Failover between server farms

Hi,
I'm requesting advise on problem below :
- I have 2 datacenter with one server farm on each DC and 5 servers behind each server farm
- each server has 5k max connection limit on each server farm
- I want to be able to be able to failover to one SF to another when max connection for the server farm reach 25k (that mean each of 5 servers has reached its max conn)
Can I do that with partial-threshold ?
in Cisco documentation it's stated : "
Each time that a server is taken out of service (for example, using the CLI, a probe failure, or the retcode threshold is exceeded), the ACE is updated"
Would max-conn exceed be equivalent to "out of service" ?
thanks for any contribution
cheers

Hi,
I beleive Cisco ACE platform because of H/w design will not do failover for partial-threshold when primary server farms servers reached "MAXCONN" state and partial-threshold trigger. you will observe connection drop in that condition.
for your setup i will suggest to use simple backup server farm with no partial threshold. this work and when all the server in serverfarm are no longer usable (out of service or maxconn) back server farm will be activated.

Similar Messages

Failover for server farm

If you have a basic configuration on the ACE which consists of
VIP --> serverfarm -----> server1
                           -----> server 2
if one of the servers is removed or fails will the ACE detect this without probes being configured? and if so how does it detect the failure?
thanks

When you doesn't configure probe, ACE only detects server down with arp table.
It mean rserver goes down when arp timer is expired and rserver state will become ARP_FAILED.
Default arp timeout of rserver is 300 seconds as below.
ACE20/Admin# sh arp timeout
Context:Admin
Refresh Time:
   Learned Address      : 14400 seconds
   Configured Address   : 300 seconds
Retry Rate              : 10 seconds
Max retries per host    : 3
Periodic Sync Interval : 5
You can change this value with 'arp interval' command on configuration mode.
However, this configuration change effects all configured address.
So, I recommend you configure probe.
Regards,
Yuji

How to properly load balance between diffrent server farms.

Hi experts,
We are using an ACE 4710. We chose for our server farms to load balance using the least_connections predictor. it seems to work fine inside the same server farm but is it working properly between server farms? It doesn't seem because some of my real servers seems to be more loaded than others. Each server farm are using the same real servers.
Any idea about what is the problem or any suggestion regarding the best load balancing predictor we should use using this kind of configuration?
Thank's to all.

The ACE uses load-balancing algorithms or predictors to determine how to balance the traffic among the devices configured in the server farms, independent of the device type. For FWLB, we recommend that you use only the hash address source and the hash address destination predictors. Using any other predictor with FWLB may fail and block traffic, especially for applications that have separate control and data channels.
Here is the configuration guide for the Cisco ACE 4700 Series Appliance Server Load-Balancing.
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA1_7_/configuration/slb/guide/fwldbal.html

In a Sharepoint 2013 Server farm how far away can the backup of failover cluster servers be located away from the primary servers

Hello Community
    When you setup a Sharepoint 2013 Server farm
if you want to provide failover clustering, can
the servers that the Sharepoint 2013 Server farm
failover to be located off-site in a different
location (i.e. how far away can the servers the
the primary server in the Sharepoint 2013 Server
farm be away from the failover cluster of backup
Sharepoint 2013 Server farm servers in distance?
    Thank you
    Shabeaut

Hiya,
this article describes in detail the different aspects of creating a highly available SharePoint 2013 server farm.
Create a high availability architecture and strategy for SharePoint 2013
http://technet.microsoft.com/en-us/library/cc748824%28v=office.15%29.aspx

