DNS adding entries via SA GUI

I am configuring a new Intel Xserve with 10.5.2 ready to move data from my current 10.4.11 system
I have added over 100 entries into DNS via the Server Admin GUI by hand.
(I tried using the move the data files and then using the convert utility. It kept missing and corrupting data).
I have added most of my records apart from a few A records and CNAMEs, however when I click on "add entry", there is no "new entry" created. In fact I cannot seem now to add any entries to DNS via GUI.
The GUI is the preferred entry point as other colleagues may need to add to DNS in my absence.
I have stopped DNS, restarted, rebooted the system.
The following is in /var/log/system.log it is complaining about not having a nameserver, but it does.
Any help would be appreciated.
Apr 3 09:48:26 adminservices servermgrd[89]: servermgr_dns: Failed to save zone '(null)' because the zone does not have a nameserver.
Apr 3 09:48:55: --- last message repeated 3 times ---
Apr 3 09:48:55 adminservices Server Admin[271]: Unexpected call to doMarkConfigurationAsDirty by 'DNS' plugin during updateConfigurationViewFromDescription
Apr 3 09:52:30 adminservices Server Admin[271]: Unexpected call to doMarkConfigurationAsDirty by 'DNS' plugin during updateConfigurationViewFromDescription
Apr 3 09:53:00: --- last message repeated 1 time ---
Apr 3 09:53:17 adminservices Server Admin[271]: Unexpected call to doMarkConfigurationAsDirty by 'DNS' plugin during updateConfigurationViewFromDescription
Apr 3 09:55:06 adminservices servermgrd[89]: servermgr_dns: Failed to save zone '(null)' because the zone does not have a nameserver.
Apr 3 09:55:36: --- last message repeated 3 times ---
Apr 3 09:56:24 adminservices Server Admin[271]: Unexpected call to doMarkConfigurationAsDirty by 'DNS' plugin during updateConfigurationViewFromDescription
Apr 3 09:57:08 adminservices servermgrd[89]: servermgr_dns: Failed to save zone '(null)' because the zone does not have a nameserver.
Apr 3 09:57:15: --- last message repeated 3 times ---
Apr 3 09:57:15 adminservices Server Admin[271]: * -[GroupTextField windowDidResignKey:]: unrecognized selector sent to instance 0x1000e130
Apr 3 09:57:22: --- last message repeated 1 time ---
Apr 3 09:57:22 adminservices [0x0-0x12012].com.apple.ServerAdmin[271]: * ERROR: -[GRAxes computeLayout]:1124 - plotRect height = 0.000000 <= 0.0 *
Apr 3 09:57:22 adminservices [0x0-0x12012].com.apple.ServerAdmin[271]: * ERROR: -[GRChartView computeLayout]:1194 - Layout for overlay axes (0x13eebd00) failed. *
Apr 3 09:57:22 adminservices [0x0-0x12012].com.apple.ServerAdmin[271]: * ERROR: -[GRAxes computeLayout]:1124 - plotRect height = 0.000000 <= 0.0 *
Apr 3 09:57:22 adminservices [0x0-0x12012].com.apple.ServerAdmin[271]: * ERROR: -[GRChartView computeLayout]:1194 - Layout for overlay axes (0x13eedef0) failed. *
Apr 3 09:57:23 adminservices [0x0-0x12012].com.apple.ServerAdmin[271]: * ERROR: -[GRAxes computeLayout]:1124 - plotRect height = 0.000000 <= 0.0 *
Apr 3 09:57:23 adminservices [0x0-0x12012].com.apple.ServerAdmin[271]: * ERROR: -[GRChartView computeLayout]:1194 - Layout for overlay axes (0x13eebd00) failed. *
Apr 3 09:57:23 adminservices [0x0-0x12012].com.apple.ServerAdmin[271]: * ERROR: -[GRAxes computeLayout]:1124 - plotRect height = 0.000000 <= 0.0 *
Apr 3 09:57:23 adminservices [0x0-0x12012].com.apple.ServerAdmin[271]: * ERROR: -[GRChartView computeLayout]:1194 - Layout for overlay axes (0x13eedef0) failed. *
Apr 3 10:05:08 adminservices [0x0-0x12012].com.apple.ServerAdmin[271]: * ERROR: -[GRAxes computeLayout]:1124 - plotRect height = 0.000000 <= 0.0 *
Apr 3 10:05:08 adminservices [0x0-0x12012].com.apple.ServerAdmin[271]: * ERROR: -[GRChartView computeLayout]:1194 - Layout for overlay axes (0x13eebd00) failed. *
Apr 3 10:05:08 adminservices [0x0-0x12012].com.apple.ServerAdmin[271]: * ERROR: -[GRAxes computeLayout]:1124 - plotRect height = 0.000000 <= 0.0 *
Apr 3 10:05:08 adminservices [0x0-0x12012].com.apple.ServerAdmin[271]: * ERROR: -[GRChartView computeLayout]:1194 - Layout for overlay axes (0x13eedef0) failed. *
Apr 3 10:05:43 adminservices com.apple.launchd[1] (0x416a30.Locum[22193]): Exited: Terminated
Apr 3 10:32:57 adminservices sshd[22755]: USER_PROCESS: 22755 ttys000
Apr 3 10:32:57 adminservices com.apple.launchd[1] (0x416cc0.sshd[22755]): Could not setup Mach task special port 9: (os/kern) no access

