Identity for Singleton in cluster

Hello all,
Is it possible to use JNDI based naming service (J2EE appserver's)
as a storage for identifier variables for Singleton objects in J2EE based cluster?
I have a following problem:
- I have a cluster with 4 nodes
- Each node has a it's own singleton instance (per JVM in cluster)
- I need a identifier to give a "identity" to each singleton instance
In this way each singleton instance could read data from
database and cache it. Purpose is, that identifier would be also a
primary key in database. In this way each singleton could read it's
own group of data from database, so I would not need to do any
synchronization between singleton instances (each singleton would
contain different data, that accpeted in my case).
The question is:
Is it possible to use JNDI/naming servive as "temporary storage" for those identifiers? Identifiers should be read every time when all the nodes in the cluster are booted. They should also be marked as used so,
that only one singleton would use it's own id.
When the cluster is rebooted those ids should be available again.
If I thing this problem with database technique, the problem is to "mark" ids as free when nodes in the cluster are rebooting...
can JNDI handle this better?
Thanks
mila

Thanks for your answer!
What I first tried, I tried to get the node/clone name of the JVM where
my appserver's application and it's singleton is running.
=> "clone" is IBM's term of creating another instance of AppServer.
BUT... we are using WebSphere. WebSphere offers API to get info about
your application server nodes in runtime but their WebSphere API is changing all the time and it's poorly documented. I can not trust it.
So, what you suggest with java -DVariable could be one reason.
But aren't there any other "ready-to-use" id's to be used
in AppServer? IP address is one, but what I have understood it does
not cover all clustering techniques (vertical and horizontal clustering). I think this kind of problem has been resolved many times... but how to do it? That' the "pane".
Br
mila

Similar Messages

How can I use a certain identity for a certain folder?

I have defined different identities from whom I can choose the one I want when writing an email.
Is there a possibility to define a certain identity for a certain folder so that when answering a mail in that folder this identity will be choosen automatically?
Thanks, Manfred

Yes, they are assoiated to an account. But imagine my account's default from address is manfred@mydomain. Now I have some more identities, say manfred@myotherdomain, aso.
Now I want to make sure, whenever I answer a mail in folder f the from address should be manfred@myotherdomain.

How to create EVENTS for a View Cluster.

Hi Tech Gurus,
I have created a view cluster on 5 tables. I need to do a validation and this can be done by using events. But i am unable to create a EVENT for the View Cluster. Could anyone please tell me how to create events for a View Cluster.
Thanks in advance for your esteemed replies.
Regards,
Raghavendra Goutham P.

Hello Pasapula
When you are in the View Cluster maintenance dialog (SE54) click on dialog "Events".
Below the field for the view cluster you have an additional field <b>FORM routines main program</b>. There you have to add the main program containing the FORM routines called by the VC events.
For example: I had defined a normal report containing an include with all the FORM routines. The report contains only the following lines of coding:
report zus_0120_u1.
* Common Data und access routines for user exits in VC maintenance
include LSVCMCOD.
include zus_0120_f1. "FORM routines for VC events
Now in the "Events" dialog of the view cluster maintenance you assign your FORM routines to the events.
Regards
Uwe

Claims debacle (error) with Term Store: "Could not retrieve a valid windows identity" for all sites in a particular web app.

