DNS Upgrade from 10.6.8 to 10.7.3

Hello,
I just upgraded from Snow Leopard Server 10.6.8 up to Lion Server 10.7.3. All services seemed to come through ok except DNS. None of the records on the server resolve anymore. I have setup forwarding IPs when the requested domain isn't in the local database, and those still seem to work becuase clients can still resolve external websites just fine, however no internal services resolve. I can't even get the server itself to resolve DNS entries even though its DNS server is set as 127.0.0.1.
Any ideas on how to get this working? I have started and stopped the DNS service, restarted the server and even removed the DNS service and re-added.
Help is much appreciated.
Just wanted to add this is what clients get if they try to resolve an internal site (from network utility). (192.168.2.10 is the IP of the server).
Lookup has started…
Trying "plex2.cinemiketheatres.com"
Received 44 bytes from 192.168.2.10#53 in 0 ms
Trying "plex2.cinemiketheatres.com.cinemiketheatres.com"
Host plex2.cinemiketheatres.com.cinemiketheatres.com not found: 2(SERVFAIL)
Received 65 bytes from 192.168.2.10#53 in 0 ms

Your records do not have a . at the end of the fully qualified host name so the request is reappending the search domain. Go back into Server Admin and review your A records. Make sure each one ends with a . as shown below.

Similar Messages

Server 2012 X64 R2 DNS Server keeps shutting down after inplace upgrade from Server 2012 X64

Hi,
ever since upgrading from Server 2012 X64 to Server 2012 R2 X64 my dns server keeps shutting down every several minutes before having to do a restart. When viewing the event log this is all I see..
The DNS Server service terminated unexpectedly. It has done this 497 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
if I look in the Application Error Log, I will also find the following:
Faulting application name: dns.exe, version: 6.3.9600.17031, time stamp: 0x530871fb
Faulting module name: dns.exe, version: 6.3.9600.17031, time stamp: 0x530871fb
Exception code: 0xc0000005
Fault offset: 0x000000000010b0e0
Faulting process id: 0x1740
Faulting application start time: 0x01cf531b2e3a7f5e
Faulting application path: C:\Windows\system32\dns.exe
Faulting module path: C:\Windows\system32\dns.exe
Report Id: 90a4ab37-bf0e-11e3-9446-003048df3f03
Faulting package full name:
Faulting package-relative application ID:
I have tried removing and then reinstalling the DNS Server role, but the same situation occurs..
thanks,

Hi,
I'm going crazy, I've upgraded my Server 2012 Standard to Server 2012 R2 Standard and now my DNS server keeps crashing since the in place upgrade. I have finally narrowed it down to it only crashes after several minutes if I load the data from
a file instead of the registry. As a test I:
-1- killed all my dns data,
-2- uninstalled the dns server role
-3- deleted the /windows/system32/dns directory
-4- reinstalled the DNS server role
-5- used the wizard to create a DNS server and a forward zone.
everything works okay, no crashes, then I change the advanced propertied of the DNS server to load from file, restart the DNS server and once again it crashes every 2 minutes..
Please help, this is killing me..
thanks in advance..

Would like to upgrade to Dragon Naturally Speaking 11 from DNS 6 (which would also entail a necessary upgrade from Windows 2000 to 7) but understand after all this expense and trouble, DNS upgrade may not be compatible with Firefox 6?

Question
Would like to upgrade to Dragon Naturally Speaking 11 from DNS 6 (which would also entail a necessary upgrade from Windows 2000 to 7) but understand after all this expense and trouble, DNS upgrade may not be compatible with Firefox 6?
Main priority is voice activation upgrade. Ideas about how to proceed appreciated!

AFAIK, it's been over three years since a WinXP laptop or desktop PC has been sold; I specifically bought a laptop in June 2008 because it was being clearanced by that retail chain to meet Microsoft's deadline, and got it real cheap. It was tagged for the store manager to purchase, but he let me have it because I exceeded his expectations for the services I performed for his store and thought I deserved it. Anything that wasn't made for Vista-compatibility will be very iffy with Win7, IMO - so that basically rules out anything that was made before like Oct or Nov 2007.
Unless another DNS 11 user happens to see this thread and can verify whether it works in Firefox 6.0 or not, I don't what to recommend except for you doing a web search to see what other DNS / Firefox users have to say about compatibility.

Upgrade from ICM 6 to 7 (TR) -- Domain conversion tool / UMT

Hi, we are currently upgrading from 6 to 7.0 and subsequently to 7.5 (TR, new hardware, new domain, new instance). So far we've staged our W2k3 domain and all the other soon to be ICM servers.
I'm currently trying to migrate the domain users and it tells me that I need to use the Domain Conversion Tool to go migrate the domain users from 6 to 7. (Staging guide chpter 4)
I can't find any documentation on the Domain Conversion Tool, when I run the executable I can see the different triggers (below) but that's it.
I've done an export and gotten a file but what next?
Do I do a convert now?
is the convert going to change my production database?
I'm also reading that the Domain Conversion Tool was replaced by the UMT (for 7.0 to 7.+).
Or should I now use the UMT and point it to my export file?
Im afraid to run the convert and and messing up my Rogger sideA database?
Has anybody use this tool?
any tips and or documentation is appreciated. Thanks
D:\ciscoutils\domainCnvTool>domcvt
The syntax of this command is:
DomCvt.exe /DB:dbname /F:filename /M:mode [/OD:old domain name]
          [/ND:new domain name][/P:password]
   /DB:dbname           Specifies the database name to operate on (e.g. cust1_sideA)
   /F:filename          Specifies the full path of the file to import or export to
   /M:mode              Indicates export mode or convert mode
                         E Export mode
                         C Convert mode
The following switches are only needed in Convert Mode:
   /OD:old domain name Specifies the old domain name to convert from in NetBIOS form (e.g. MyDomain)
   /ND:new domain name Specifies the new domain name to convert to in NetBIOS form (e.g. MyDomain) or DNS form (e.g. MyDomain.mycompany.com)
   /P:password          Specifies the default password to be set for all the users in the new domain
Use quotation marks when there are spaces in the file name or password