Funny thing, we just upgraded our xserve from 10.3.9 to 10.4.11 and our DNS is having problems as well. Never has a problem before. Whines and complains that it doesn't know who "xserve" is and does not associate "xserve" with its local IP address.
Maybe what will help you may help us.
Ever since the upgrade, Windows file-sharing has gotten horribly gummy.

Similar Messages

Different SBA DNS SRV entry for the same dns zone?

Hello,
I got here a testlab with one enterprise pool and one sba deployed. The Branch Site got also an DNS Server installed. Both are using the same dns zone "test.com".
Of course now i got different server for the same SRV Record _sipinternaltls._tcp.test.com - one for autodiscovery in the enterprise pool and one for the sba. Also I want to add the second one as failover srv + the DNS Server in the Enterprise Pool should
be used as a Forwarder.
Now I got some issues how to deploy several entries on two different dns server for the same zone.
1.) If I add manually the same zone + DNS SRV entries on the SBA the dns is somehow not resolving/forwarding the entries on the other dns server in ee to other servers which are not on my SBA dns.
2.) If I only pinpoint the SRV entries for _sipinternaltls._tcp.test.com (one for sba and failover for ee site) the dns won't resolve the second a record to the enterprise pool.
What is the Best Practise for DNS SBA? Always point to the enterprise pool and, therefore, no other configuration is needed?
Regards DrWho

I played a little bit around. Problem was that I can not add the pinpoint dns srv entries via gui. Aditionally the tutorials did not work as my DNS server for SBA is not on a domain controller. In the end I did this:
sbafe -> fqdn of my sba
eefe -> fqdn of my frontend of enterprise pool
dnscmd . /zoneadd _sipinternaltls._tcp.test.com. /primary /file _sipinternaltls._tcp.test.com.dns
dnscmd . /recordadd _sipinternaltls._tcp.test.com. @ SRV 0 0 5061 sbafe.test.com.
dnscmd . /recordadd _sipinternaltls._tcp.test.com. @ SRV 10 0 5061 eefe.test.com.
dnscmd . /zoneadd sbafe.test.com. /primary /file sbafe.test.com.dns
dnscmd . /recordadd sip.sbafe.test.com. @ A 192.168.10.220
dnscmd . /zoneadd eefe.test.com. /primary /file eefe.test.com.dns
dnscmd . /recordadd sip.eefe.test.com. @ A 192.168.0.40
Question is if that is a good best proctise or should the dns server within a zone contain the same records (Primary/Backup). The Client will then always hit the FE of the EE Pool first.
Also its quite a lot of work to setup.