VIP still reachable even if primary server farm is down

Hi,
I want to make sure that the a VIP is not PING-able anymore when the primary server farm is down (all servers are down).
For that I have the following configuration :
serverfarm host NCL_FARM_TEST
probe NCL_PROBE_HTTP
rserver CHPAUN028 443
inservice
policy-map type loadbalance http first-match L7_POLICY_NCL_TEST_HTTP
description *** Load balancing rule for test in http mode ***
class L7_CLASS_TEST
serverfarm NCL_FARM_TEST backup NCL_REDIRECT_FARM_SORRY
compress default-method gzip
insert-http Source-IP header-value "%is"
insert-http Remote-Port header-value "%pd"
ssl-proxy client NCL_SSL_CLIENT
policy-map multi-match VIP_PROD_AND_TEST
class L4_CLASS_NCL_TEST_HTTP
loadbalance vip inservice
loadbalance policy L7_POLICY_NCL_TEST_HTTP
loadbalance vip icmp-reply active primary-inservice
nat dynamic 2 vlan 115
appl-parameter http advanced-options NCL_HTTP_PARAM
While testing this feature, I realize that the VIP is still reachable (PING), even if the server in the farm is in PROBE_FAILED status (For test, I have only one srserver in the farm).
Here is the server farm status, while PING is still possible :
CH01AC03/P-115-A# sh serverfarm NCL_FARM_TEST detail
serverfarm : NCL_FARM_TEST, type: HOST
total rservers : 1
active rservers: 0
description : *** Test Server Farm ***
state : INACTIVE
predictor : ROUNDROBIN
failaction : -
back-inservice : 0
partial-threshold : 0
num times failover : 27
num times back inservice : 28
total conn-dropcount : 0
Probe(s) :
NCL_PROBE_HTTP, type = HTTP
----------connections-----------
real weight state current total failures
---+---------------------+------+------------+----------+----------+---------
rserver: CHPAUN028
10.240.3.128:443 8 PROBE-FAILED 0 609 8
description : -
max-conns : - , out-of-rotation count : -
min-conns : -
conn-rate-limit : - , out-of-rotation count : -
bandwidth-rate-limit : - , out-of-rotation count : -
retcode out-of-rotation count : -
In the documentation, the following is written regarding the command "vip loadbalance icmp-reply active primary-inservice" it is stated that the ACE shold discard ping packets if all servers in the primary server farm are down.
I probably missed something, but what ?
Here is the service-policy status :
Policy-map : VIP_PROD_AND_TEST
Status : ACTIVE
Interface: vlan 1 115
class: L4_CLASS_NCL_TEST_HTTP
nat:
nat dynamic 2 vlan 115
curr conns : 0 , hit count : 56
dropped conns : 0
client pkt count : 809 , client byte count: 231750
server pkt count : 1262 , server byte count: 1375334
conn-rate-limit : 0 , drop-count : 0
bandwidth-rate-limit : 0 , drop-count : 0
loadbalance:
L7 loadbalance policy: L7_POLICY_NCL_TEST_HTTP
VIP ICMP Reply : ENABLED-WHEN-PRIMARY-SF-UP
VIP State: INSERVICE
Persistence Rebalance: ENABLED
curr conns : 0 , hit count : 56
dropped conns : 0
client pkt count : 809 , client byte count: 231750
server pkt count : 1262 , server byte count: 1375334
conn-rate-limit : 0 , drop-count : 0
bandwidth-rate-limit : 0 , drop-count : 0
compression:
bytes_in : 1052393
bytes_out : 309229
Compression ratio : 70.61%
Parameter-map(s):
NCL_HTTP_PARAM
Thank you for any hints,
Yves Haemmerli