Hi,
From the 7.x(y) Staging Guide:　
Common Steps Required before Migrating any ICM ComponentOn the Domain Controllers:
Confirm that Domain Controllers have been upgraded from NT Domain to Windows 2000Active DirectoryOn the CallRouter Server:
　\RouterA\Router\CurrentVersion\Configuration\Global\DBMaintenance.
Note:
If moving a CICM with SideA and SideB disable the Configuration changes on bothsides.
On the Logger server:　
Copy the Domain Conversion Tool (DomCvt.exe) from the ICM 5.0(0) or ICM 6.0(0) Third-PartyTools CD as applicable (Domain Conversion Utility folder) onto the Logger server.
Export the ICM user list using the DomCvt tool using the following command:
domcvt /DB:<instancename>_sideA /F:c:\DomConvert\userlist.txt /M:E.
And then lower down in the guide:
On the Logger server:
Step 18
Run the Domain Conversion Tool to convert the ICM users exported earlier, using the followingcommand:
domcvt /DB: <instance_name>_sideA /F:c:\DomConvert\userlist.txt /M:C /OD:<old_domain_netbios_name> /ND: <new_domain_netbios_name>Note: You can use the /p option to create a global password. If you do not use the /p option,the password is reset to null.
I'm looking to run this myself shortly. The only caveat with this info is that its extracted from the section related to ICM5 and migration from multiple to single forest ... so possibly not the correct info. However, there's not much documentation on this as you've seen!
Jed

Need Some Immdiate Help in Upgradation from 10.2.0.3 to 11.2.0.3 RAC 2 Nod

Hi Experts,
I want to upgrade from 10.2.0.3 to 11.2.0.3.
I have a Linux platform in place. It is a 2 NODE RAC WITH ASM
1. All my IP Addresses( Public/Private/VIP) are placed in /etc/host file.
Q1: When we upgrade to 11g It will ask for SCAN IP, what should I do for that, I don't have DNS working in my organization, where Can I get SCAN IP and its port#?
2. There are few components Invalid, Which I feel may be hindrance for my up gradation, Could you please tell me if I can upgrade the database even if Let these components Invalid?
COMP_ID COMP_NAME VERSION STATUS
AMD OLAP Catalog 10.2.0.3.0 INVALID
APS OLAP Analytic Workspace 10.2.0.3.0 INVALID
XOQ Oracle OLAP API 10.2.0.3.0 INVALID
When I checked the Invalid objects I found lot of invalid objects, tried to compile them, few got compiled rest with compilation errors, However One I found very much related to this was package body.
PACKAGE BODY OLAPSYS.DBMS_AW_UTILITIE INVALID
Tried to compile it..threw errors.
I did some R&D after checking some Oracle notes..I could find ORA-36961: Oracle OLAP is not available...poping up.
SQL> BEGIN cwm2_olap_level_attribute.Create_Level_Attribute('olapsys' ,'cwm2iner_d1' ,'cwm2iner_da1' ,'cwm2iner_l1' ,'cwm2iner_la1' ,'display_name' ,'short_description' ,'description'); END;
ERROR at line 1:
ORA-12663: Services required by client not available on the server
ORA-36961: Oracle OLAP is not available.
ORA-06512: at "OLAPSYS.CWM2_OLAP_MANAGER", line 153
ORA-06512: at "OLAPSYS.CWM2_OLAP_MANAGER", line 181
ORA-06512: at "OLAPSYS.CWM2_OLAP_MANAGER", line 228
ORA-06512: at "OLAPSYS.CWM2_OLAP_MANAGER", line 561
ORA-06512: at "OLAPSYS.CWM2_OLAP_UTILITY", line 1540
ORA-01403: no data found
ORA-06512: at "OLAPSYS.CWM2_OLAP_LEVEL_ATTRIBUTE", line 45
ORA-06512: at "OLAPSYS.CWM2_OLAP_LEVEL_ATTRIBUTE", line 188
ORA-06512: at "OLAPSYS.CWM2_OLAP_LEVEL_ATTRIBUTE", line 294
ORA-06512: at line 1
=========
Thanks

Hi,
You need to use a different IP address for the SCAN VIP. In your example, it cannot be the same as dlpqcora1.
Also, if you are not using a DNS to resolve it, then be aware that only one IP address can be configured (from note +[ID 887522.1] 11gR2 Grid Infrastructure Single Client Access Name (SCAN) Explained+ ):
>
Instead of DNS or GNS, Can we use '/etc/hosts' to resolve SCAN?
Oracle strongly recommends that you do not configure SCAN VIP addresses in the hosts file. But if you use the hosts file to resolve SCAN name, you can have only one SCAN IP address.
If hosts file is used to resolve SCAN hostname, you will receive Cluster Verification Utility failure at end of installation (See NOTE 887471.1 for more details)
>
Regards.

Solaris 10 upgrade from U3 to U8

Hi Gurus,
I need to upgrade solaris 10 from U3 to U8, we tried a unsuccessful failure
after creating a boot environment when we tried to upgrade from DVD 10/09
with command
luupgrade -u BE -s /cdrom
it complaint about a one file in some path (not sure the exact file name)
/cdrom/SOLARIS_10/TOOLS/BOOT/PLATFORM/SUN4U
has anyone see this error before and
when we tried to upgrade from DVD directly with command
ok>boot cdrom -upgrade
it never asked me if i want to upgrade and do a fresh installation it just installed fresh OS.
any help is much apprecited.
BR,
Kapil+

With latest version of live upgrade you need to add -k <sysidcfg file> to upgrade line. The following is the
luupgrade command line that I most recently used
luupgrade -u -n <ABE name> -k /root/sysidcfg -s /cdrom/cdrom0
I have attached file that explains entries in sysidcfg.
Below is the sysidcfg file that I created for this servers.
root@xxxx # cat sysidcfg
name_service=DNS
domain_name=xx.xx.xx
name_server=xx.xx.xx.xx
network_interface=ge0 { hostname=xxx
ip_address=xx.xx.xx.xx
netmask=255.255.255.0
protocol_ipv6=no
default_route=xx.xx.xx.xx}
keyboard=US-English
system_locale=en_US
timezone=US/Central
terminal=sun-cmd
system_locale=C
Make sure that you get on the console when you reboot to the new OS. I always get some dumb question, such as "What is the terminal type?", when I upgrade the os.
You probably want to do an ls /cdrom (or whatever) and you should get something similiar to the following:
$ ls
Copyright boot
GPL_LGPL_Source_Offer.txt installer
Solaris_10 platform
Edited by: Paisley on Dec 15, 2010 8:19 AM