Blog entries via email?

Hi all,
Anyone know if the new blog utility in iWeb/.mac will support adding entries via email from a handheld device such as a blackberry?

I'd done something similar long ago, sent an email to my home machine, AppleScript intercepted the email, parsed the subject line and turned on X-10 power module. It was like having Tom Bodett at home.
As for iWeb, the concept is do-able. But at the current state, iWeb is not quite scriptable. You can add a photo blog entry, but it only has images property, so you can't enter any text for it.
Perhaps, next rev.

Modifying entries via the System Server Console (GUI's) 'Import From LDIF'

Hello,
I've created an LDIF file with "changeType: modify" entries but when I import the file via the GUI's 'Import From LDIF' button (taking care to have "Add only" unchecked), the entries are rejected with a "Error adding object ... The error sent by the server was 'Already exists'" error.
Here is an example entry:
dn: nxResource=Administrative Policies,nxResource=eCentre,nxResource=Network,o
u=securitypolicy,dc=ECENTRE
changeType: modify
replace: nxRule
nxRule: rule=deny,cn=SeniorAdministrators,ou=Administration,ou=Groups,dc=ECEN
TRE
I get similar results when trying to delete an entry. If I use the command-line ldapmodify tool, it works fine. Is there a different syntax for the GUI-based import?
Thanks!
Gregg

Hi Gregg,
I'm afraid that the term import for the GUI means ADD and not apply a set of modifications.
Usually, import also imply that the current content of the database is removed.
DS6 has this new option to allow appending new entries instead of replacing the DB. The "add only" check box is meant for this.
I don't think there is a way to apply a set of changes from an LDIF file through the console. ldapmodify is the usual and default way to proceed.
Regards,
Ludovic.

Why does DNS server entry in ipconfig break point-to-point ethernet?

My application uses a panel pc as the user interface for a cRIO controlling a medical device. The panle pc and cRIO communicate using shared variables. During development, both devices (panel pc and cRIO) were on our company network. Curiously, when I connected them point-to-point with a crossover cable, they refused to communicate when running their LabVIEW application code. Pings from the panel pc to cRIO were successful. Much troubleshooting ensued.
Long story short, the fix was to simply delete the DNS server IP entry from both the panel pc and the cRIO ipconfig tables (see attached pic for the WinXP version of this table). If either of them had our company's DNS server IP address fillied in, my LabVIEW application would fail.
This leads me to suspect that there is something in my LabVIEW executables that wants to touch the company network. Apparently, if there is a DNS server entry in the ipconfig table, this something thinks it has a chance to "phone home" and it tries to do so. When this happens on the panel pc end of the crossover cable, the machine acts like it's locked up, but the task manager shows the CPU to be ~98% idle.
If there is no entry for a DNS server, I guess this something realizes that there is no way to "phone home", so it doesn't try and my application works great. Since the application works with no DNS server table entry, I think my crossover cable is working correctly.
Does anyone have any idea what this something might be?
Jeff
Climbing the Labview learning curve!
Sanarus Medical
Pleasanton, CA
Attachments:
IPform.gif ‏12 KB

You've hit the nail on the head Ben. For point to point communications, the IP addresses should be fixed, therefore there is no need for DNS. If a DNS is configured, the NIC (Network Interface Card) drivers will try to contact it.
In my test system, I need DNS for the test computer, but I am communicating with a dedicated Spectrum Analyzer over TCP/IP. So I added a second NIC. The main NIC is configured for DNS and all that jazz. The second NIC (plugged into PCI slot) is configured with a hard coded address, no DNS, no Gateway, nothing else. I connect that NIC to the spectrum analyzer using a crossover cable. The analyzer is configured with a hard coded address also. Now my computer can get on our company network, and the spectrum analyzer is isolated from the network, so it can't catch any viruses, etc., and it still talks to the computer. When using a configuration such as this, it is best to use a dedicated address for the 2nd NIC and spectrum analyzer in the range of 192.168.100.0 to 254
- tbob
Inventor of the WORM Global