Gilles,
I have effectively four diferent policy maps :
- one for PROD when the client arrives withh HTTP
- one for PROD when the client arrives with HTTPS
- one for TEST when the client arrives with HTTP
one for TEST when the client arrives with HTTPS
However, the PROD and the TEST environemnts use different server farms. I am testing the icmp-reply feature on the TEST environment. In the TEST environment, both Layer-7 policy maps use the same server farm.
Here are the four polici maps :
policy-map type loadbalance http first-match L7_POLICY_NCL_PROD_HTTP
description *** Load balancing rule for production in http mode ***
class L7_CLASS_PROD
serverfarm NCL_FARM_PROD backup NCL_REDIRECT_FARM_SORRY
insert-http Source-IP header-value "%is"
insert-http Remote-Port header-value "%pd"
ssl-proxy client NCL_SSL_CLIENT
class L7_CLASS_REDIRECT
serverfarm NCL_REDIRECT_FARM_PROD_HTTP
policy-map type loadbalance http first-match L7_POLICY_NCL_PROD_HTTPS
description *** Load balancing rule for production in https mode ***
class L7_CLASS_PROD
serverfarm NCL_FARM_PROD backup NCL_REDIRECT_FARM_SORRY
insert-http Source-IP header-value "%is"
insert-http Remote-Port header-value "%pd"
ssl-proxy client NCL_SSL_CLIENT
class L7_CLASS_REDIRECT
serverfarm NCL_REDIRECT_FARM_PROD_HTTPS
policy-map type loadbalance http first-match L7_POLICY_NCL_TEST_HTTP
description *** Load balancing rule for test in http mode ***
class L7_CLASS_TEST
serverfarm NCL_FARM_TEST backup NCL_REDIRECT_FARM_SORRY
compress default-method gzip
insert-http Source-IP header-value "%is"
insert-http Remote-Port header-value "%pd"
ssl-proxy client NCL_SSL_CLIENT
class L7_CLASS_REDIRECT
serverfarm NCL_REDIRECT_FARM_TEST_HTTP
policy-map type loadbalance http first-match L7_POLICY_NCL_TEST_HTTPS
description *** Load balancing rule for test in https mode ***
class L7_CLASS_TEST
serverfarm NCL_FARM_TEST backup NCL_REDIRECT_FARM_SORRY
insert-http Source-IP header-value "%is"
insert-http Remote-Port header-value "%pd"
ssl-proxy client NCL_SSL_CLIENT
class L7_CLASS_REDIRECT
serverfarm NCL_REDIRECT_FARM_TEST_HTTPS
Yves

Move Project Server to a new Server Farm

I would like to migrate Project server environment along with Project and Resource Data from one server farm to another farm. The environment has customized with custom Enterprise Templates, fields and lookups. Servers in the earlier farm are in a different
AD (Active Directory) environment. So, the new server farm would be in a new Active Directory.
I would like get the key steps and procedure to move Project Server across the two environments. Would the Database attach and detach process work? Any help in this regard will be appreciated.

Abhijit,
I personally did not have to do this, but it seems to me that there needs to be a trust set up between both AD Environments. Also, the service accounts will need to have appropriate access on the restored databases.
Please refer this link for more information:
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/MS-SharePoint/Q_27154301.html
Alternatively, you could use a third party tool like FluentBooks to migrate the data. Still think that the AD users need to be migrated first.
Cheers,
Prasanna Adavi, Project MVP
Blog:
Podcast:
Twitter:
LinkedIn:

Server Farm Firewalling

Hi,
My name is Jay Kishan and I am currently working as a network administrator in my company. We have just finished first phase of implementing Server Farm in our Data Center i.e. all servers in a different VLAN and all users in a separate VLAN. (Actually we have 6 different VLANs for users based on what floor they reside on but lets just call it a single User VLAN).
Anyways, so now my manager wants me to put a firewall in between the Server VLAN and the User VLAN. We have around 80 servers running different applications. I think that by putting a firewall in between the two VLANs will have a performance hit since the throughput required between the two VLANs is way too much for a normal firewall to support.
I just want to know the best practice the industry follows for firewalling in a server farm and the main reasons for it. I am searching for some solution myself but would really appreciate any help. As far as I could find, only critical servers are placed behind a firewall in a separate VLAN and inbound and outbound traffic for that VLAN is passed through the firewall. Also, what is the best thing to do. Place a separate hardware firewall like ASA5510 or use FWSM in Cisco 6500.
Thanks in advance.
- Jay

