
Connections from the server vlan directed to the outside via next hop into the client vlan
(the opposite direction of the usual access) don't work.
Scenario: Server - CSM - MSFC
The client VLAN has the MSFC vlan interface configured as its gateway, the cisco docu says,
that server originated connections should work by default without any NAT, but they don't here.
I also tried "static nat <ip>" and "static nat virtual", no success. The outside vlan interface of the CSM is the last point I can ping, the MSFC doesn't respond, though it is the gateway
address.
Funny: I can ping the SCAs in their vlans and the SCAs can ping the gateway on the MSFC,
it's only from the servers into the client vlan that has trouble...
Does anyone have an idea what's wrong?
Thanks for every hint
UliIt works for me.
Do a 'sho mod csm X conn' and look for the entry created for the ping from the server to the msfc.
Make sure the response from the msfc matches the entry - same vlan !!!
Check the route from msfc to server and make sure it goes to the same vlan as traffic from server to msfc.
Also, if you did some modification in the vlans or static routes, clear the csm connections since icmp creates long lived entry.
Regards,
Gilles. -
SMTP error from remote mail server after initial connection:
Hello folks. I having some serious issues sending email to clients with .mac accounts. I keep on getting the following error. Can someone help? I have replaced email address names with "Blank@...) for obvious reasons.
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
[email protected]
SMTP error from remote mail server after initial connection:
host smtp-mx1.mac.com [17.148.20.64]: 452 try later:
retry timeout exceeded
------ This is a copy of the message, including all the headers. ------
Return-path: <[email protected]>
Received: from ip72-207-229-240.br.br.cox.net ([72.207.229.240] helo=[192.168.0.102])
by srv3.purenrg.com with esmtp (Exim 4.68)
(envelope-from <[email protected]>)
id 1JFeOb-0001FZ-5F
for [email protected]; Thu, 17 Jan 2008 18:43:41 -0500
Message-Id: <[email protected]>
From: "[email protected]" <[email protected]>
To: Cindy Barnes <[email protected]>
Content-Type: multipart/alternative; boundary=Apple-Mail-3--1032078955
Mime-Version: 1.0 (Apple Message framework v915)
Subject: invoice 520 is overdue
Date: Thu, 17 Jan 2008 17:43:40 -0600
X-Mailer: Apple Mail (2.915)
X-PopBeforeSMTPSenders: [email protected]{
--Apple-Mail-3--1032078955
Content-Type: text/plain;
charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bitI'm sure someone will give more detail, but it looks like the server blocked your address because it thinks it's a spam source. If you're not spamming, then it might be someone on the same network spamming, or malware on your computer doing it. Or it could just be a mistake. try calling whoever runs your mail server and see if they can give you more information.
-
Server dropped connection without sending the initial SMTP greeting
Whenever anyone tries to send email to addresses from the domain 'cwbank.com' they receive the error emessage:
connect to smtp.ab.tac.net[216.123.224.167]: server dropped connection without sending the initial SMTP greeting
If I use other mail servers, the message goes through without a hitch.
Prior to this week we could send email to this domain.
Port 25 is open on the receiving server (216.123.224.167).
A few weeks ago, we were 'blacklisted' because another server on the same subnet was spamming. And a few ISPs (Godaddy, 1and1, etc.) blacklisted the whole subnet instead of the offending IP. We don't seem to be having any more problems with getting RBL rejections anymore. Typically those error messages were returned as '550 RBL rejection' errors. I'm wondering if this might be related.
Any other thoughts on the subject?Well, the other thing that could be happening is that the mail servers at these 4 IPs might have their own hardwired IP block on some range of IPs that you are in. We know that is not being done at their firewall (you can connect and get the greeting), but might be done with, for example, a postfix config that prohibits connections from certain IP ranges.
There's another possibility, namely, that they are picky about DNS config. Your IP of 68.150.192.151 seems to have a good reverse DNS PTR record that matches the SMTP HELO greeting when I telnet to your server:
mail:~ admin$ telnet 68.150.192.151 25
Trying 68.150.192.151...
Connected to ns.boxclever.ca.
Escape character is '^]'.
220 mail.boxclever.ca ESMTP Postfix
quit
221 Bye
Connection closed by foreign host.
and, reverse DNS:
; <<>> DiG 9.2.2 <<>> -x 68.150.192.151 any
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39717
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0
;; QUESTION SECTION:
;151.192.150.68.in-addr.arpa. IN ANY
;; ANSWER SECTION:
151.192.150.68.in-addr.arpa. 42933 IN PTR ns.boxclever.ca.
;; AUTHORITY SECTION:
192.150.68.in-addr.arpa. 172533 IN NS ns2.ar.ed.shawcable.net.
192.150.68.in-addr.arpa. 172533 IN NS ns1.ar.ed.shawcable.net.
;; Query time: 34 msec
;; SERVER: 192.168.0.14#53(192.168.0.14)
;; WHEN: Thu Dec 7 19:16:18 2006
;; MSG SIZE rcvd: 129</div>
But note that there is no A record for your server of that name:
; <<>> DiG 9.2.2 <<>> ns.boxcleaver.ca. any
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13722
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;ns.boxcleaver.ca. IN ANY
;; AUTHORITY SECTION:
ca. 3584 IN SOA jbq01.tor.cira.ca. admin-dns.cira.ca. 2006120718 1800 900 604800 3600
;; Query time: 2 msec
;; SERVER: 192.168.0.14#53(192.168.0.14)
;; WHEN: Thu Dec 7 19:13:06 2006
;; MSG SIZE rcvd: 95</div>
Maybe they won't talk to any server whose name given in the Reverse DNS PTR record doesn't have an A Record that matches. You might want to check that.
Russ
Xserve G5 2.0 GHz 2 GB RAM Mac OS X (10.4.8) Apple Hardware RAID, ATTO UL4D, Exabyte VXA-2 1x10 1u -
Non-Domain joined clients connect to server initially but cannot connect via Launchpad
Running SBS 2011 Essentials in a small office. Running XP/Vista/7 clients. All working fine until we swapped routers. Old router died, new router was installed.
Now all domain-joined PC's connect as normal, but all NON-Domain-Joined PC's cannot access the server via the launchpad. I get the "The server appears to be offline. Do you want to sign in to offline mode?" box.
Tried removing PC from the SBS Dashboard, uninstalling the connector from the client, restarting client, and reinstalling the connector. I can install the connector (using
http://<server ip>/connect , but not http://<servername>/connect
). Connector installs but it still tells me the server is offline when trying to use dashboard or launchpad on the client.