Control BEx Analysis Grid context menu entries via VBA

Hey Forum,
I have kind of a tricky question for you. I want to control BEx Analysis Grid context menu entries via VBA, namely the Expand Hierarchy Node function when I right click on a Hierarchy node entry.
Does anyone know how to access this function via VBA?
I also thought about adding a BEx button and access it via VBA but I am lacking the correct Button Parameters to expand/collapse a hierarchy node.
Anyone has a tipp for me?
Thanks,
R.

Hello, DDrazdou and All too
Did you have any information about requested function?
I need to call binded transaction in R\3, and meanwhile, I just write wrapping functional module in the R\3, and making RFC call from VBA...
It seems to work fine, but may be the better(standart) way is posible.
with best regards, Alex.

The external credentials in the SSO database are more recent --- Receiving this error while adding entries to SSO database.

We are getting this error while adding entries to SSO database. Its working in other environments and failing in only environment. Please advice.
error MSB4018: The "BizTalk.BuildGenerator.Tasks.SSO.PopulateApplicationProperty" task fa
iled unexpectedly.\r
: error MSB4018: System.Runtime.InteropServices.COMException (0xC0002A40): The external cre
dentials in the SSO database are more recent.\r
error MSB4018: \r
error MSB4018:    at Microsoft.BizTalk.SSOClient.Interop.ISSOConfigStore.SetConfigInfo(St
ring applicationName, String identifier, IPropertyBag properties)\r
error MSB4
018:    at BizTalk.BuildGenerator.Tasks.SSO.SSOConfiguration.Write(String appNa
me, String propName, String propValue)\r
error MSB4018:    at BizTalk.BuildGenerator.Tasks.SSO.PopulateApplicationProperty.Execute
()\r
error MSB4018:    at Microsoft.Build.BackEnd.TaskExecutionHost.Microsoft.Build.BackEnd.IT
askExecutionHost.Execute()\r
error MSB4018:    at Microsoft.Build.BackEnd.TaskBuilder.ExecuteInstantiatedTask(ITaskExe
cutionHost taskExecutionHost, TaskLoggingContext taskLoggingContext, TaskHost t
askHost, ItemBucket bucket, TaskExecutionMode howToExecuteTask, Boolean& taskRe
sult)
Thanks, Pavan MCTS-Microsoft Biztalk Windows Server 2010

Hi,
This error generally arises when your system datetime is not in sync with the Domain Controller datetime. Try following steps:
1. Check if the Windows Time Service is running on your machine or not. Try restarting this service and then restart host instances. Then run your script.
2. If this does not works, have a look at this
link
Hope this will help.
HTH,
Sumit
Sumit Verma - MCTS BizTalk 2006/2010 - Please indicate "Mark as Answer" or "Mark as Helpful" if this post has answered the question

Sales Order Entry via Portal in R/3 4.7

Hi,
is there an iView (out of a Business Package) available for Sales Order Entry via Portal in R/3 4.7 ?
Or do we need to develop this from scratch?
Thanks & Regards,
Erik

Hi Erik,
The only one I found was in the Business package for Sales but it is listed for ERP2004 only. I found another one in the Business Package for Retail 50.2 that was 4.7 compatible but it is shown as out of maintenance and I was unable to download it. I didn't try very hard to get the download to work. You may want to take a look.
Good Luck,
John

How to get the only the changed or newly added entries in AFTER SAVE.

I have created table maintenance generated for a table,I want to get the newly added or changed entries while saving thats why im using AFTER SAVE event for the same,can anyone please tell me how to get the only the changed or newly added entries in AFTER SAVE.