Hi,My
name is Jay Kishan and I am currently working as a network
administrator in my company. We have just finished first phase of
implementing Server Farm in our Data Center i.e. all servers in a
different VLAN and all users in a separate VLAN. (Actually we have 6
different VLANs for users based on what floor they reside on but lets
just call it a single User VLAN).Anyways,
so now my manager wants me to put a firewall in between the Server VLAN
and the User VLAN. We have around 80 servers running different
applications. I think that by putting a firewall in between the two
VLANs will have a performance hit since the throughput required between
the two VLANs is way too much for a normal firewall to support.I
just want to know the best practice the industry follows for
firewalling in a server farm and the main reasons for it. I am
searching for some solution myself but would really appreciate any
help. As far as I could find, only critical servers are placed behind a
firewall in a separate VLAN and inbound and outbound traffic for that
VLAN is passed through the firewall. Also, what is the best thing to
do. Place a separate hardware firewall like ASA5510 or use FWSM in
Cisco 6500.Thanks in advance.- Jay
Hi Jay,
Best recoomended practice is used to have server behind the firewall, so that restricted access will be graneted via firewall on these servers,which can be achived via acl deployment on switches.But firewall will give addionalt feature for blocking with stateful inspection and stateful failovers.
The ASA supports firewalling/VPN/IPS/IDS/Content filtering so it is a fully featured security device and The FWSM is a module that goes into a 6500 chassis but it is important to note that it is only a firewall ie. it doesn't support IDS/IPS/VPN etc.
So upto your choice how want to segregate the vlan traffic using firewall.
Hope to Help !!
Ganesh.H
Remember to rate the helpful post

Securing Server Farm

Hi all,
To securing server in data center, we have to deploy firewall and ips. My question is, do firewall and ips need to securing traffic between server (different subnet, like database server and application server) or just securing traffic between outside server farm and server farm ?
Thanks

It's up to you in the end but I would recommend having your database servers firewalled from anything else.
The database servers are some of the most important servers in any company and they usually need the highest level of protection.
When I was involved with an Oracle setup we had our database servers on their own vlan behind a firewall which was Oracle's recommendation. Only the application servers were allowed to initiate connections to them and there was no direct access to the database servers except for the admins.
And if you have multiple database servers on the same vlan, if there is no need for them to communicate with each other you can also use private vlans to segregate them within the vlan.
Jon

Server Farm Design Guides

Hey guys,
Can anyone shed any light on the "U Design" server farm building block.
Typically, we have a server farm distribution pair of switches and the server farm access switches connect to both distribution switches in the typical "V design". Now there is the concept of the "U design" where server farm access switch one, does not connect to both switches, but connects to one distribution switch and another access switch and the other access switch in-turn connects to the other server farm distribution switch.
Does anyone have any guidlines to this design? ie, this is only for dual attached servers?
The reason is that I see this box shape design as having a problem, if you were to lose the etherchannel between the server farm access switches. If you lose a switch, this should be OK "IF" you have your VLANs configured correctly,
Please could someone get back to me either saying "what the hell are you on about" or "there are guildines to this design?"
Very kind regards,
Ken

I can recommend only V-shaped design as it provides great redundancy in case of almost any failures. As you said, if etherchannel fails b/w two access switches, then the Acess-switch-1 and UP to Serverfarmswitch-1 is completely isolated from the other. I believe, even for dual attached servers also, V-shape design suits best.