Upgrading from PIX to ASA 5512X

Hi everyone,
We are in the middle of upgrading from two PIX's to some new ASA5512X's. To give you some background on the situation we are upgrading these since the PIXs are fairly old. We had one extra that we had to use since one PIX has failed already. The guy that implemented the PIXs orginally was learning how to do so as he went so there is alot of needless config in the PIX, atleast from what I can tell. Another guy that works with me has done some configuration on the new ASAs and has done the majority of it so far. Today we went to install the new ASAs and switch everything over hoping it would work, but that didn't happen. It seems that there is something wrong with our NAT and ACLs somewhere along the lines. The way our network is laid out is that we have two school campus with a site-to-site VPN one is 172.17.0.0/16 and the other is 172.18.0.0/16. We also have a remote-access VPN on both ASA's. When we connected the new ASAs up and brought up the interfaces, nothing on the inside could ping the internet nor the other side. The VPN showed active on the ASA's and each ASA could ping the others outside interface, but that was it. I have posted the configs below. If anyone could help out I would GREATLY appreciate it! Thank you in advance!
ASA1:
: Saved
: Written by enable_15 at 04:26:18.240 CDT Tue Mar 12 2013
ASA Version 8.6(1)2
hostname dallasroadASA
enable password **** encrypted
passwd **** encrypted
names
interface GigabitEthernet0/0
nameif outside
security-level 0
ip address 70.x.x.x 255.255.255.0
interface GigabitEthernet0/1
nameif inside
security-level 100
ip address 172.18.1.1 255.255.255.0
interface GigabitEthernet0/2
shutdown
no nameif
no security-level
no ip address
interface GigabitEthernet0/3
shutdown
no nameif
no security-level
no ip address
interface GigabitEthernet0/4
shutdown
no nameif
no security-level
no ip address
interface GigabitEthernet0/5
shutdown
no nameif
no security-level
no ip address
interface Management0/0
nameif management
security-level 100
ip address 192.168.1.1 255.255.255.0
management-only
ftp mode passive
clock timezone CST -6
clock summer-time CDT recurring
dns domain-lookup inside
dns server-group DefaultDNS
name-server 172.18.2.21
name-server 172.18.2.20
object network WS_VLAN2
subnet 172.17.2.0 255.255.255.0
object network WS_VLAN3
subnet 172.17.3.0 255.255.255.0
object network WS_VLAN4
subnet 172.17.4.0 255.255.255.0
object network WS_VLAN5
subnet 172.17.5.0 255.255.255.0
object network WS_VLAN6
subnet 172.17.6.0 255.255.255.0
object network WS_VLAN7
subnet 172.17.7.0 255.255.255.0
object network WS_VLAN8
subnet 172.17.8.0 255.255.255.0
object network WS_VLAN9
subnet 172.17.9.0 255.255.255.0
object network WS_VLAN10
subnet 172.17.10.0 255.255.255.0
object network WS_VLAN11
subnet 172.17.11.0 255.255.255.0
object network WS_VLAN12
subnet 172.17.12.0 255.255.255.0
object network WS_VLAN13
subnet 172.17.13.0 255.255.255.0
object network WS_VLAN14
subnet 172.17.14.0 255.255.255.0
object network WS_VLAN15
subnet 172.17.15.0 255.255.255.0
object network WS_VLAN16
subnet 172.17.16.0 255.255.255.0
object network DR_VLAN2
subnet 172.18.2.0 255.255.255.0
object network DR_VLAN3
subnet 172.18.3.0 255.255.255.0
object network DR_VLAN4
subnet 172.18.4.0 255.255.255.0
object network DR_VLAN5
subnet 172.18.5.0 255.255.255.0
object network DR_VLAN6
subnet 172.18.6.0 255.255.255.0
object network DR_VLAN7
subnet 172.18.7.0 255.255.255.0
object network DR_VLAN8
subnet 172.18.8.0 255.255.255.0
object network DR_VLAN9
subnet 172.18.9.0 255.255.255.0
object network DR_VLAN10
subnet 172.18.10.0 255.255.255.0
object network DR_CORE_SW
host 172.18.2.1
object network dallasdns02_internal
host 172.18.2.21
object network faithdallas03_internal
host 172.18.2.20
object network dns_external
host 70.x.x.x
object network WorthStreet
subnet 172.17.0.0 255.255.0.0
object network DallasRoad
subnet 172.18.0.0 255.255.0.0
object-group network DALLAS_VLANS
network-object object DR_VLAN10
network-object object DR_VLAN2
network-object object DR_VLAN3
network-object object DR_VLAN4
network-object object DR_VLAN5
network-object object DR_VLAN6
network-object object DR_VLAN7
network-object object DR_VLAN8
network-object object DR_VLAN9
object-group network WORTH_VLANS
network-object object WS_VLAN10
network-object object WS_VLAN11
network-object object WS_VLAN12
network-object object WS_VLAN13
network-object object WS_VLAN14
network-object object WS_VLAN15
network-object object WS_VLAN16
network-object object WS_VLAN2
network-object object WS_VLAN3
network-object object WS_VLAN4
network-object object WS_VLAN5
network-object object WS_VLAN6
network-object object WS_VLAN7
network-object object WS_VLAN8
network-object object WS_VLAN9
object-group network dallasitnetwork
network-object host 172.18.2.20
network-object host 172.18.2.40
object-group protocol tcpudp
protocol-object udp
protocol-object tcp
object-group network dallasroaddns
network-object host 172.18.2.20
network-object host 172.18.2.21
object-group service tcpservices tcp
port-object eq ftp
port-object eq ftp-data
port-object eq www
port-object eq ssh
object-group network remotevpnnetwork
network-object 172.18.50.0 255.255.255.0
access-list L2LAccesslist extended permit ip 172.18.0.0 255.255.0.0 172.17.0.0 255.255.0.0
access-list NONAT extended permit ip any 172.18.50.0 255.255.255.0
access-list inside_inbound_access extended permit ip 172.18.0.0 255.255.0.0 172.17.0.0 255.255.0.0
access-list inside_inbound_access extended permit ip object-group dallasitnetwork any
access-list inside_inbound_access extended permit object-group tcpudp object-group dallasroaddns any eq domain
access-list inside_inbound_access extended permit ip host 172.18.4.10 any
access-list inside_inbound_access extended deny object-group tcpudp any any eq domain
access-list inside_inbound_access extended deny tcp any any eq smtp
access-list inside_inbound_access extended permit ip any any
access-list outside_inbound_access extended permit tcp any host 70.x.x.x object-group tcpservices
pager lines 24
mtu outside 1500
mtu inside 1500
mtu management 1500
ip local pool vpnaddresspool 172.18.50.0-172.18.50.255
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
nat (inside,outside) source static dallasdns02_internal dns_external
nat (inside,outside) source static faithdallas03_internal dns_external
nat (inside,outside) source dynamic any interface