Hi,
Welcome you post on the forum.
I have moved your thread here because it is in English and should not in the language specific forum. What is your system version?
Thanks,
Gordon

Access directory in remote server via SAP GUI

Dear experts:
My servers are with windows server 2003 OS, I want to access directories in a remote server via SAP GUI(in tcode AL11).
I have shared the directory in the remote server, and grant full control authrization to everyone. Then I map a driver to the shared diretory on SAP server,and I can open the diretory successfully. But when I add this diretory to SAP-directories(through tcode AL11), I can't open it in SAP GUI, when I doudle click on this directory, the error message occurs on the status bar:"Wrong order of calls <- CALL opendir: Not a directory(,,..)"
How can I fix this problem? Thanks!

> I have shared the directory in the remote server, and grant full control authrization to everyone. Then I map a driver to the shared diretory on SAP server,and I can open the diretory successfully.
Please note:
Driver letters are user dependent. So if you map the drive as administrator or <sid>adm it's not available for user SAPService<SID> (the user running the SAP system).
So the best thing to access directory is using UNC names like
\\<servername>\<share>
not drive letters.
Markus

WLC 2504 can't change WAP name or switch off CDP via WLC gui

Hi All,
Please can you assist? I have 1 x Cisco WLC 2504 & 2 x Cisco WAP AIR-CAP1602I-E-K9 running 7.4.100.60.
All three devices are installed and working correcty within a corporate environment. However, there are a few tweaks that I would like to do, to tidy up the configuration and switch certain elements on or off. For example, my core networking hardware is Huawei and I would like to switch off 'CDP' on the WAP's as the associated error messages are filling up my logging buffer on my switch. So, I https to my WLC, locate the WAP in question, goto 'interfaces' and untick the box for 'CDP state' hit apply, then I get the following error message "controller name is mandatory when controller ip address is configured" and then the tick reappears!
At present I have two WAP's. Both have static IP addresses and both are reachable on the network. The one WAP did allow me to change the name to something meaningful, but the other WAP would not let me and still has the default MAC address as its name. I have the same issue, when I try to change the name on the WAP it says "controller name is mandatory when controller ip address is configured"
I have also tried to CLI directly in to the WAP to make these alterations, but as soon as i launch 'putty' it quits out. I guess this is locked down once the WAP's associate with the WLC.
And around I go.... Someone must have been in this situation, what am i missing? Thanks in advance!

Hi Andy,
By default SSH & Telnet is disabled for WLC controlled APs. So you have to enable it first via WLC GUI in order to access the AP via telnet or SSH.
Wireless -> Select your AP -> Advanced -> Tick Telnet/SSH boxes.
If you could not change AP name via WLC GUI (it may be a bug), but as I said earlier try to change it via WLC CLI (not AP CLI itself). SSH to your WLC & then try the following.Old AP name is the one with its mac address.
(WLC) >config ap name
(WLC) >save config
Are you sure you want to save? (y/n) y
Configuration Saved
HTH
Rasika
*** Pls rate all useful responses ****

Adding entry in OID

Hi All
For resolving DB naming convention using OID, I have added entry as below for BSBGBAU1.smtest02
where smtest02 is new domain
dn :cn=BSBGBAU1,cn=OracleContext,dc=smtest02
objectclass: top
objectclass: orclNetService
cn:BSBGBAU1.smtest02
orclNetDescString: (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=smtest02)(PORT=1523))(CONNECT_DATA=(SID=BSBGBAU1)))
so when i execute the command tnsping bsbgbau1.smtest02 it show
/app/oracle/product/10203/network/admin/sqlnet.ora
Used LDAP adapter to resolve the alias
Attempting to contact (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=smtest02)(PORT=1523))(CONNECT_DATA=(SID=BSBGBAU1)))
OK (10 msec)
Now I want to resolve following using tnsping bsbgbau1 but it fails as below
TNS Ping Utility for Solaris: Version 10.2.0.3.0 - Production on 11-FEB-2009 11:58:06
Copyright (c) 1997, 2006, Oracle. All rights reserved.
Used parameter files:
/app/oracle/product/10203/network/admin/sqlnet.ora
TNS-03505: Failed to resolve name
How can this be resolved.
thax
Kedar