Server farm design under 3 tier design

Hi guys,
Just wondering which is best practise?
connect server farm into distribution switches or connect directly to core switches?
Understand from different articles stated different methology but from what i see in cisco network design, server farm is always connected to the distribution switches.
What other factors to consider when connecting to distribution and when to consider when connecting to core ?
Thanks

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Jon, very nice reply. Thanks for joining this thread.
This makes sense because what real value would a dedicated core provide. If traffic is routing between vlans it does this on the distro switches and the only time it routes anywhere else is to the WAN and you do not high speed core switches to do this.
Yep, in in my cited example, the 4th 6509 uses its 6708's for two off-site 10g links.
I have also done the same as Joseph and connected servers to a collapsed pair of distro/core switches primarily because of cost but also because your core/distro switches tend to have the greater throughput so it is a logical place to put them.. In addition because they are on the core/distro switches you do not have to worry about oversubscribing uplinks from a different pair of switches, although there might still be oversubscription on the core/distro switches.
Re: cost, again, yep, why buy another box?
Re: greater throughput, also again, yep, for example, note I noted 4th box is all CEF720, i.e. all fabric, vs. classic bus in user 6509s.
Re: oversubscription, and again, yep, 4th 6509's server 6748 cards are 40 Gbps to fabric, vs. gig or even 10g uplinks from a separate server switch.
Jon, one reason I enjoyed, so much, reading you've done similar for similar reasons, late last year the business unit came to me and told me they want a separate dual core to increase reliability (as call centers are considered critical). I noted that, yes, adding a second "core" box, by adding a redundant chassis (vs. the single chassis with redundant everything else) would decrease the MTBF by about 2 hours a year for the off-site links (expensively, IMO, for those 2 hours, but as they are footing the bill, who am I to say no), but I didn't see any advantage for adding another (2nd) "core" box (vs. continuing using the existing box as a collapsed core). Well I got overruled because you just can't share a "core" device for anything else .
Unfortunately, a case of, I think, some reading some design guides, which say "core" devices do X, and so therefore, you can never do otherwise. Again, so very much enjoyed reading someone else not following the 3 tier model, always, literally.

CSM: Is it possible to access IPv4 server farms via IPv6 vIP?

Dear all
Before we start a more extensive testing programme I would like to ask the experts whether or not it should be possible to access already existing server farms (with IPv4 vIP) via an additional IPv6 vIP configured on the load balancer.
The system in question is 6509 with Sup720 and CSM WS-X6066-SLB-APC.
The idea is simple: Take an existing server farm (running completely on v4) and add an additional v6 vIP on the load balancer without the need to change the actual v4 networking behind the load balancer.
Might this work (at least for some protocols like http, ftp, etc.)?
Any "yes" or "no" or "maybe" or "with restrictions" appreciated.;)
Thanks in advance,
Grischa

Fairly sure this isn't possible. Unless I've missed something, the CSM doesn't support IPv6 at all. Even if it did, I don't think a v6 VIP to a v4 real would work. The only place I've seen this work was on a NetScaler, because the NetScaler holds independent connections open to the client and to the servers as a HTTP proxy, passing the request between the two. I forget how the ACE operates; it may be able to act as a proxy, but don't think it supports v6 either.
v6 support on CSMs would be totally awesome, but I'm not holding my breath.

How can i improve sharepoint server farm scalability

Hi,
How can i improve sharepoint server farm scalability, like currently 1000 users can access my SharePoint.
Now i am looking to improve my SharePoint users scalability (1000 to 2000) , How can i
do this and how can i improve my SharePoint performance
Prakash

Scale up or scale out.
Either provide your SharePoint servers with more CPU and RAM (scaling up) or add more servers to the farm (scaling out) to allow the load to be shared between the servers.
The exact breakdown depends on the details of your implementation.

When connecting to a server farm in sharepoint foundation 2013 cannot create new farm error: One or more types failed to load