nat (any,outside) source static remotevpnnetwork remotevpnnetwork destination static remotevpnnetwork remotevpnnetwork description NONAT for remote vpn users
nat (inside,outside) source static DallasRoad DallasRoad destination static WorthStreet WorthStreet
access-group outside_inbound_access in interface outside
access-group inside_inbound_access in interface inside
route outside 0.0.0.0 0.0.0.0 70.x.x.x 1
route inside 172.18.0.0 255.255.0.0 172.18.1.2 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
ldap attribute-map CISCOMAP
map-name VPNALLOW IETF-Radius-Class
map-value VPNALLOW FALSE NOACESS
map-value VPNALLOW TRUE ALLOWACCESS
dynamic-access-policy-record DfltAccessPolicy
aaa-server LDAP protocol ldap
aaa-server LDAP (inside) host 172.17.2.28
server-port 389
ldap-base-dn DC=campus,DC=fcschool,DC=org
ldap-scope subtree
ldap-naming-attribute sAMAccountName
ldap-login-password ****
ldap-login-dn CN=fcsadmin,CN=Users,DC=campus,DC=fcschool,DC=org
server-type microsoft
ldap-attribute-map CISCOMAP
user-identity default-domain LOCAL
aaa authentication ssh console LOCAL
http server enable
http 192.168.1.0 255.255.255.0 management
http 172.17.11.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
crypto ipsec ikev1 transform-set myset esp-aes-256 esp-sha-hmac
crypto map outside_map 10 match address L2LAccesslist
crypto map outside_map 10 set peer 71.x.x.x
crypto map outside_map 10 set ikev1 transform-set myset
crypto map outside_map 10 set reverse-route
crypto map outside_map interface outside
crypto ikev1 enable outside
crypto ikev1 policy 1
authentication pre-share
encryption aes
hash sha
group 2
lifetime 86400
crypto ikev1 policy 65535
authentication pre-share
encryption aes
hash sha
group 2
lifetime 86400
telnet timeout 5
ssh 172.18.0.0 255.255.0.0 inside
ssh 172.17.0.0 255.255.0.0 inside
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
group-policy NOACCESS internal
group-policy NOACCESS attributes
vpn-simultaneous-logins 0
vpn-tunnel-protocol ikev1
group-policy DfltGrpPolicy attributes
dns-server value 172.18.2.20
vpn-tunnel-protocol ikev1 l2tp-ipsec ssl-clientless
password-storage enable
group-policy DallasRoad internal
group-policy DallasRoad attributes
dns-server value 172.18.2.20 172.18.2.21
password-storage enable
default-domain value campus.fcschool.org
group-policy ALLOWACCESS internal
group-policy ALLOWACCESS attributes
banner value Now connected to the FCS Network
vpn-tunnel-protocol ikev1
username iwerkadmin password i6vIlW5ctGaR0l7n encrypted privilege 15
tunnel-group remoteaccessvpn type remote-access
tunnel-group remoteaccessvpn general-attributes
address-pool vpnaddresspool
authentication-server-group LDAP
tunnel-group 71.x.x.x type ipsec-l2l
tunnel-group 71.x.x.x ipsec-attributes
ikev1 pre-shared-key ****
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect ip-options
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
service-policy global_policy global
prompt hostname context
no call-home reporting anonymous
Cryptochecksum:fd69fbd7a2cb0a6a125308dd85302198
: end
ASA2:
: Saved
: Written by enable_15 at 09:27:47.579 UTC Tue Mar 12 2013
ASA Version 8.6(1)2
hostname worthstreetASA
enable password **** encrypted
passwd **** encrypted
names
interface GigabitEthernet0/0
nameif outside
security-level 0
ip address 71.x.x.x 255.255.255.0
interface GigabitEthernet0/1
nameif inside
security-level 100
ip address 172.17.1.1 255.255.255.0
interface GigabitEthernet0/2
shutdown
no nameif
no security-level
no ip address
interface GigabitEthernet0/3
shutdown
no nameif
no security-level
no ip address
interface GigabitEthernet0/4
shutdown
no nameif
no security-level
no ip address
interface GigabitEthernet0/5
shutdown
no nameif
no security-level
no ip address
interface Management0/0
nameif management
security-level 100
ip address 192.168.1.1 255.255.255.0
management-only
boot system disk0:/asa861-2-smp-k8.bin
ftp mode passive
dns domain-lookup inside
dns server-group DefaultDNS
name-server 172.17.2.23
name-server 172.17.2.28
object network mail_external
host 71.x.x.x
object network mail_internal
host 172.17.2.57
object network faweb_external
host 71.x.x.x
object network netclassroom_external
host 71.x.x.x
object network blackbaud_external
host 71.x.x.x
object network netclassroom_internal
host 172.17.2.41
object network nagios
host 208.x.x.x
object network DallasRoad_ASA
host 70.x.x.x
object network WS_VLAN2
subnet 172.17.2.0 255.255.255.0
object network WS_VLAN3
subnet 172.17.3.0 255.255.255.0
object network WS_VLAN4
subnet 172.17.4.0 255.255.255.0
object network WS_VLAN5
subnet 172.17.5.0 255.255.255.0
object network WS_VLAN6
subnet 172.17.6.0 255.255.255.0
object network WS_VLAN7
subnet 172.17.7.0 255.255.255.0
object network WS_VLAN8
subnet 172.17.8.0 255.255.255.0
object network WS_VLAN9
subnet 172.17.9.0 255.255.255.0
object network WS_VLAN10
subnet 172.17.10.0 255.255.255.0
object network WS_VLAN11
subnet 172.17.11.0 255.255.255.0
object network WS_VLAN12
subnet 172.17.12.0 255.255.255.0
object network WS_VLAN13
subnet 172.17.13.0 255.255.255.0
object network WS_VLAN14
subnet 172.17.14.0 255.255.255.0
object network WS_VLAN15
subnet 172.17.15.0 255.255.255.0
object network WS_VLAN16
subnet 172.17.16.0 255.255.255.0
object network DR_VLAN2
subnet 172.18.2.0 255.255.255.0
object network DR_VLAN3
subnet 172.18.3.0 255.255.255.0
object network DR_VLAN4
subnet 172.18.4.0 255.255.255.0
object network DR_VLAN5
subnet 172.18.5.0 255.255.255.0
object network DR_VLAN6
subnet 172.18.6.0 255.255.255.0
object network DR_VLAN7
subnet 172.18.7.0 255.255.255.0
object network DR_VLAN8
subnet 172.18.8.0 255.255.255.0
object network DR_VLAN9
subnet 172.18.9.0 255.255.255.0
object network DR_VLAN10
subnet 172.18.10.0 255.255.255.0
object network WS_CORE_SW
host 172.17.2.1
object network blackbaud_internal
host 172.17.2.26
object network spiceworks_internal
host 172.17.2.15
object network faweb_internal
host 172.17.2.31
object network spiceworks_external
host 71.x.x.x
object network WorthStreet
subnet 172.17.0.0 255.255.0.0
object network DallasRoad
subnet 172.18.0.0 255.255.0.0
object network remotevpnnetwork
subnet 172.17.50.0 255.255.255.0
object-group icmp-type echo_svc_group
icmp-object echo
icmp-object echo-reply
object-group service mail.fcshool.org_svc_group
service-object icmp
service-object icmp echo
service-object icmp echo-reply
service-object tcp destination eq www
service-object tcp destination eq https
service-object tcp destination eq imap4
service-object tcp destination eq pop3