Note: I can add a network location or Map a network drive to ther server after inputting my network password from Windows.
Any Services to check? Firewalls exceptions to ensure? Advice?
EDIT: Dashboard on Server shows Client, sometimes as online, sometimes as offline.Sounds like name resolution issue to me.
Are all your clients set to use the IP of the Essentials Server for their primary DNS?
Robert Pearman SBS MVP
itauthority.co.uk |
Title(Required)
Facebook |
Twitter |
Linked in |
Google+ -
i need a help. I am new in company and have to solve this problem.
My colleague did a migration from Small Business server 2003 to Foundation 2008, about 1 year ago. After few days, he got this error message in title. Server turn off about once a month. He worked following:
joined new server Foundation to the Domain
dcpromo on new Server
migration (he said that he worked step-by-step with tutorial)
demote on old Server SBS 2003
disconnect old server from domain. This old is not in function now.
New server have just 3 computer accounts. The Forest functional level is Server 2003.
I've did dcdiag:
C:\Users\Administrator>slmgr.vbs /dli
C:\Users\Administrator>dcdiag
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = server2008
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SERVER2008
Starting test: Connectivity
......................... SERVER2008 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SERVER2008
Starting test: Advertising
......................... SERVER2008 passed test Advertising
Starting test: FrsEvent
......................... SERVER2008 passed test FrsEvent
Starting test: DFSREvent
......................... SERVER2008 passed test DFSREvent
Starting test: SysVolCheck
......................... SERVER2008 passed test SysVolCheck
Starting test: KccEvent
......................... SERVER2008 passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... SERVER2008 passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... SERVER2008 passed test MachineAccount
Starting test: NCSecDesc
......................... SERVER2008 passed test NCSecDesc
Starting test: NetLogons
......................... SERVER2008 passed test NetLogons
Starting test: ObjectsReplicated
......................... SERVER2008 passed test ObjectsReplicated
Starting test: Replications
......................... SERVER2008 passed test Replications
Starting test: RidManager
......................... SERVER2008 passed test RidManager
Starting test: Services
......................... SERVER2008 passed test Services
Starting test: SystemLog
A warning event occurred. EventID: 0x8000001D
Time Generated: 03/08/2012 09:59:45
Event String:
The Key Distribution Center (KDC) cannot find a suitable certificate
to use for smart card logons, or the KDC certificate could not be verified. Sma
rt card logon may not function correctly if this problem is not resolved. To cor
rect this problem, either verify the existing KDC certificate using certutil.exe
or enroll for a new KDC certificate.
An error event occurred. EventID: 0xC0001B61
Time Generated: 03/08/2012 10:09:56
Event String:
A timeout was reached (30000 milliseconds) while waiting for the Liv
eUpdate service to connect.
An error event occurred. EventID: 0xC0001B58
Time Generated: 03/08/2012 10:09:56
Event String:
The LiveUpdate service failed to start due to the following error:
......................... SERVER2008 failed test SystemLog
Starting test: VerifyReferences
......................... SERVER2008 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : BREG
Starting test: CheckSDRefDom
......................... BREG passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... BREG passed test CrossRefValidation
Running enterprise tests on : BREG.local
Starting test: LocatorCheck
......................... BREG.local passed test LocatorCheck
Starting test: Intersite
......................... BREG.local passed test Intersite
C:\Users\Administrator>
I did nslookup:
C:\Users\Administrator>nslookup
Default Server: UnKnown
Address: ::1
and this:
C:\Users\Administrator>ntdsutil
ntdsutil: roles
fsmo maintenance: connections
server connections: connect to server server2008
Binding to server2008 ...
Connected to server2008 using credentials of locally logged on user.
server connections: q
fsmo maintenance: select operation target
select operation target: list roles for connected server
Server "server2008" knows about 5 roles
Schema - CN=NTDS Settings,CN=SERVER2008,CN=Servers,CN=Default-First-Site-Name,CN
=Sites,CN=Configuration,DC=BREG,DC=local
Naming Master - CN=NTDS Settings,CN=SERVER2008,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=BREG,DC=local
PDC - CN=NTDS Settings,CN=SERVER2008,CN=Servers,CN=Default-First-Site-Name,CN=Si
tes,CN=Configuration,DC=BREG,DC=local
RID - CN=NTDS Settings,CN=SERVER2008,CN=Servers,CN=Default-First-Site-Name,CN=Si
tes,CN=Configuration,DC=BREG,DC=local
Infrastructure - CN=NTDS Settings,CN=SERVER2008,CN=Servers,CN=Default-First-Site
-Name,CN=Sites,CN=Configuration,DC=BREG,DC=local
select operation target:
Did also slmgr.vbs /dli and got:
name:Windows Server(R) ServerWinFoundation edition
Description: Windows operating System - Windows Server(R),
OEM_COA_NSLP channel
Partial product key:.......
License Status:Licensed
thanks for help, in advanceI forgot to say that it is the only DC in the domain.
and this is DNS test
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
* Verifying that the local machine server2008, is a Directory Server.
Home Server = server2008
* Connecting to directory service on server server2008.
* Identified AD Forest.
Collecting AD specific global data
* Collecting site info.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=BREG,DC=local,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
The previous call succeeded
Iterating through the sites
Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=BREG,DC=local
Getting ISTG and options for the site
* Identifying all servers.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=BREG,DC=local,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
The previous call succeeded....
The previous call succeeded
Iterating through the list of servers
Getting information for the server CN=NTDS Settings,CN=SERVER2008,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=BREG,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
* Identifying all NC cross-refs.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SERVER2008
Starting test: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
* Active Directory RPC Services Check
......................... SERVER2008 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SERVER2008
Test omitted by user request: Advertising
Test omitted by user request: CheckSecurityError
Test omitted by user request: CutoffServers
Test omitted by user request: FrsEvent
Test omitted by user request: DFSREvent
Test omitted by user request: SysVolCheck
Test omitted by user request: KccEvent
Test omitted by user request: KnowsOfRoleHolders
Test omitted by user request: MachineAccount
Test omitted by user request: NCSecDesc
Test omitted by user request: NetLogons
Test omitted by user request: ObjectsReplicated
Test omitted by user request: OutboundSecureChannels
Test omitted by user request: Replications
Test omitted by user request: RidManager
Test omitted by user request: Services
Test omitted by user request: SystemLog
Test omitted by user request: Topology
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: VerifyReferences
Test omitted by user request: VerifyReplicas
Starting test: DNS
DNS Tests are running and not hung. Please wait a few minutes...