Your cn definition must be the same used on dn definition
dn: cn=BSBGBAU1,cn=OracleContext,dc=smtest02
cn: BSBGBAU1
--Julio

Adding blog entries via email

Suggestion: to add blog entries (text and/or photos) to iWeb via email.

I'd done something similar long ago, sent an email to my home machine, AppleScript intercepted the email, parsed the subject line and turned on X-10 power module. It was like having Tom Bodett at home.
As for iWeb, the concept is do-able. But at the current state, iWeb is not quite scriptable. You can add a photo blog entry, but it only has images property, so you can't enter any text for it.
Perhaps, next rev.

Unable to enter a Division for which I have proper credentials, via the GUI

I have a Division which I am unable to enter, either as a student or as the full site Administrator, from the GUI.
When I log into the main Site page, I see the link for the Division (as I should - I have DOWNLOAD permissions for the Division). However when I click the link (the thumbnail image) I am always, 100% of the time, rejected and sent to the login page. Ignoring that, I still have all of my proper credentials and may continue to freely access other parts of the site.
In the past, I had this exact behavior on (1) a Division "RobotCourses:PSYC" (Psychology), and (2) my main site breadcrumb, which appears at the top of the site page to the right of the "iTunes U" breadcrumb and says "Maiko Covington @ University of Illinois..." For reasons completely unknown to me, this behavior resolved itself yesterday, clicking both of those objects works as expected, although NO one at our site with any edit access did anything on the server.
However, the same behavior has now reappeared, this time on a Division "RobotCourses:CLCV" (Classical Civilizations). Again, I have not done any editing of that Division, nor had anyone logged into it (these Divisions are in a test area where I am developing automation tools).
I am, quite frankly, stumped. But I've done some investigation.
SETUP:
The Division has identity "RobotCourses:CLCV".
This Division contains a single Course with identity "RobotCourses:CLCV:CLCV115:CLCV115All-13564".
Both the Division and the Course are restricted to properly registered academic students. I have developed automation code in a login portal which grants credentials for RobotCourses:CLCV to students registered for courses in the CLCV department (Classical Civilizations) and credentials for RobotCourses:CLCV:CLCV115:CLCV115All-13564 to students registered for CLCV 115 (Classical Civilizations 115 - Mythology of Greece and Rome) specifically.
The Permissions set on RobotCourses:CLCV in particular are:
<Permission>
<Credential>Authenticated@urn:mace:itunesu.com:sites:illinois.edu</Credential>
<Access>No Access</Access>
</Permission>
<Permission>
<Credential>gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:CLCV</C redential>
<Access>Download</Access>
</Permission>
The point is to deny access to Authenticated@ (merely authenticated students) and then specifically grant it for people given a "gakusei" credential for RobotCourses:CLCV in particular.
(Note here that "gakusei" is a Japanese word meaning "student," I am using it in my credentials to ensure that my credentials and permissions are not affected by other credentials named "student" set at upper levels and used by some live users of the site, as we do not have a segregated development environment. It is our lowest level of access beyond mere Authenticated@..., designed to give students access to download and "surf to" Divisions and Courses.)
*LOGIN: ISSUING CREDENTIALS:*
The login portal code works successfully, and so when a student "Jane Doe" logs in, she is in fact given appropriate credentials (as she is actually registered for CLCV 115 here at UIUC). From the code generating her login URL, I see:
Issued credentials:
gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:CLCV
gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:CLCV:CLCV115:CLCV1 15All-13564
gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:STAT
gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:STAT:STAT100:STAT1 00X1-13570
(You can see she is also registered for STAT 100).
With the default login URL thus generated, she is taken to the top level of the Site in iTunes, and in fact sees thumbnail links for both STAT (Statistics) and CLCV (Classical Civilizations). Clicking on STAT takes her to the STAT Division where she can then enter the Course STAT 100 with no problems.