service-object tcp destination eq smtp
object-group service nagios_svc_group tcp
port-object eq 12489
object-group service http_s_svc_group tcp
port-object eq www
port-object eq https
object-group network DALLAS_VLANS
network-object object DR_VLAN10
network-object object DR_VLAN2
network-object object DR_VLAN3
network-object object DR_VLAN4
network-object object DR_VLAN5
network-object object DR_VLAN6
network-object object DR_VLAN7
network-object object DR_VLAN8
network-object object DR_VLAN9
object-group network WORTH_VLANS
network-object object WS_VLAN10
network-object object WS_VLAN11
network-object object WS_VLAN12
network-object object WS_VLAN13
network-object object WS_VLAN14
network-object object WS_VLAN15
network-object object WS_VLAN16
network-object object WS_VLAN2
network-object object WS_VLAN3
network-object object WS_VLAN4
network-object object WS_VLAN5
network-object object WS_VLAN6
network-object object WS_VLAN7
network-object object WS_VLAN8
network-object object WS_VLAN9
object-group network MailServers
network-object host 172.17.2.57
network-object host 172.17.2.58
network-object host 172.17.2.17
object-group protocol DM_INLINE_PROTOCOL
protocol-object ip
protocol-object udp
protocol-object tcp
object-group network DNS_Servers
network-object host 172.17.2.23
network-object host 172.17.2.28
object-group protocol TCPUDP
protocol-object udp
protocol-object tcp
access-list outside_access_in extended permit object-group mail.fcshool.org_svc_group any object mail_internal
access-list outside_access_in extended permit tcp object nagios object mail_internal object-group nagios_svc_group
access-list outside_access_in extended permit tcp any object faweb_external object-group http_s_svc_group
access-list outside_access_in extended permit tcp any object netclassroom_external object-group http_s_svc_group
access-list outside_access_in extended permit tcp any object blackbaud_external eq https
access-list outside_access_in extended permit tcp any object spiceworks_external object-group http_s_svc_group
access-list L2LAccesslist extended permit ip 172.17.0.0 255.255.0.0 172.18.0.0 255.255.0.0
access-list inside_inbound extended permit object-group TCPUDP object-group DNS_Servers any eq domain
access-list inside_access_in extended permit object-group DM_INLINE_PROTOCOL host 172.17.15.10 any inactive
access-list inside_access_in extended permit tcp object-group MailServers any eq smtp
access-list inside_access_in extended permit tcp host 172.17.14.10 any eq smtp
access-list inside_access_in extended deny object-group TCPUDP any any eq domain
access-list inside_access_in extended deny tcp any any eq smtp
access-list inside_access_in extended permit ip any any
access-list vpn_access extended permit ip any any
pager lines 24
logging asdm informational
mtu outside 1500
mtu inside 1500
mtu management 1500
ip local pool vpnaddresspool 172.17.50.1-172.17.50.255
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-66114.bin
no asdm history enable
arp timeout 14400
nat (inside,outside) source static mail_internal mail_external
nat (inside,outside) source static netclassroom_internal netclassroom_external
nat (inside,outside) source static faweb_internal faweb_external
nat (inside,outside) source static spiceworks_internal interface
nat (inside,outside) source static blackbaud_internal blackbaud_external
nat (inside,outside) source dynamic any interface
nat (inside,outside) source static WorthStreet WorthStreet destination static DallasRoad DallasRoad
nat (any,outside) source static remotevpnnetwork remotevpnnetwork destination static remotevpnnetwork remotevpnnetwork description NONAT for remote vpn users
access-group outside_access_in in interface outside
access-group inside_access_in in interface inside
route outside 0.0.0.0 0.0.0.0 71.x.x.x 1
route inside 172.17.0.0 255.255.0.0 172.17.2.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
ldap attribute-map CISCOMAP
map-name VPNALLOW IETF-Radius-Class
map-value VPNALLOW FALSE NOACESS
map-value VPNALLOW TRUE ALLOWACCESS
dynamic-access-policy-record DfltAccessPolicy
network-acl vpn_access
aaa-server LDAP protocol ldap
aaa-server LDAP (inside) host 172.17.2.28
ldap-base-dn DC=campus,DC=fcschool,DC=org
ldap-scope subtree
ldap-naming-attribute sAMAccountName
ldap-login-password Iw@FCS730w
ldap-login-dn CN=VPN Admin,CN=Users,DC=campus,DC=fcschool,DC=org
server-type microsoft
ldap-attribute-map CISCOMAP
user-identity default-domain LOCAL
aaa authentication ssh console LOCAL
http server enable
http 192.168.1.0 255.255.255.0 management
http 172.17.0.0 255.255.0.0 inside
http 172.18.0.0 255.255.0.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
crypto ipsec ikev1 transform-set myset esp-aes-256 esp-sha-hmac
crypto map outside_map 10 match address L2LAccesslist
crypto map outside_map 10 set peer 70.x.x.x
crypto map outside_map 10 set ikev1 transform-set myset
crypto map outside_map 10 set reverse-route
crypto map outside_map interface outside
crypto ikev1 enable outside
crypto ikev1 policy 1
authentication pre-share
encryption aes
hash sha
group 2
lifetime 86400
crypto ikev1 policy 65535
authentication pre-share
encryption aes
hash sha
group 2
lifetime 86400
telnet 172.17.0.0 255.255.0.0 inside
telnet 172.18.0.0 255.255.0.0 inside
telnet 192.168.1.0 255.255.255.0 inside
telnet timeout 5
ssh 172.17.0.0 255.255.0.0 inside
ssh 172.18.0.0 255.255.0.0 inside
ssh 192.168.1.0 255.255.255.0 inside
ssh timeout 5
console timeout 0
management-access management
dhcpd address 192.168.1.2-192.168.1.254 management
dhcpd enable management
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
ssl encryption aes256-sha1 aes128-sha1 3des-sha1
webvpn
group-policy NOACCESS internal
group-policy NOACCESS attributes
vpn-simultaneous-logins 0
vpn-tunnel-protocol ikev1
group-policy ALLOWACCESS internal
group-policy ALLOWACCESS attributes
banner value Now connected to the FCS Network
vpn-tunnel-protocol ikev1
username iwerkadmin password i6vIlW5ctGaR0l7n encrypted privilege 15
tunnel-group 70.x.x.x type ipsec-l2l
tunnel-group 70.x.x.x ipsec-attributes
ikev1 pre-shared-key FC$vpnn3tw0rk
tunnel-group remoteaccessvpn type remote-access
tunnel-group remoteaccessvpn general-attributes
address-pool vpnaddresspool
authentication-server-group LDAP
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
service-policy global_policy global
prompt hostname context
no call-home reporting anonymous
Cryptochecksum:b599ba0f719f39b213e7f01fe55588ac
: end