When I pull up the Term store in CA or any MySite collection, it works.
When I do so in any other site collection (HNSCs, incidentally), It doesn't return any term stores.
My ULS log immediately before and after the "/_vti_bin/taxonomyinternalservice.json/CheckPermission" POST on termstore .aspx triggers the WCF call:
Claims Authentication af30y Verbose Claims Windows Sign-In: Successfully signed-in the the user 'contoso\domainUser' for request url 'https://sp13-root-prd.contoso.com/_vti_bin/taxonomyinternalservice.json/CheckPermission'.
Claims Authentication af30q Verbose Updating header 'LOGON_USER' with value '0#.w|contoso\domainUser' for the request url 'https://sp13-root-prd.contoso.com/_vti_bin/taxonomyinternalservice.json/CheckPermission'.
Authentication Authorization agb9s Medium Non-OAuth request. IsAuthenticated=True, UserIdentityName=0#.w|contoso\domainUser, ClaimsCount=77
Logging Correlation Data xmnv Medium Site=/
Topology e5mc Medium WcfSendRequest: RemoteAddress: 'http://CONTOSOFE3:32843/00e6d55691824965ac223f1d1cfae6d2/MetadataWebService.svc' Channel: 'Microsoft.SharePoint.Taxonomy.IMetadataWebServiceApplication' Action: 'http://schemas.microsoft.com/sharepoint/taxonomy/soap/IDataAccessReadOnly/GetChanges2' MessageId: 'urn:uuid:590e916c-c89a-4f89-9819-a82c97fabcaa'
Claims Authentication bz7l Medium SPSecurityContext: Could not retrieve a valid windows identity for username 'contoso\domainUser' with UPN '[email protected]'. UPN is required when Kerberos constrained delegation is used. Exception: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: WTS0003: The caller is not authorized to access the service. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: System.UnauthorizedAccessException: WTS0003: The caller is not authorized to access the service. at Microsoft.IdentityModel.WindowsTokenService.CallerSecurity.CheckCaller(WindowsIdentity callerIdentity) at Microsoft.IdentityModel.WindowsTokenService.S4UServiceContract.PerformLogon(Func`1 logonOperation, Int32 pid) at SyncInvokeUpnLogon(Object , Object[] , Object[] ) at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs) at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc& rpc) at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet))..
Claims Authentication g220 Unexpected No windows identity for contoso\domainUser.
The "The caller is not authorized to access the service." message seems pertinent.
Both web apps are using only NTLM auth.
The url for both web apps ends in the same contoso.com domain.
I get the same errors no matter what account I use, including the install account.
Things I've tried:
Deleting and building a new HNSC root web app and site. Error happens in all sites in all web apps except the PBSC hosting MySites.
Giving the root site app pool identity full control of the metadata service app (even though the MySite identitiy doesn't have it)
Giving the root site app pool identity full permissions on the metadata service app.
Comparing database and web app config permissions between dev (where everything works perfectly) and prod (where it does not).
Made sure IIS auth settings on both sites are identical
Both sites are using the same SSL certificate (though the call to the web service appears to be http)
Reprovisioned the metadata service app with a new database and new app pool identity.
Made sure C2WT is running. Tried it with the service stopped as well.
Web.configs are identical between working and non-working apps.
I'm stumped but still Googling. I'm hoping to avoid having to call Micrososft. Any help would be appreciated!
UPDATE:
Interestingly, when I restored the web application from backup (via CA), I ended up with 3 identical "Windows Authentication" authentication providers assigned to the problem web app. Since there was more than one, I was directed to the provider-chooser
page when visiting the site. Upon choosing 1 of the 3, I was authenticated, and *poof*, no more authentication errors and the term store loaded term sets as expected.
Of course, 3 providers was not an ideal state, so I grabbed the one that worked (#1) via get-spauthenticationprovider, and assigned it to the web app via set-spwebapplication, and my problem returned.
I am currently updating the farm to SP1 from June 2013 CU. Fingers crossed.
Update:
The update to SP1 went smoothly, but did not resolve the issue. Also related (I believe) are the random authentication errors when trying to upload images to some libraries, and 401-errors on the accessdenied.aspx page itself.
Update:
The problem is resolved, seemingly after making 4 changes. I'm trying to narrow down which change was the cure, if any:
I installed SP1 on all 6 servers, rebooted and upgraded. This appeared to have no effect.
Removed an old login from SQL that no longer existed in AD because of this ULS error:
System.Runtime.InteropServices.COMException: The user or group contoso\svc_xxxxxxxxx' is unknown., StackTrace: at Microsoft.SharePoint.Utilities.SPUtility.GetFullNameFromLoginEx(String loginName, Boolean&
bIsDL)
This login was the identity of the application pool that used to run the web app in question.
This login was the schema owner of a schema named after itself on every SharePoint database so I changed the schema owner to dbo but left the schema attached.
The problem may have surfaced initially when the app pool identity was changed in CA, but went unnoticed?
Note that the web app had been deleted and recreated many times with a new identity and pool to no avail, but the URL remained the same throughout each attempted fix. Relevant?
Grasping at straws, I changed the app pool identity for this web app to the same one that runs the MySite web app pool as per this only slightly related problem: http://www.planetsharepoint.org/m/preview.php?id=372&rid=34764&author=Vlad+Catrinescu
I changed the authentication method from NTLM to Negotiate.
I am rolling back #3 and #4 to see if the issue resurfaces.
Update:
It doesn't appear to have been the NTLM/Negotiate setting. Web app is currently set to NTLM and all is well. No strange accessdenies, and term Store is still manageable from all sites.
Update: Sorry for the delay. I am administering 6 farms these days. Will update as soon as the final phase of rollbacks happens.
I think I can. I think I can.

maybe that web app was accidentally created with classic auth?
here's an example of how to create claims based, with classic, and then "doing 2013" claims
#Create the example web application, as mentioned above, either with gui, and pick later, or
New-SPWebApplication-ApplicationPool$applicationPool-ApplicationPoolAccount$serviceAcct-Name$WebApp-Port
5050
-databaseName$contentDB-securesocketslayer
#If doing for 2013
New-SPWebApplication-ApplicationPool$applicationPool-ApplicationPoolAccount$serviceAcct-Name$WebApp-Port
5050
-AuthenticationProvider(new-spauthenticationprovider)
-databaseName$contentDB-secureSocketsLayer

Why do we use reverse proxy for Oracle RAC Cluster setup

Hello All,
I got this question lately.. "why do we use reverse proxy for Oracle RAC Cluster setup". I know we use the reverse proxy at Middleware level for multiple security reasons.
Thanks..