See DNS test in enterprise tests section for results
......................... SERVER2008 passed test DNS
Running partition tests on : ForestDnsZones
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running partition tests on : DomainDnsZones
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running partition tests on : Schema
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running partition tests on : Configuration
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running partition tests on : BREG
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running enterprise tests on : BREG.local
Starting test: DNS
Test results for domain controllers:
DC: server2008.BREG.local
Domain: BREG.local
TEST: Authentication (Auth)
Authentication test: Successfully completed
TEST: Basic (Basc)
The OS
Microsoft Windows Server 2008 R2 Foundation (Service Pack level: 1.0)
is supported.
NETLOGON service is running
kdc service is running
DNSCACHE service is running
DNS service is running
DC is a DNS server
Network adapters information:
Adapter
[00000007] Intel(R) 82566DM-2 Gigabit Network Connection:
MAC address is 00:19:99:86:E9:62
IP Address is static
IP address: 192.168.1.250
DNS servers:
192.168.1.250 (server2008.breg.local.) [Valid]
127.0.0.1 (server2008.breg.local.) [Valid]
The A host record(s) for this DC was found
The SOA record for the Active Directory zone was found
The Active Directory zone on this DC/DNS server was found primary
Root zone on this DC/DNS server was not found
TEST: Forwarders/Root hints (Forw)
Recursion is enabled
Forwarders are not configured on this DNS server
Root hint Information:
Name: a.root-servers.net. IP: 198.41.0.4 [Valid]
Name: a.root-servers.net. IP: 2001:503:ba3e::2:30 [Invalid (unreachable)]
Name: b.root-servers.net. IP: 192.228.79.201 [Valid]
Name: c.root-servers.net. IP: 192.33.4.12 [Valid]
Name: d.root-servers.net. IP: 128.8.10.90 [Valid]
Name: d.root-servers.net. IP: 2001:500:2d::d [Invalid (unreachable)]
Name: e.root-servers.net. IP: 192.203.230.10 [Valid]
Name: f.root-servers.net. IP: 192.5.5.241 [Valid]
Name: f.root-servers.net. IP: 2001:500:2f::f [Invalid (unreachable)]
Name: g.root-servers.net. IP: 192.112.36.4 [Valid]
Name: h.root-servers.net. IP: 128.63.2.53 [Valid]
Name: h.root-servers.net. IP: 2001:500:1::803f:235 [Invalid (unreachable)]
Name: i.root-servers.net. IP: 192.36.148.17 [Valid]
Name: i.root-servers.net. IP: 2001:7fe::53 [Invalid (unreachable)]
Name: j.root-servers.net. IP: 192.58.128.30 [Valid]
Name: j.root-servers.net. IP: 2001:503:c27::2:30 [Invalid (unreachable)]
Name: k.root-servers.net. IP: 193.0.14.129 [Valid]
Name: k.root-servers.net. IP: 2001:7fd::1 [Invalid (unreachable)]
Name: l.root-servers.net. IP: 199.7.83.42 [Valid]
Name: l.root-servers.net. IP: 2001:500:3::42 [Invalid (unreachable)]
Name: m.root-servers.net. IP: 2001:dc3::35 [Invalid (unreachable)]
Name: m.root-servers.net. IP: 202.12.27.33 [Valid]
TEST: Delegations (Del)
Delegation information for the zone: BREG.local.
Delegated domain name: _msdcs.BREG.local.
DNS server: server2008.breg.local. IP:192.168.1.250 [Valid]
TEST: Dynamic update (Dyn)
Warning: Failed to add the test record dcdiag-test-record in zone BREG.local
[Error details: 9017 (Type: Win32 - Description: DNS bad key.)]
Test record dcdiag-test-record deleted successfully in zone BREG.local
TEST: Records registration (RReg)
Network Adapter
[00000007] Intel(R) 82566DM-2 Gigabit Network Connection:
Matching CNAME record found at DNS server 192.168.1.250:
cb30439d-35e0-4add-ae6c-e7f281295520._msdcs.BREG.local
Matching A record found at DNS server 192.168.1.250:
server2008.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.221dc40b-9d51-48cf-a3a3-e3daf251197f.domains._msdcs.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_kerberos._tcp.dc._msdcs.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.dc._msdcs.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_kerberos._tcp.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_kerberos._udp.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_kpasswd._tcp.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.Default-First-Site-Name._sites.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_kerberos._tcp.Default-First-Site-Name._sites.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.gc._msdcs.BREG.local
Matching A record found at DNS server 192.168.1.250:
gc._msdcs.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_gc._tcp.Default-First-Site-Name._sites.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.pdc._msdcs.BREG.local
Matching CNAME record found at DNS server 192.168.1.250:
cb30439d-35e0-4add-ae6c-e7f281295520._msdcs.BREG.local
Matching A record found at DNS server 192.168.1.250:
server2008.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.221dc40b-9d51-48cf-a3a3-e3daf251197f.domains._msdcs.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_kerberos._tcp.dc._msdcs.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.dc._msdcs.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_kerberos._tcp.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_kerberos._udp.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_kpasswd._tcp.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.Default-First-Site-Name._sites.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_kerberos._tcp.Default-First-Site-Name._sites.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.gc._msdcs.BREG.local
Matching A record found at DNS server 192.168.1.250:
gc._msdcs.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_gc._tcp.Default-First-Site-Name._sites.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.BREG.local
Matching SRV record found at DNS server 192.168.1.250:
_ldap._tcp.pdc._msdcs.BREG.local
Summary of test results for DNS servers used by the above domain
controllers:
DNS server: 2001:500:1::803f:235 (h.root-servers.net.)
1 test failure on this DNS server
PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:1::803f:235
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
DNS server: 2001:500:2d::d (d.root-servers.net.)
1 test failure on this DNS server
PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:2d::d
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
DNS server: 2001:500:2f::f (f.root-servers.net.)
1 test failure on this DNS server
PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:2f::f
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
DNS server: 2001:500:3::42 (l.root-servers.net.)
1 test failure on this DNS server
PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:3::42
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
DNS server: 2001:503:ba3e::2:30 (a.root-servers.net.)
1 test failure on this DNS server
PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:503:ba3e::2:30
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
DNS server: 2001:503:c27::2:30 (j.root-servers.net.)