*PROBLEM: CAN'T GET TO CLCV FROM THE MAIN PAGE IN THE GUI*
HOWEVER! Clicking on CLCV brings up the login page. If she ignores the login page, she can still access the rest of the site, including STAT, just fine. Logging in again (reissuing her credentials) does not help the situation.
Note that this is not a problem only for Jane Doe, the same thing happens for anyone in CLCV and in fact happens for me as Administrator of the whole site with full access, even.
*ACCESS DIRECTLY TO THE DIVISION BY URL WORKS*
With a slight modification to the login to allow access directly to the RobotCourses:CLCV Division (by adding the handle of the Division to the end of the location), credentials are issued exactly as before:
Issued credentials:
gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:CLCV
gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:CLCV:CLCV115:CLCV1 15All-13564
gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:STAT
gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:STAT:STAT100:STAT1 00X1-13570
and she is taken to the Division page, SUCCESSFULLY. So, it seems she actually HAS access, as expected.
*ACCESS CONFIRMED WITH DEBUGGING:*
Writing some code to generate not the actual login URL but rather a link that takes me to an "iTunes U Access Debugging" page for the Division (figured this out by reading some other posts! :)) I am taken to a page with the following:
(at generated URL https://deimos.apple.com/WebObjects/Core.woa/Browse/illinois.edu.1945806043/xxx5 64?credentials=....)
Received
Destination illinois.edu.1945806043
Identity "Jane X Doe" <[email protected]> (jxdoe) [xxxxxxxxx]
Credentials gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:CLCV; gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:CLCV:CLCV115:CLCV1 15All-13564; gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:STAT; gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:STAT:STAT100:STAT1 00X1-13570
Time 1236877947
Signature 42ccef92a3298684a7a09eed45adb6b788a700c01645b8b423d33ace120650b0
Analysis
The destination string is valid and the corresponding destination item was found.
The identity string is valid and provides the following information:
Display Name Jane X Doe
Email Address [email protected]
Username jxdoe
User Identifier xxxxxxxxx
The credential string is valid and contains the following 4 recognized credentials:
1. gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:CLCV
2. gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:CLCV:CLCV115:CLCV1 15All-13564
3. gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:STAT
4. gakusei@urn:mace:itunesu.com:sites:illinois.edu:RobotCourses:STAT:STAT100:STAT1 00X1-13570
The time string is valid and corresponds to 2009-03-12 17:12:27Z.
The signature string is valid.
Access
Because the received signature and time were valid, the received identity and credentials were accepted by iTunes U.
In addition, the following 2 credentials were automatically added by iTunes U:
1. All@urn:mace:itunesu.com:sites:illinois.edu
2. Authenticated@urn:mace:itunesu.com:sites:illinois.edu
With these credentials, you have browsing and downloading access to the requested destination.
(In case you think to check the sums, be aware I've actually changed the student's name for this example.)
So, as expected, I have access, in fact the student DOES have access, visiting the Division page directly (specifiying its handle as part of the desired location).
*IT'S ONLY CLICKING THE THUMBNAIL ON THE MAIN PAGE THAT BREAKS*
Because the problem is only apparent when clicking the icon for the Division on the main Site page, I have no way (that I know of) to get any information about precisely WHAT is going on, what possibly differs in the GUI-click situation from the "generate me a URL that takes me right there" situation.
At that point I'm fully in the GUI, I'm not sending anything via web services, so I have no idea how I can proceed to debug this from here.
I'm also quite confused at the sudden appearance of this behavior, and the disappearance of this behavior from RobotCourses:PYSC, another Division that was broken in this same way all last week but which magically resumed allowing me access yesterday.
Any suggestions, hints, or advice would be very welcome. Has anyone else even seen behavior similar to this?
Thanks for any information you might have.