Hi Derrick,
I just did the same for a customer; replaced 2 PIX515s failover cluster with 5512X. The NAT change is major with ASAs version 8.3 and later...
here's what you need: a manual NAT rule called twice NAT (policy NAT or NONAT is the old terminology) for the VPNs to work. also add the no-proxy-arp keyword:
nat (inside,outside) source static INSIDE_NETWORKS INSIDE_NETWORKS VPN_NETWORKS VPN_NETWORKS no-proxy-arp
nat (inside,outside) source static INSIDE_NETWORKS INSIDE_NETWORKS RA_VPN_NETWORKS RA_VPN_NETWORKS no-proxy-arp
then the dynamic PAT for internet access (after the twice NATs for VPN); could be a manual NAT like you did, or preferred an object NAT.
you did:
nat (inside,outside) source dynamic any interface
would also work with object nat:
object network INSIDE_NETWORKS
subnet ...
nat (inside,outside) dynamic interface
Same on the other side (except the networks are reversed since the inside network is now what the other side refers to as vpn network and vice versa)
If you don't put the no-proxy-arp, your NAT configuration will cause network issues.
also to be able to pass pings through ASA, add the following:
policy-map global_policy
class inspection_default
inspect icmp
The asa will do some basic inspection of the ICMP protocol with that config ex. it will make sure there is 1 echo-reply for each echo-request...
hope that helps,
Patrick