1 test failure on this DNS server
PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:503:c27::2:30
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
DNS server: 2001:7fd::1 (k.root-servers.net.)
1 test failure on this DNS server
PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:7fd::1
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
DNS server: 2001:7fe::53 (i.root-servers.net.)
1 test failure on this DNS server
PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:7fe::53
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
DNS server: 2001:dc3::35 (m.root-servers.net.)
1 test failure on this DNS server
PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:dc3::35
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
DNS server: 128.63.2.53 (h.root-servers.net.)
All tests passed on this DNS server
DNS server: 128.8.10.90 (d.root-servers.net.)
All tests passed on this DNS server
DNS server: 192.112.36.4 (g.root-servers.net.)
All tests passed on this DNS server
DNS server: 192.168.1.250 (server2008.breg.local.)
All tests passed on this DNS server
Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered
DNS delegation for the domain _msdcs.BREG.local. is operational on IP 192.168.1.250
DNS server: 192.203.230.10 (e.root-servers.net.)
All tests passed on this DNS server
DNS server: 192.228.79.201 (b.root-servers.net.)
All tests passed on this DNS server
DNS server: 192.33.4.12 (c.root-servers.net.)
All tests passed on this DNS server
DNS server: 192.36.148.17 (i.root-servers.net.)
All tests passed on this DNS server
DNS server: 192.5.5.241 (f.root-servers.net.)
All tests passed on this DNS server
DNS server: 192.58.128.30 (j.root-servers.net.)
All tests passed on this DNS server
DNS server: 193.0.14.129 (k.root-servers.net.)
All tests passed on this DNS server
DNS server: 198.41.0.4 (a.root-servers.net.)
All tests passed on this DNS server
DNS server: 199.7.83.42 (l.root-servers.net.)
All tests passed on this DNS server
DNS server: 202.12.27.33 (m.root-servers.net.)
All tests passed on this DNS server
Summary of DNS test results:
Auth Basc Forw Del Dyn RReg Ext
Domain: BREG.local
server2008 PASS PASS PASS PASS WARN PASS n/a
......................... BREG.local passed test DNS
Test omitted by user request: LocatorCheck
Test omitted by user request: Intersite -
Every few days we see two dialogs with the following messages:
Dialog 1, title: Check for Licensing Compliance is Incomplete
The server did not finish checking the license compliance. If the server is joined to a domain, make sure that the server can connect to a domain controller.
Dialog 2, title: Check for Licensing Compliance is Incomplete
The server did not finish checking the license compliance. If the server is joined to a domain, make sure that the server can connect to a domain controller. If the license compliance check cannot be completed, the server will automatically shut
down in 8 day(s) 23 hour(s) 0 minute(s).
The server is not (and never has been) joined to a domain or had any DC roles installed. In fact its still connected to the default Workgroup.
The server was configured in our office and never showed this message until it was installed on site. The main difference from what I can see is that when installed on site it was given a static IP address and does not have any DNS settings in the network
adapter properties.
I have scoured a number of forums on this error but in almost every other instance of this error message the servers are connected to a Domain Controller and the solutions generally are linked to dis-joining and rejoining the domain. Unfortunately this is
not an option for this scenario.
I initially thought that adding some relevant DNS server IP address may resolve the issue, however, we have the exact same model server configured exactly the same running at a different site that does not experience this problem. This server also has no
DNS server configured.
I have seen a post that suggests turning off the servers "Foundation Checking", but I'm unsure how to do this.Thanks for your response Vivian.
I can confirm that this server is not (and never has been) a member of any active directory, it is configured as a Workgroup server. It was initially configured on a network that does have an active directory, but was never joined to it. During that time it
never displayed these messages.
The server was moved into production on a different site and network and setup with a static IP address.The site network does have its own active directory but the server was not joined to it. It is whilst on this new network that these messages began.
Since my original post DNS servers have been added and the Microsoft activation has been verified, however, the messages are still appearing.
There are only 2 user accounts configured on this server. The local admin account and another local admin user.
The remote desktop services roles have been installed but not yet configured. I don't think that has any bearing on this scenario though.
The description of this error in the above "Introduction to Windows Server 2012 Foundation" link states:
This error occurs when the server cannot finish checking the requirements for the root domain, forest trust configuration, or both. It usually happens when the server cannot connect to a domain controller. If the situation persists, the server will
shut down 10 days after the first time the compliance check failed. Each time this error message occurs, it will state the actual time remaining before the server will shut down. If you restart the server after it has shut down because of non-compliance, the
server will shut itself down again in 3 days.
The above description leads me to the following question - In a Workgroup environment, does the server still try to contact a domain controller to establish a level of trust? If this is the case could it be that the server can no longer see the initial DC
on its new network and this is what is triggering the messages?
Am I clutching at straws here? -
The error also has "to repair the configuration, follow steps for repairing dpm from DPM setup help ID: 3001
I tried the solution outlined here:
http://social.technet.microsoft.com/Forums/en-US/8be919ee-f358-47a4-9cc3-d23eb05d3f18/system-center-2012-r2-dpm-smtp-issue-reporting-services-server-cannot-connect-to-the-dpm?forum=dataprotectionmanager
and also the graphical depiction here: http://www.ms4u.info/2014/01/reporting-services-server-cannot.html
I tried these steps, but everytime i try to change it, it tells me:
"The permissions granted to user 'domain\userid' are insufficient for performing this action rsaccessdenied..
Nothing seems to work..
I thought if i went into sql management studio and made sure my userid had admin rights to the db it would work.. but i cant change it there (via integrated security).. i believe i need to login as SA, but i dont recall the password for SA, though it appears
i can change the SA password from within sql management studio.. i'm unsure if doing so will break DPM though or is even needed to fix the reporting integration issue..
Any thoughts on this?
Thanks
Tech, the Universe, Everything: http://tech-stew.comUsing:
data source="servername\MSDPM2012";persist security info=False;initial catalog=DPMDB
I used the domain sqlservice account and test connection was ok.
However.. accessing reports still crashes in the MMC
Tech, the Universe, Everything: http://tech-stew.com
When i recreated the db.. i called it Reporting2 or similiar..
Then the reports folder i created called "Reports Folder"
Then datasource name "reports datasource"
The issue here is that the DPM reports in the reporting web interface are gone, since this is a new DB.. how do i redeploy them
Tech, the Universe, Everything: http://tech-stew.com
i went back into the sql reporting services area.. hit change db.. chose the original .. then back to the url.. went to the OLD reporting services folder and datasource.. added the connect string and now reporting area works.. so does scheduling..