When trying to create a new server farm in the sharepoint foundation 2013 we get a following error :
The local farm is not accessible. Cmdlets with FeatureDependencyId are not registered.
PS C:\Users\Administrator> New-SPConfigurationDatabase
cmdlet New-SPConfigurationDatabase at command pipeline position 1
Supply values for the following parameters:
DatabaseName: SharePoint_Config
DatabaseServer: PC78\SQLEXPRESS,25111
FarmCredentials
Passphrase: *********
New-SPConfigurationDatabase : One or more types failed to load. Please refer
to the upgrade log for more details.
At line:1 char:1
+ New-SPConfigurationDatabase
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (Microsoft.Share...urationDatabase:
SPCmdletNewSPConfigurationDatabase) [New-SPConfigurationDatabase], SPUpgra
deException
+ FullyQualifiedErrorId : Microsoft.SharePoint.PowerShell.SPCmdletNewSPCon
figurationDatabase
And the error log is shown below :
Microsoft.SharePoint.Upgrade.SPUpgradeException: One or more types failed to load.
Please refer to the upgrade log for more details.
at Microsoft.SharePoint.Upgrade.SPActionSequence.LoadUpgradeActions()
at Microsoft.SharePoint.Upgrade.SPActionSequence.get_ActionsInternal()
at Microsoft.SharePoint.Upgrade.SPUtility.GetLatestTargetSchemaVersionByMajorVersion(Type typeActionSequence, Int32 majorVer)
at Microsoft.SharePoint.Upgrade.SPUtility.get_CurrentSPSiteWssTargetSchemaVersion()
at Microsoft.SharePoint.Administration.SPSiteCollection.Add(SPContentDatabase database, SPSiteSubscription siteSubscription, String siteUrl, String title, String description, UInt32 nLCID, Int32 compatibilityLevel, String webTemplate, String ownerLogin, String ownerName, String ownerEmail, Strin... b712a522-fa85-49eb-b59c-dedf55295504
...g secondaryContactLogin, String secondaryContactName, String secondaryContactEmail, String quotaTemplate, String sscRootWebUrl, Boolean useHostHeaderAsSiteName, Boolean overrideCompatibilityRestriction)
at Microsoft.SharePoint.Administration.SPSiteCollection.Add(SPSiteSubscription siteSubscription, String siteUrl, String title, String description, UInt32 nLCID, Int32 compatibilityLevel, String webTemplate, String ownerLogin, String ownerName, String ownerEmail, String secondaryContactLogin, String secondaryContactName, String secondaryContactEmail, Boolean useHostHeaderAsSiteName)
at Microsoft.SharePoint.Administration.SPAdministrationWebApplication.CreateDefaultInstance(SqlConnectionStringBuilder administrationContentDatabase, SPWebService adminService, IdentityType identityType, ... b712a522-fa85-49eb-b59c-dedf55295504
...String farmUser, SecureString farmPassword)
at Microsoft.SharePoint.Administration.SPFarm.CreateAdministrationWebService(SqlConnectionStringBuilder administrationContentDatabase, IdentityType identityType, String farmUser, SecureString farmPassword)
at Microsoft.SharePoint.Administration.SPFarm.CreateBasicServices(SqlConnectionStringBuilder administrationContentDatabase, IdentityType identityType, String farmUser, SecureString farmPassword)
at Microsoft.SharePoint.Administration.SPFarm.Create(SqlConnectionStringBuilder configurationDatabase, SqlConnectionStringBuilder administrationContentDatabase, IdentityType identityType, String farmUser, SecureString farmPassword, SecureString masterPassphrase)
at Microsoft.SharePoint.Administration.SPFarm.Create(SqlConnectionStringBuil... b712a522-fa85-49eb-b59c-dedf55295504
...der configurationDatabase, SqlConnectionStringBuilder administrationContentDatabase, String farmUser, SecureString farmPassword, SecureString masterPassphrase)
at Microsoft.SharePoint.PowerShell.SPCmdletNewSPConfigurationDatabase.InternalProcessRecord()
at Microsoft.SharePoint.PowerShell.SPCmdlet.ProcessRecord() b712a522-fa85-49eb-b59c-dedf55295504
Error Category: InvalidData Target Object Microsoft.SharePoint.PowerShell.SPCmdletNewSPConfigurationDatabase Details NULL RecommendedAction NULL b712a522-fa85-49eb-b59c-dedf55295504
Leaving ProcessRecord Method of New-SPConfigurationDatabase. e9ae5ba6-c499-0000-d35c-aee999c4cf01
we are using server 2012 R2 and we don't have office 2010 installed