Cannot connect to internet after upgrade from 10.7.4 to 10.7.5

I have a new iMac and connect to internet with a data card (modem) Huawei E303.
It worked fine until after the upgrade from 10.7.4 to 10.7.5.
Now I can connect but there is no measurable signal. Other computers work using the same data card.

Hi, this has worked for a few...
Make a New Location, Using network locations in Mac OS X ...
http://support.apple.com/kb/HT2712
10.7 & 10.8…
System Preferences>Network, top of window>Locations>Edit Locations, little plus icon, give it a name.
10.5.x/10.6.x/10.7.x instructions...
System Preferences>Network, click on the little gear at the bottom next to the + & - icons, (unlock lock first if locked), choose Set Service Order.
The interface that connects to the Internet should be dragged to the top of the list.
For 10.5/10.6/10.7, System Preferences>Network, unlock the lock if need be, highlight the Interface you use to connect to Internet, click on the advanced button, click on the DNS tab, click on the little plus icon, then add these numbers...
208.67.222.222
208.67.220.220
Click OK.

In-place upgrade from Server 2012 to 2012R2 "just quits"

I have a TechNet subscription and am supposed to get "priority support" but I mistakenly asked my question in one of the forums that is not in the "priority support monitored" list. Included here by reference:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/bbbb34f2-e098-4f7d-b692-88e033869385/windows-server-2012r2-inplace-upgrade-from-2012-quotjust-quitsquot?forum=winserver2012r2previewsetup
Short description: On the 2012 DataCenter machine which serves as my Hyper-V host, I mount the install media and launch Setup. It starts, copies the temporary files ($windows.~bt) and then just quits.
Content of c:\windows\setupact.log:
2013-10-11 10:29:04, Info                  UI     Determining whether we should run ConX or legacy setup
2013-10-11 10:29:04, Info                  UI     Downlevel OS is server. Continue to run legacy setup
2013-10-11 10:29:04, Info                  UI     Determining if we are in WDS/Unattend mode
2013-10-11 10:29:04, Info                  UI     No need to hide autorun
2013-10-11 10:29:04, Info       [0x0a000a] UI     Autorun:Autorun core successfully initialized!!!
2013-10-11 10:29:04, Info       [0x0a000b] UI     Autorun:Autorun UI successfully initialized!!!
2013-10-11 10:29:04, Info                  UI     AppWindow has layout style 0
2013-10-11 10:29:04, Info                  UI     NavWindow has layout style 0
2013-10-11 10:29:04, Warning    [0x0a0180] UI     Failed to change the UI language to en-US.
2013-10-11 10:29:04, Info       [0x0a011c] UI     WizardDialogPost::SetActive
2013-10-11 10:29:09, Info       [0x0a018e] UI     Passing command line parameter ("H:\Sources\setup.exe /HideWelcome /uilanguage:en-US /targetlanguage:en-US") to IBS.
Would appreciate any suggestions that don't involve doing a detailed documentation capture of how the server is configured followed by a clean install, that is what I'm trying to avoid if possible.
I am not trying to do anything special or scripted, just a standard OS upgrade.

Hi Pepper, Malort, Robert and Brandon,
I am experiencing the same issue using either new release (april 2014) or the gold release 2012 R2 DVD from Volume license (SA) download. Both confirmed working on other installations. Setup just suddenly quits with the same non existent logs
files in $windows.~bt and c:\windows\setupact.log has a warning statement "Failed to change the UI language to en-US"
The server is running as a vm and would otherwise appear to be running perfectly. It is a DC(GC), DHCP, DNS & CA for my site.
Going to try System Update readiness Tool KB947821-v33.
Heads up MSFP Anne, any word on the cause and/or fix?
Regards,
Andre
Same here,
trying to upgrade a server 2008 R2 server running on hyper-v to server 2012 R2 with update1.
The server was a server 2008 and was upgraded to server 2008 R2.
This is the only log i can found:
2014-07-04 14:20:13, Info                  UI     Determining whether we should run ConX or legacy setup
2014-07-04 14:20:13, Info                  UI     Downlevel OS is server. Continue to run legacy setup
2014-07-04 14:20:13, Info                  UI     Determining if we are in WDS/Unattend mode
2014-07-04 14:20:14, Info                  UI     No need to hide autorun
2014-07-04 14:20:14, Info       [0x0a000a] UI     Autorun:Autorun core successfully initialized!!!
2014-07-04 14:20:14, Info       [0x0a000b] UI     Autorun:Autorun UI successfully initialized!!!
2014-07-04 14:20:14, Warning               UI     CLanguages::v_InitLanguage - Failed to load en-US resources with error 2. Will load fallback binaries
2014-07-04 14:20:15, Info                  UI     AppWindow has layout style 0
2014-07-04 14:20:15, Info                  UI     NavWindow has layout style 0
2014-07-04 14:20:15, Warning    [0x0a0180] UI     Failed to change the UI language to nl-NL.
2014-07-04 14:20:15, Warning               UI     CLanguages::v_InitLanguage - Failed to load en-US resources with error 2. Will load fallback binaries
2014-07-04 14:20:15, Info       [0x0a011c] UI     WizardDialogPost::SetActive
2014-07-04 14:20:16, Info       [0x0a018e] UI     Passing command line parameter ("D:\Sources\setup.exe /HideWelcome /uilanguage:nl-NL /targetlanguage:nl-NL") to IBS.
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 9 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 16 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 16 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 17 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 17 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 9 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 18 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 9 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 18 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 9 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 9 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 16 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 16 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 17 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 17 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 9 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 18 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 9 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 18 key on 0
2014-07-04 14:21:03, Warning    [0x0a0010] UI     WM_KEYUP for 9 key on 0

Upgrading from SBS2008 to 2012 Essentials

I'm upgrading from SBS2008 to 2012 Essentials. I understand that Essentials does not include everything that SBS did (Exchange, DC, DHCP, AD, DNS, SharePoint Companyweb, etc), so I'm guessing that I will need multiple servers. I'm trying
to figure out how to apportion and configure my overall system.
I have seen posts that indicate a recommendation to set up 2012 Standard R2 on the 1st physical server with Essentials R2 on a virtual server. And then using other virtual servers for other functions. Why would I do that? I don't understand
all the advantages and disadvantages of how to set up the various functions. Should I put Exchange server on a totally different physical machine, a server #2?
My number 1 server is a HP Proliant DL160 with dual quad core, 24GB ram and hardware RAID. What would you think would be best to install on that server and what would you put on another server?
skb

yeah...Windows Server 2012 Essentials no longer contains a built-in email service. However, it supports multiple email options that include Office 365, an on-premises server running Exchange
Server, and third-party hosted email services. If use on-premises server running Exchange Server, we do support running Exchange Server on a second server.
http://blogs.technet.com/b/sbs/archive/2012/07/26/email-options-supported-by-windows-server-2012-essentials.aspx
-->DC, DHCP, AD, DNS
you can normally transfer those roles, services and configure.
-->sharepoint
general similar steps...http://technet.microsoft.com/en-us/library/gg616007.aspx
in theory, can host Exchange server and sharepoint on one same windows server in physical machine...
Best,
Howtodo

Upgrade from 4.10.903 to 4.20

Are there any special upgrade procedures for upgrading from 4.10.903 (non-rpm version) to the latest public release? I did a rough test by copying /opt/tarantella to a test box and just installing the rpm files. After a bit of tweaking, it mostly seemed to work though couldnt fully test because the test box dns name is not the same as the production server.
Also, is untarring a copy of /opt/tarantella the proper way to rollback should the upgrade fail?
Thanks

Thanks for the links.
Unless I am just completely misreading these, the first document tells me that SGD now uses rpm, which I know because the files I have are rpm files, and the second document states that, if upgrading from "a previous version of 4.2", all optional packs must be uninstalled with 'rpm -e'. I am neither upgrading from a previous version of 4.2 and the optional packs weren't installed via rpm bus as shell scripts.
I guess the fact that there are no special instructions that I should just install via rpm and hope it comes back up.