Problem now solved
Tech, the Universe, Everything: http://tech-stew.com
Oops spoke too soon.. the first time i set it to do "status" as a schedule.. it seemed to work (clicked ok, no error).. went back and added an email notification..
Now i'm getting.. "an error occurred causing the reporting job to fail" "system files may be corrupt".
Seems to only occur if i try to add the email address portion
Tech, the Universe, Everything: http://tech-stew.com
rechecked the datasource.. i think there was an error in the connect string.. now everything seems to be working.. email notifications and all.
Tech, the Universe, Everything: http://tech-stew.com -
Connection Broker (Server 2012) what server to connect to ?
I have setup 3 Windows Server 2012 servers.
Server A running:
Remote Desktop Services Licensing
Remote Desktop Web Access
Remote Desktop Connection Broker
Server B running:
Remote Desktop Services Session Host
Server C running:
Remote Desktop Services Session Host
In old days you had to connect (with your RDP client) to the server running Session Directory, then you was redirected to one of the Terminal Service servers.
What about now ?
Does clients have to connect to the Connection Broker server to be directed to right session host ?
Should I create a DNS record that points to the Connection Broker and let RDP clients connect to that DNS address ?
Or should I create a round robin DNS address consisting of server B and server C ?
I'm a little confused on that matter, so hope anyone can help :-)
This is my first Remote Desktop Services setup on Server 2012Hi,
In Server 2012/2012 R2 the initial connection goes to the RD Connection Broker. Yes, if necessary you would create a DNS record that points to the broker.
Also in 2012 a user would normally connect via RD Web Access, or RemoteApp and Desktop Connections (RADC), or Remote Resources instead of manually opening the Remote Desktop client and connecting that way. If they connect using the above methods they
will use a pre-configured .rdp file that has the target collection contained within it. The broker needs this target collection so that it knows where to send the user.
If you want users to manually launch a connection (without RDWeb, RADC, etc.) then you can use a non-IE web browser to download the .rdp files from RDWeb and give them to your users. Another alternative is to set the default collection in the broker's
registry so that if someone connects to the broker without specifying the target collection it will know to automatically send them to the default collection.
-TP -
Dispatcher running but message server not connected
Hi Guys,
I installed SAP netweaver 7.01 trial version and using MaxDB as database server.
When I start the NSB using SAPMMC, the message server is running but the disp+work.EXE is not working properly. It sometimes shows the status 'Running but message server not connected' and sometimes 'Running but que standstill'. It would be a great help if you could guide me to the solution of this problem.
DEV_MS file:-
trc file: "dev_ms", trc level: 1, release: "701"
[Thr 2148] Sat May 14 18:02:00 2011
[Thr 2148] MsSSetTrcLog: trc logging active, max size = 20971520 bytes
systemid 560 (PC with Windows NT)
relno 7010
patchlevel 0
patchno 0
intno 20020600
make: multithreaded, ASCII, optimized
pid 1484
[Thr 2148] ***LOG Q01=> MsSInit, MSStart (Msg Server 1 1484) [msxxserv.c 1853]
[Thr 2148] MsInitAclInfo: acl file F:\SAP\NSP\SYS\global\ms_acl_info.DAT not found, unrestricted access
[Thr 2148] MsGetOwnIpAddr: my host addresses are :
[Thr 2148] 1 : [10.10.0.10] DESKTOP5 (HOSTNAME)
[Thr 2148] 2 : [127.0.0.1] localhost (LOCALHOST)
[Thr 2148] 3 : [192.168.1.8] desktop5 (NILIST)
[Thr 2148] Sat May 14 18:02:01 2011
[Thr 2148] MsHttpInit: full qualified hostname = desktop5
[Thr 2148] HTTP logging is switch off
[Thr 2148] set HTTP state to LISTEN
[Thr 2148] ms/icf_info_server : deleted
[Thr 2148] *** I listen to port sapmsNSP (3600) ***
[Thr 2148] *** I listen to internal port 3900 (3900) ***
[Thr 2148] *** HTTP port 8100 state LISTEN ***
[Thr 2148] CUSTOMER KEY: >S1138463071<
[Thr 2148] build version=701.2008.03.06
[Thr 2148] Sat May 14 18:03:20 2011
[Thr 2148] *** ERROR => MsSClientHandle: no server provides service ENQ (4), requested from desktop5_NSP_00 [msxxserv.c 4711]DEV_DISP file:-
trc file: "dev_disp", trc level: 1, release: "701"
sysno 00
sid NSP
systemid 560 (PC with Windows NT)
relno 7010
patchlevel 0
patchno 7
intno 20020600
make: multithreaded, ASCII, optimized
pid 2740
Sat May 14 18:02:02 2011
kernel runs with dp version 240(ext=110) (@(#) DPLIB-INT-VERSION-240)
length of sys_adm_ext is 364 bytes
SWITCH TRC-HIDE on ***
***LOG Q00=> DpSapEnvInit, DPStart (00 2740) [dpxxdisp.c 1257]
shared lib "dw_xml.dll" version 7 successfully loaded
shared lib "dw_xtc.dll" version 7 successfully loaded
shared lib "dw_stl.dll" version 7 successfully loaded
shared lib "dw_gui.dll" version 7 successfully loaded
shared lib "dw_mdm.dll" version 7 successfully loaded
rdisp/softcancel_sequence : -> 0,5,-1
use internal message server connection to port 3900
Sat May 14 18:02:11 2011
WARNING => DpNetCheck: NiAddrToHost(1.0.0.0) took 9 seconds
***LOG GZZ=> 1 possible network problems detected - check tracefile and adjust the DNS settings [dpxxtool2.c 5529]
MtxInit: 30000 0 0
DpSysAdmExtInit: ABAP is active
DpSysAdmExtInit: VMC (JAVA VM in WP) is not active
DpIPCInit2: start server >desktop5_NSP_00 <
DpShMCreate: sizeof(wp_adm) 8232 (1176)
DpShMCreate: sizeof(tm_adm) 3786880 (18840)
DpShMCreate: sizeof(wp_ca_adm) 1280 (60)
DpShMCreate: sizeof(appc_ca_adm) 1200 (60)
DpCommTableSize: max/headSize/ftSize/tableSize=500/8/528040/528048
DpShMCreate: sizeof(comm_adm) 528048 (1048)
DpSlockTableSize: max/headSize/ftSize/fiSize/tableSize=0/0/0/0/0
DpShMCreate: sizeof(slock_adm) 0 (96)
DpFileTableSize: max/headSize/ftSize/tableSize=0/0/0/0
DpShMCreate: sizeof(file_adm) 0 (72)
DpShMCreate: sizeof(vmc_adm) 0 (1296)
DpShMCreate: sizeof(wall_adm) (22440/34344/56/100)
DpShMCreate: sizeof(gw_adm) 48
DpShMCreate: SHM_DP_ADM_KEY (addr: 057F0040, size: 4389744)
DpShMCreate: allocated sys_adm at 057F0040
DpShMCreate: allocated wp_adm at 057F1BF8
DpShMCreate: allocated tm_adm_list at 057F3C20
DpShMCreate: allocated tm_adm at 057F3C50
DpShMCreate: allocated wp_ca_adm at 05B904D0
DpShMCreate: allocated appc_ca_adm at 05B909D0
DpShMCreate: allocated comm_adm at 05B90E80
DpShMCreate: system runs without slock table
DpShMCreate: system runs without file table
DpShMCreate: allocated vmc_adm_list at 05C11D30
DpShMCreate: allocated gw_adm at 05C11D70
DpShMCreate: system runs without vmc_adm
DpShMCreate: allocated ca_info at 05C11DA0
DpShMCreate: allocated wall_adm at 05C11DA8
MBUF state OFF
DpCommInitTable: init table for 500 entries
rdisp/queue_size_check_value : -> off
Sat May 14 18:02:12 2011
ThTaskStatus: rdisp/reset_online_during_debug 0
EmInit: MmSetImplementation( 2 ).