Yes,SQL server is on the same server as SharePoint
SQL has both the permissions Securityadmin
and DBcreator roles on SQL Server.
When we run those sharepoint management shell commands the database will be created with the error
msg (shown in attachment)

SP 2013 - Error: This operation can be performed only on a computer that is joined to a server farm

Hello Community!
I am working with SharePoint 2013 and I built a farm inside the firewall. Then a decision was made to move the two WFE's to the DMZ. Since that time, whenever I try to access the site collections, I get the error below.  Other information: All
the web applications are on port 80, but I'm not having any problem with accessing Central Administration which is on port 8080; the network team did screw up the DNS originally, but I'm told it's correct now; the two WFE's servers show in my Manage servers
on the Farm interface 2X, once with the server name, once with the fully Qualified Domain Name, the ones with the FQDN shows a Services Running status of Not Configured.
Has anyone else ever seen this error and if so please provide guidance and instruction for fixing the error.
Thanks!
Tom
Server Error in '/' Application.
This operation can be performed only on a computer that is joined to a server farm by users who have permissions in SQL Server
to read from the configuration database. To connect this server to the server farm, use the SharePoint Products Configuration Wizard, located on the Start menu in Microsoft SharePoint 2010 Products.
Description:
An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the
code.
Exception Details: System.InvalidOperationException: This operation can be performed only on a computer that is joined to a server farm by users who have permissions in SQL Server to read from the configuration database. To connect this server
to the server farm, use the SharePoint Products Configuration Wizard, located on the Start menu in Microsoft SharePoint 2010 Products.
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified
using the exception stack trace below.
Stack Trace:
[InvalidOperationException: This operation can be performed only on a computer that is joined to a server farm by users who have permissions in SQL Server to read from the configuration
database. To connect this server to the server farm, use the SharePoint Products Configuration Wizard, located on the Start menu in Microsoft SharePoint 2010 Products.]
   Microsoft.SharePoint.Utilities.SPUtility.AlternateServerUrlFromHttpRequestUrl(Uri url) +262
   Microsoft.SharePoint.Administration.SPAlternateUrl.GetContextUri(HttpContext ctx) +385
   Microsoft.SharePoint.SPAppRequestContext.InitCurrent(HttpContext context) +1013
   Microsoft.SharePoint.SPAppRequestContext.get_Current() +175
   Microsoft.SharePoint.SPGlobal.CreateSPRequestAndSetIdentity(SPSite site, String name, Boolean bNotGlobalAdminCode, String strUrl, Boolean bNotAddToContext, Byte[] UserToken,
SPAppPrincipalToken appPrincipalToken, String userName, Boolean bIgnoreTokenTimeout, Boolean bAsAnonymous) +400
   Microsoft.SharePoint.SPRequestManager.GetContextRequest(SPRequestAuthenticationMode authenticationMode) +120
   Microsoft.SharePoint.Administration.SPFarm.get_RequestAny() +370
   Microsoft.SharePoint.SPLanguageSettings.GetGlobalInstalledLanguages(Int32 compatibilityLevel) +39
   Microsoft.SharePoint.Administration.SPTemplateFileSystemWatcher.RefreshInstalledLocales() +103
   Microsoft.SharePoint.Administration.SPTemplateFileSystemWatcher.Initialize() +130
   Microsoft.SharePoint.ApplicationRuntime.SPRequestModule.System.Web.IHttpModule.Init(HttpApplication app) +873
   System.Web.HttpApplication.RegisterEventSubscriptionsWithIIS(IntPtr appContext, HttpContext context, MethodInfo[] handlers) +582
   System.Web.HttpApplication.InitSpecial(HttpApplicationState state, MethodInfo[] handlers, IntPtr appContext, HttpContext context) +322
   System.Web.HttpApplicationFactory.GetSpecialApplicationInstance(IntPtr appContext, HttpContext context) +384
   System.Web.Hosting.PipelineRuntime.InitializeApplication(IntPtr appContext) +397
[HttpException (0x80004005): This operation can be performed only on a computer that is joined to a server farm by users who have permissions in SQL Server to read from the configuration database. To
connect this server to the server farm, use the SharePoint Products Configuration Wizard, located on the Start menu in Microsoft SharePoint 2010 Products.]
   System.Web.HttpRuntime.FirstRequestInit(HttpContext context) +646
   System.Web.HttpRuntime.EnsureFirstRequestInit(HttpContext context) +159
   System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context) +771
Version Information: Microsoft .NET Framework Version:4.0.30319; ASP.NET Version:4.0.30319.18010
Tom Molskow - Senior SharePoint Architect - Microsoft Community Contributor 2011 and 2012 Award -
Linked-In - SharePoint Gypsy