R12.1.3 internal concurrent manager not running (upgraded from 11.5.10.2)

I have an instance that I have upgraded from 11.5.10.2 --> 12.1.1 --> 12.1.3 (db is 10.2.0.4)
oldservername CRMTESTAPP (still machine name)
newservername CRMR12 (alias in DNS and hosts to same machine)
After doing the upgrade I ran into an issue where the hostname.domainname was 31 characters long, which created an issue trying to start the ICM due to column limits in FND_CONCURRENT_PROCESSES (doc 413164.1)
We created an alias to the server that was shorter and I ran the adcfgclone to configure the instance with the new server name.
Everything ran, completed and the ICM will still not start. It seems to be looking for the FNDFS_oldservername instead of using the newservername
in FND_NODES only the newservername and authentication are listed. I shut everything down, ran cmclean.sql and I have also tried the CM Recovery wizard.
In OAM when you click the ICM, and click Edit it shows the newservername as the only node listed, yet still when you click Log you get:
"An error occurred while attempting to establish an Applications File Server connection with the node FNDFS_CRMTESTAPP. There may be a network configuration problem, or the TNS listener on node FNDFS_CRMTESTAPP may not be running. Please contact your system administrator."
Also when I click Internal Manager, then click the Environment button it seems to be referencing the old 11.5.10 install directories instead of the new ones.
How can I define which server the instance needs to use other than the methods I have tried?
Thanks

None of the env files reference the old host
What about other CMs?
All are defined as the correct node
Can you find any errors in the CM log file?
None other than the 30 chararcter limit error.
If the internal manager shows the correct hostname, then you should find it in the table. For now, take a backup of this table, and update the target_node column for all CMs and try again.
I have updated the table, however it doesn't make a difference because none of the other CM will run without the ICM running according to their diagnostic logs.
I was looking through document 413164.1 and noticed it said that hostname / domainname has to be less than 30 characters. Is this to say hostname has to be less than 30 AND domainname has to be less than 30 OR hostname.domainname together have to be less than 30?
I also looked on our current 11.5.10.2 instance which has the same 30 character limit on the node_name column in fnd_concurrent_queues and it only populates with hostname. Which I assume is what R12 would do as well, which means I am well under the 30 character limit for just node_name.
Is there something I can trace to see what the insert statement is trying to put into the node_name column? The ICM according to OAM is still configured to point to the old 11.5.10 home as opposed to the new 12 home? Autoconfig files have nothing to reference the old home that I have found, where does the ICM pull the environment settings from?
Thanks again

IDS5.1 SP1 upgrade from 5.1 - Solaris

Hi,
We are trying to upgrade from 5.1 to 5.1 SP1 on Solaris. Ran the idsktune, and installed necessary patches. Made sure that admin server and slapd is running before istallation. Got the following error
ERROR: Could not update Directory Server Instance
URL ldap://ldaptest.server.com:389/o=NetscapeRoot user id admin DN cn=slapd-ldaptest-ldap01-389, cn=iPlanet Directory Server, cn=Server Group, cn=ldaptest.server.com, ou=server.com, o=NetscapeRoot (19:Constraint violation)
ERROR. Failure installing iPlanet Directory Server. Do you want to continue [n]?
Any Ideas ?
Thanks
Chandra mouli.

Hi,
Was this problem ever resolved? I'm having an almost identical problem when upgrading 5.1 to 5.1sp1 (gives a 153:unknown error rather than 19). We're running Solaris 8, local hosts, no NIS, no DNS.
Cheers
Simon

Extensions break on upgrade from 10.3.9-10.4.x

Hi folks,
I just did an upgrade from 10.3.9 to 10.4.8 on a fairly well upgraded Sawtooth (dual 1 gig proc, 2 gig RAM, 250 gig SATA HDs in a mirrored RAID).
I'm getting errors on startup that several extensions "weren't installed correctly" and I'm wondering if any of them are particularly critical for anything I do on this machine, which is used as a web/mysql/dns server. The extensions are:
OpenOWScreamerAudio.kext
OpenScreamerAudio.kext
GossamerNDRVSupport.kext
PatchedBlockStorageDrive.kext
Thanks.

Yikes. It's getting worse.
Now the cache for my SIIG sata controller isn't accepted any more... system/library/caches/com.apple.romextensions/SIIG3512ER4.kext
and my SATA drives aren't showing up.
The full scenario is this:
1) Use the Disk Util Restore function to copy the contents of my mirrored RAID (two 250 gig sata drives) onto an external firewire drive.
2) Run the update from 10.3.8 to 10.4.8 on the firewire drive on a separate machine. Test. Runs OK except for the extension problem in my earlier post, which doesn't seem to affect functionality.
3) After running for a couple days from the fw drive with no further trouble, use Disk Utility's Restore to overwrite the 10 3 9 version on the RAID with the newer 10.4.8 version. Run "repair permissions" on the RAID. After that, the RAID drives are greyed out in DU's left panel. Restart DU with intent to run Repair Disk, but RAID drives don't even mount and aren't visible for mounting.
4) reboot. No progress.

I upgraded from 3gs and want to use my old 3gs as an ipod. how can i update my new apple ID on the 3gs as it still shows a previous one that I had?

I recently upgraded from 3Gs to Iphone4 and want to use my old 3Gs as an ipod. how can i update
the user ID on the 3gs to a new one that I have as it is still showing a previous user ID?

Settings>Store...tap the ID shown...sign out...sign back in with the ID you want to use.

DNS Upgrade from 10.6.8 to 10.7.3

Similar Messages

Maybe you are looking for