MM global diagnostic options set: 0
<ES> client 0 initializing ....
<ES> InitFreeList
<ES> block size is 1024 kByte.
Using implementation view
<EsNT> Using memory model view.
<EsNT> Memory Reset disabled as NT default
<ES> 127 blocks reserved for free list.
ES initialized.
rdisp/http_min_wait_dia_wp : 1 -> 1
Sat May 14 18:02:13 2011
***LOG Q0K=> DpMsAttach, mscon ( desktop5) [dpxxdisp.c 12204]
DpStartStopMsg: send start message (myname is >desktop5_NSP_00 <)
DpStartStopMsg: start msg sent
CCMS: alert/MONI_SEGM_SIZE = 0 monitoring and alerting switched off.
DpMsgAdmin: Set release to 7010, patchlevel 0
MBUF state PREPARED
MBUF component UP
DpMBufHwIdSet: set Hardware-ID
***LOG Q1C=> DpMBufHwIdSet [dpxxmbuf.c 1048]
DpMsgAdmin: Set patchno for this platform to 7
Release check o.K.
Sat May 14 18:02:53 2011
my types changed after wp death/restart 0x9f --> 0x9e
my types changed after wp death/restart 0x9e --> 0x9c
my types changed after wp death/restart 0x9c --> 0x98
my types changed after wp death/restart 0x98 --> 0x90
my types changed after wp death/restart 0x90 --> 0x80
DP_FATAL_ERROR => DpWPCheck: no more work processes
DISPATCHER EMERGENCY SHUTDOWN ***
increase tracelevel of WPs
NiWait: sleep (10000ms) ...
NiISelect: timeout 10000ms
NiISelect: maximum fd=1629
NiISelect: read-mask is NULL
NiISelect: write-mask is NULL
Sat May 14 18:03:03 2011
NiISelect: TIMEOUT occured (10000ms)
dump system status
Workprocess Table (long) Sat May 14 12:33:03 2011
======================== -
"Untrusted Initial Connection Warnings"
Hi,
if i connect to SSGD the first time, i got a "Untrusted Initial Connection Warnings"
warning: "The SSGD client connecting to the server ... for the first time. Do you
with to connect to this server ?"
As i found in the docu http://docs.sun.com/source/820-4907/chapter1.html#BBJCEGAG
this behaviour is normal and you can avoid this with a preconfigured hostsvisited file.
Is there a possibility to change the title of the popup ?
Or remove this message without touching the client filesystem ?
If the user reads "Untrusted Initial Connection Warnings", he though
something is broken .... Also, he must accept 2 certificates (java-applet & this initial connection warnung)
to work with SSGD - one would be enough.
regards
DannyThis behaviour is by design - educating users so they are aware that once accepted they should not see these errors again is important to protect their login credentials from man-in-the-middle attacks.
It's unfortunate that SGD uses the JVM and a native helper application, both requiring confirmation but at lease it's only once. -
These resets appear to coincide with a clearing of the cached queries for the DSN from memory, breaking all my sub queries that try to use the initial cached one. I am grasping at straws to discover the reset culprit, the DSN tests always show OK, there is not packet loss at the switch level. If anyone has some suggestions, I am all ears!
The resets are completely random and under no load. My sql 2008 r2 box is set to unlimited connections.
An example of a DSN setup is :
Maintain Connections [x]
String Format [ ]
Max Pooled Statements 100
Timeout 20 Interval 7
Query Timeout 0
Login Timeout 30
CLOB [ ]
BLOB [ ]
Long Text Buffer 64000
Blob Buffer 64000
Validate Connection [ ]
I am running the following :
CF Enterprise 10,0,13,287689
Tomcat 7.0.23.0
Ubuntu 1204 x64
Java VM 20.4-b02
Java 1.6 (Sun Microsystems Inc)
I have seen it suggested to uncheck the maintain connections advanced options but this doesn't seem like a good approach to the problem and will cause more stress on the sql box IMHO.
I have also seen it suggested to enable Validate Connection but documentation on this is a bit sparse...
Here are more examples of the initial reset error and then the subsequent cache related errors :
Database Error Information:
Native Error Code: 0
SQL State: 08S01
Query Error: [Macromedia][SQLServer JDBC Driver]A problem occurred when attempting to contact the server (Server returned: Connection reset). Please ensure that the server parameters passed to the driver are correct and that the server is running. Also ensure that the maximum number of connections have not been exceeded for this server.
Custom Error Code: 08S01
Database Error Information:
Native Error Code: 0
SQL State: n/a
Query Error:
Query Of Queries runtime error.
Table named GlobalDetails was not found in memory. The name is misspelled or the table is not defined.
Custom Error Code: n/a
Thanks in advance to anyone who has a suggestion.Hi, could DBA check MS SQL Server connection logs???