Hi Tom,
According to your description, my understanding is that you got an error when you moved your SharePoint.
This error occurs when the SharePoint farm administrator cannot connect to your configuration database. Please verify the followings:
Make sure that from the SharePoint front end and application servers that you can ping your SQL server.
Make sure that your Farm account has permission to the configuration database.
Lastly verify that your database didn't for some reasons go into recovery mode.
once everything is fine and you are still having issues, restart the SQL host service on the SQL server. Once the service is restarted you will need to reboot Central Admin and then your front end servers.
In addition, as you built your farm inside the firewall, please disable the firwall, or create rules for SQL Server service in the firwall on SQL server. More information about creating rules in firewall, please refer to the following posts:
http://social.technet.microsoft.com/Forums/en-US/c5d4d0d0-9a3b-4431-8150-17ccfbc6fb82/can-not-create-data-source-to-an-sql-server
http://www.mssqltips.com/sqlservertip/1929/configure-windows-firewall-to-work-with-sql-server/
Here is a similar post for you to take a look at:
http://social.technet.microsoft.com/Forums/en-US/ea54e26c-1728-48d4-b2c5-2a3376a1082c/this-operation-can-be-performed-only-on-a-computer-that-is-joined-to-a-server-farm-by-users-who-have?forum=sharepointgeneral
I hope this helps.
Thanks,
Wendy
Wendy Li
TechNet Community Support

Create a SharePoint 2013 Appplication in C#,Error:This operation can be performed only on a computer that is joined to a server farm

I want to create a sharepoint application in C#:
SPFarm CurrentFarm = SPFarm.Local;
SPWebApplicationBuilder webAppBlder = new SPWebApplicationBuilder(CurrentFarm);
webAppBlder.UseNTLMExclusively = true;
webAppBlder.AllowAnonymousAccess = false;
webAppBlder.UseSecureSocketsLayer = false;
SPWebApplication webApp = webAppBlder.Create();
webApp.Provision();
It's create a new application succeed,but when I view the site there is an error:
This operation can be performed only on a computer that is joined to a server farm by users who have permissions in SQL Server to read from the configuration database. To connect this server to the server farm, use the SharePoint Products Configuration
Wizard, located on the Start menu in Microsoft SharePoint 2010 Products.
How can I fix this issue?
ps:I had create some new application in sharepoint web site.It's all fine without any issue.
The sharepoint server,sqlserver and the programs in the same machine.
Besr regards

Hi,
I think below line is causing the error -
SPWebApplicationBuilder webAppBlder = new SPWebApplicationBuilder(CurrentFarm);
can you put that line within a try catch and see that causes an exception. If so, you might try as below-
SPSecurity.RunWithElevatedPrivileges(delegate()
webAppBuilder = new SPWebApplicationBuilder(CurrentFarm);
Hope this helps!
Ram - SharePoint Architect
Blog - SharePointDeveloper.in
Please vote or mark your question answered, if my reply helps you

Failover between server farms

Similar Messages

Maybe you are looking for