Maiko,
I'm confess I'm still trying to get a handle on your problem. You do a fantastic job of describing it ... but I'm just trying to picture it accurately in my head.
I think, were I in your shoes, I'd begin by looking at what the debug page has to say for the specific destination in which you're interested in fixing. In other words, I'm not clear on where, exactly, this destination points ...
Destination illinois.edu.1945806043
Is that your site, or the division within your site that you want to fix? "Normally", you do not need to specify a site handle to get to your site within your transfer CGI ... if you say "uillinois.edu", it's enough to transfer your users to iTunes U ... but every site still has a handle, and you could, if you wanted to, actually specify it in your transfer CGI. For example, this:
Destination uic.edu.1139051993
is for my entire site ... it's my site handle. Whereas this:
Destination uic.edu.1991288441
is for a division within my site ... but it's impossible to tell the difference between "site" and "division" from just the handle (I mean, if I didn't say "this is a site" and "this is a division", there'd be no way for you to know). So when I look at your creds and permissions on your debug page, I can't quite tell if they give you download access for your site, or for the specific division you want to fix. If you could open the debug page with your division as destination (or confirm that that's what we're looking at), it'd rule out some things.

DNS - NS entry on reverse lookup has changed - how to reset?

Hi,
When I view the DNS setup through the GUI in server admin everything looks as it should. However when I use Lookup in Network Utility there is a problem with the ns entry.
Using lookup on the servers FQDN (xserve.company.com) returns the correct NS entry, which is xserve.company.com. However when I query the servers IP address to perform a reverse lookup the NS entry shows ns.company.com
when I intially set up DNS all was checked and verified. Recently someone on site stopped some services and performed a hard reboot of the server as they thought it had frozen. Next time I came to the site to check things I noticed this NS entry discrepancy.
How do I or indeed can I get the NS entry on the reverse lookup back to xserve.company.com?
Thanks

Hi Jeff,
Config files in /var/named/zones appear to contain the incorrect NS entries
There are two files in the zones directory:
db.0.1.10.in-addr.arpa.zone.apple
**$TTL 10800**
**0.1.10.in-addr.arpa. IN SOA ns.company.com. admin.0.1.10.in-addr.arpa. (**
**2009031300 ;Serial**
**86400 ;Refresh**
**7200 ;Retry**
**2592000 ;Expire**
**345600 ;Negative caching TTL**
**0.1.10.in-addr.arpa. IN NS ns.company.com.**
**10.0.1.10.in-addr.arpa. IN PTR xserve.company.com.**
**db.0.1.10.in-addr.arpa.zone.apple (END)**
and
db.company.com.zone.apple
$TTL 10800
company.com. IN +SOA xserve+ john.company.com (
2009042901 ;Serial
86400 ;Refresh
3600 ;Retry
604800 ;Expire
345600 ;Negative caching TTL
company.com. IN +NS xserve+
xserve IN A 10.1.0.10
xserve IN HINFO "Apple XServe" "OSX Server 10.5.6"
db.company.com.zone.apple (END)
What I notice is that there are the incorrect NS entries in the reverse zone file but there are also differences in the forward zone file compared to another correctly working server - namely that in the above case the SOA and NS entry simply consist of the name xserve but on the other server these entries have the full domain name. (I italicized these entries so you know which I am referring to)
I guess my questions now are:
1) Should I go ahead and backup these files and edit the NS entries in the reverse zone file?
2) Should I also edit the forward zone file SOA and NS entries to the full domain name?
3) Should I stop the DNS service prior to making these changes and restart it afterwards or make the changes and then stop it and start it?
Thankyou very much for your patience and time.

DNS adding entries via SA GUI

Similar Messages

Maybe you are looking for