May be server has some limits (for example sessions, memory and e.t.c.) -
CSM Server LB across L3 Devices
I have a pair of 6513's with a CSM in each. These are port-channelled together to provide FT.
I have a number of server vlan's defined on the 6500 and 2 of these need to be LB through the CSM.
Do I define these servers as CSM server vlans (which I have now done) or define the servers as 6500 server vlans with L3 interfaces defined on the 6500's and add route commands to the CSM server VLAN's to route back to these servers via the 6500 L3. I am concerned on this last point about Nat requirements for client connections and how to guage the number of nat pool addresses I need.
My reason for this question is that I am having trouble getting ping access to these LB servers through the CSM even though I have defined server farms with a predictor of forward. Cisco give information on forwarding using TCP / UDP but give no indication of whether the CSM predictor forward supports ICMP.I am having trouble pinging from an interface on the sup720 / switch fabric on a different subnet to a server on a vlan defined in the CSM as a server vlan.
Not seeing any hits on the csm for this serverfarm.
You said the servers can be on either the CSM or MSFC, but if put the servers to be load balanced on the MSFC, I will need to put in client Nat on the serverfarm to ensure the real server does not attempt to reply directly back to the requestee. If this is the case, does the CSS use a 1 to 1 Nat relationship or does it essentially do a many to 1 address (PAT) -
Hi!
I cannot send email because the destination server drops my connection.
In mail.log I get the following entry:
"... server dropped connection without sending the initial SMTP greeting)"
Does anybody know what I can do that my mail server connection is accepted?
Br
GerhardI tried it with two different mail servers: gmx and chello - as you can see below. But it didn't work. I tried with squirrlmail and apple mail - no success.
Here is my mail.log:
Dec 17 16:13:57 myserver postfix/smtpd[1449]: connect from localhost[127.0.0.1]
Dec 17 16:13:57 myserver postfix/smtpd[1449]: B145C19D684: client=localhost[127.0.0.1]
Dec 17 16:13:57 myserver postfix/cleanup[1452]: B145C19D684: message-id=<[email protected]>
Dec 17 16:13:57 myserver postfix/qmgr[940]: B145C19D684: from=<[email protected]>, size=1072, nrcpt=1 (queue active)
Dec 17 16:13:57 myserver postfix/smtpd[1449]: disconnect from localhost[127.0.0.1]
Dec 17 16:14:02 myserver postfix/smtpd[1456]: connect from localhost[127.0.0.1]
Dec 17 16:14:02 myserver postfix/smtpd[1456]: DEC5019D6A9: client=localhost[127.0.0.1]
Dec 17 16:14:02 myserver postfix/cleanup[1452]: DEC5019D6A9: message-id=<[email protected]>
Dec 17 16:14:02 myserver postfix/qmgr[940]: DEC5019D6A9: from=<[email protected]>, size=1678, nrcpt=1 (queue active)
Dec 17 16:14:02 myserver postfix/smtpd[1456]: disconnect from localhost[127.0.0.1]
Dec 17 16:14:02 myserver postfix/smtp[1453]: B145C19D684: to=<[email protected]>, relay=127.0.0.1[127.0.0.1], delay=5, status=sent (250 2.6.0 Ok, id=00933-02, from MTA: 250 Ok: queued as DEC5019D6A9)
Dec 17 16:14:02 myserver postfix/qmgr[940]: B145C19D684: removed
Dec 17 16:14:03 myserver postfix/smtp[1457]: connect to mx0.gmx.net[213.165.64.100]: server dropped connection without sending the initial SMTP greeting (port 25)
Dec 17 16:14:03 myserver postfix/smtp[1457]: connect to mx0.gmx.de[213.165.64.100]: server dropped connection without sending the initial SMTP greeting (port 25)
Dec 17 16:14:03 myserver postfix/smtp[1457]: DEC5019D6A9: to=<[email protected]>, relay=none, delay=1, status=deferred (connect to mx0.gmx.de[213.165.64.100]: server dropped connection without sending the initial SMTP greeting)
Dec 17 16:22:13 myserver postfix/qmgr[940]: 2EE6019D644: from=<[email protected]>, size=1980, nrcpt=1 (queue active)
Dec 17 16:22:13 myserver postfix/qmgr[940]: B24D019D54E: from=<[email protected]>, size=1380, nrcpt=1 (queue active)
Dec 17 16:22:14 myserver postfix/smtp[1498]: connect to mx0.gmx.de[213.165.64.100]: server dropped connection without sending the initial SMTP greeting (port 25)
Dec 17 16:22:14 myserver postfix/smtp[1497]: connect to mx0.gmx.net[213.165.64.100]: server dropped connection without sending the initial SMTP greeting (port 25)
Dec 17 16:22:14 myserver postfix/smtp[1498]: connect to mx0.gmx.net[213.165.64.100]: server dropped connection without sending the initial SMTP greeting (port 25)
Dec 17 16:22:14 myserver postfix/smtp[1497]: connect to mx0.gmx.de[213.165.64.100]: server dropped connection without sending the initial SMTP greeting (port 25)
Dec 17 16:22:14 myserver postfix/smtp[1498]: B24D019D54E: to=<[email protected]>, relay=none, delay=6446, status=deferred (connect to mx0.gmx.net[213.165.64.100]: server dropped connection without sending the initial SMTP greeting)
Dec 17 16:22:14 myserver postfix/smtp[1497]: 2EE6019D644: to=<[email protected]>, relay=none, delay=3797, status=deferred (connect to mx0.gmx.de[213.165.64.100]: server dropped connection without sending the initial SMTP greeting)
Dec 17 16:38:53 myserver postfix/qmgr[940]: 88BAA19D611: from=<[email protected]>, size=1681, nrcpt=1 (queue active)
Dec 17 16:38:53 myserver postfix/qmgr[940]: DEC5019D6A9: from=<[email protected]>, size=1678, nrcpt=1 (queue active)
Dec 17 16:38:53 myserver postfix/smtp[1625]: connect to mx0.gmx.net[213.165.64.100]: server dropped connection without sending the initial SMTP greeting (port 25)
Dec 17 16:38:53 myserver postfix/smtp[1626]: connect to mx0.gmx.de[213.165.64.100]: server dropped connection without sending the initial SMTP greeting (port 25)
Dec 17 16:38:53 myserver postfix/smtp[1625]: connect to mx0.gmx.de[213.165.64.100]: server dropped connection without sending the initial SMTP greeting (port 25)
Dec 17 16:38:53 myserver postfix/smtp[1626]: connect to mx0.gmx.net[213.165.64.100]: server dropped connection without sending the initial SMTP greeting (port 25)
Dec 17 16:38:53 myserver postfix/smtp[1625]: 88BAA19D611: to=<[email protected]>, relay=none, delay=5371, status=deferred (connect to mx0.gmx.de[213.165.64.100]: server dropped connection without sending the initial SMTP greeting)
Dec 17 16:38:53 myserver postfix/smtp[1626]: DEC5019D6A9: to=<[email protected]>, relay=none, delay=1491, status=deferred (connect to mx0.gmx.net[213.165.64.100]: server dropped connection without sending the initial SMTP greeting)
Dec 17 16:45:11 myserver postfix/smtpd[1655]: connect from localhost[127.0.0.1]
Dec 17 16:45:11 myserver postfix/smtpd[1655]: 68D4B19D6C9: client=localhost[127.0.0.1]
Dec 17 16:45:11 myserver postfix/cleanup[1658]: 68D4B19D6C9: message-id=<[email protected]>
Dec 17 16:45:11 myserver postfix/qmgr[940]: 68D4B19D6C9: from=<[email protected]>, size=822, nrcpt=1 (queue active)
Dec 17 16:45:11 myserver postfix/smtpd[1655]: disconnect from localhost[127.0.0.1]
Dec 17 16:45:17 myserver postfix/smtpd[1662]: connect from localhost[127.0.0.1]
Dec 17 16:45:17 myserver postfix/smtpd[1662]: 0653419D6EE: client=localhost[127.0.0.1]
Dec 17 16:45:17 myserver postfix/cleanup[1658]: 0653419D6EE: message-id=<[email protected]>
Dec 17 16:45:17 myserver postfix/qmgr[940]: 0653419D6EE: from=<[email protected]>, size=1422, nrcpt=1 (queue active)
Dec 17 16:45:17 myserver postfix/smtpd[1662]: disconnect from localhost[127.0.0.1]
Dec 17 16:45:17 myserver postfix/smtp[1659]: 68D4B19D6C9: to=<[email protected]>, relay=127.0.0.1[127.0.0.1], delay=6, status=sent (250 2.6.0 Ok, id=00932-03, from MTA: 250 Ok: queued as 0653419D6EE)
Dec 17 16:45:17 myserver postfix/qmgr[940]: 68D4B19D6C9: removed
Dec 17 16:45:17 myserver postfix/smtp[1663]: 0653419D6EE: to=<[email protected]>, relay=smtpgate.chello.at[213.46.255.2], delay=0, status=sent (250 Message received: [email protected])
Dec 17 16:45:17 myserver postfix/qmgr[940]: 0653419D6EE: removed
Dec 17 16:50:45 myserver postfix/smtpd[1695]: connect from unknown[192.168.0.196]
Dec 17 16:50:47 myserver postfix/smtpd[1695]: 60AC519D6F1: client=unknown[192.168.0.196], sasl_method=PLAIN, sasl_username=user
Dec 17 16:50:48 myserver postfix/cleanup[1698]: 60AC519D6F1: message-id=<[email protected]>
Dec 17 16:50:48 myserver postfix/qmgr[940]: 60AC519D6F1: from=<[email protected]>, size=784, nrcpt=1 (queue active)
Dec 17 16:50:53 myserver postfix/smtpd[1702]: connect from localhost[127.0.0.1]
Dec 17 16:50:53 myserver postfix/smtpd[1702]: C69BD19D716: client=localhost[127.0.0.1]
Dec 17 16:50:53 myserver postfix/cleanup[1698]: C69BD19D716: message-id=<[email protected]>
Dec 17 16:50:53 myserver postfix/qmgr[940]: C69BD19D716: from=<[email protected]>, size=1376, nrcpt=1 (queue active)
Dec 17 16:50:53 myserver postfix/smtpd[1702]: disconnect from localhost[127.0.0.1]
Dec 17 16:50:53 myserver postfix/smtp[1699]: 60AC519D6F1: to=<[email protected]>, relay=127.0.0.1[127.0.0.1], delay=6, status=sent (250 2.6.0 Ok, id=00933-03, from MTA: 250 Ok: queued as C69BD19D716)
Dec 17 16:50:53 myserver postfix/qmgr[940]: 60AC519D6F1: removed
Dec 17 16:50:54 myserver postfix/smtp[1703]: connect to mx0.gmx.de[213.165.64.100]: server dropped connection without sending the initial SMTP greeting (port 25)
Dec 17 16:50:55 myserver postfix/smtp[1703]: connect to mx0.gmx.net[213.165.64.100]: server dropped connection without sending the initial SMTP greeting (port 25)
Dec 17 16:50:55 myserver postfix/smtp[1703]: C69BD19D716: to=<[email protected]>, relay=none, delay=2, status=deferred (connect to mx0.gmx.net[213.165.64.100]: server dropped connection without sending the initial SMTP greeting)
Dec 17 16:51:48 myserver postfix/smtpd[1695]: disconnect from unknown[192.168.0.196]
Maybe you are looking for
-
Hi Not sure if jittery is the correct terminology but when I have burnt a DVD teh clips from one camera are fine, from teh other there is jittery (or juddery) movement. All clips look OK in the Premier preview window and in the Encore preview. The Ca
-
Strange behavior after using NIK plug-ins
Every once in a while I encounter this strange behavior of Aperture. I first process the NEF's in Aperture (white balance, Exposure, Enhance... and, when needed, Cropping) and then I fine tune the image with the NIK plug-ins; when needed DfIne 2.0, V
-
has anyone done this? I am wanting to setup streaming video/audio from an applet (camera) to a server and broadcast out to an applet(browser) I need the server in the middle to manage the viewers. Do I need a specific RTP Server or can I use a regula
-
Screen flicks when using miniDVI - S Video on WinXP
Hi - I have installed WinXP using BootCamp. Now when I try to use miniDVI to S-Video the screen on Laptop flicks and the TV shows 'no signal'. I tested this on OSx10 and seems like this setting works and I can see the extended screen on my TV without
-
Digital Signiture in Purchase Orders
Dear all, I was asked to prepare the technical infrastructure in order for end users (purchasing/procurement department) to assign digital signitures in Purchase Orders produced by SAP. Do you know where do I have to look first in order to get approp