"why do we use reverse proxy for Oracle RAC Cluster setup".
I wouldn't. I wouldn't use a proxy of any sort for the Cluster Interconnect for sure.
Cheers,
Brian

Property u201Czero allowedu201D must be identical for all Key Figures.

I am having the following error message when trying to run a Statistical Forecast in the Background. The job cancels out and I receive the error message: Property u201Czero allowedu201D must be identical for all Key Figures.
When I look in RSA1 under Key Figures Details "zero allowed" appears to be checked for all Key Figures. Can anyone point me in the correct direction I've already tried searching and did not find the answer.
Thanks.

HI,
The setting is not in RSA1 but is in /SAPAPO/MSDP_ADMIN - Administration of Demand Planning and Supply Network Planning
choose the relevant Planning area right button click on the Planning area choose change key figure settings. From here you can check the flag Zero allowed for the key figure that Stat. FCST is generated.
Best Regards,
Ivo Stoyanov

No windows identity for Domain Name\User

I have recently upgraded SharePoint 2013 farm from RTM to SP1. I am repeatedly getting errors No windows
identity for Domain Name\User in ULS log. Some users who was earlier able to access to site is not able to access site.
Please remember to mark the replies as answers or vote as helpful if they help.

Few questions to quickly check with you..
1. Have you re-run your SharePoint Configuration Wizard after you upgraded from RTM to SP1? Its very important to re-run SharePoint Configuration Wizard to ensure SharePoint Config DB is updated with latest changes in the farm.
2. If you have performed the above step but still face issues, have you restarted your SharePoint Server after re-running your SharePoint Configuration Wizard? If not please restart the server.
3. If not anyone of the above, then have you changed your authentication type for your web application in Central Admin. Example, from Classic Authentication to Claim Based Authentication?
Please remember to click 'Mark as Answer' if the reply answers your query or 'Upvote' if it helps you.

Why Inner join or Outer join is not used for Pool or Cluster tables ?

Hi SAP-ABAP Experts .
With Due Regards .
May u explain me why Inner join or Outer join is not useful for Pool or Cluster tables ?
because peoples advised not use Joins for Pool and Cluster tables , What harm will take place , If we do this ?
Best Regards to all : Rajneesh

Both Pooled and Cluster Tables are stored as tables within the database. Only the structures of the two table types which represent a single logical view of the data are defined within the ABAP/4 Data Dictionary. The data is actually stored in bulk storage in a different structure. These tables are commonly loaded into memory (i.e., 'buffered') due to the fact they are typically used for storing internal control information and other types of data with little or no external (business) relevance.
Pooled and cluster tables are usually used only by SAP and not used by customers, probably because of the proprietary format of these tables within the database and because of technical restrictions placed upon their use within ABAP/4 programs. On a pooled or cluster table:
Secondary indexes cannot be created.
You cannot use the ABAP/4 constructs select distinct or group by.
You cannot use native SQL.
You cannot specify field names after the order by clause. order by primary key is the only permitted variation.
I hope it helps.
Best Regards,
Vibha
Please mark all the helpful answers

Code for singleton design pattern

Hi,
This is kalyan. Can u provide code for Singleton design pattern.
Thanks in Advance

public class Singleton {
private Singleton() {
private static Singleton instance;
public Singleton getSingleton() {
if (instance == null) instance = net Singleton();
return instance;
}Does it make sense?

Can anyone give ex's for poolled and cluster and transparent tables

Hi ,
Can u help me by providing ex's for poolled and cluster and transparent tables

Hi,
Following are the examples for each type.
Transparent table - VBAK.
Cluster Table -BSEG
Pooled Table - KAPOL
Regards,
Ankur Parab

Configuring Automatic Failover for EPM Planning Cluster

We are trying to test automatic failover using a Planning(11.1.2.2)/weblogic cluster containing 2 physical servers and a Weblogic proxy plug-in for OHS.
I understand that to enable this we must configure in-memory replication of HTTP session states and to do this, (according to various sources including ID 779350.1) the weblogic.xml file must include a descriptor set up as follows:
<session-descriptor>
   <session-param>
    <param-name>PersistentStoreType</param-name>
    <param-value>replicated</param-value>
</session-param>
</session-descriptio>
Where should weblogic.xml be created or amended (if it already exists) for a Planning cluster in a standard scaled out EPM deployment in order to effect failover between the two servers.
Thanks

yes, it can be load balanced in hyperion registry i believe, seen it once only drawback is ,if a JVM goes down while processing a request it needs to be manually started, however the url will switch automatically

SPSecurityContext.WindowsIdentity: Could not retrieve a valid windows identity. No windows identity for domain\user.

Hi,
We get plenty of error messages:
SPSecurityContext.WindowsIdentity: Could not retrieve a valid windows identity.
No windows identity for domain\user.
Our SharePoint 2010 environment consists of 2 app and 2 front end servers. We have plenty of SPSecurityContext.WindowsIdentity errors in our SharePoint logs. I found that this is related to C2WTS service. We have this service running under Local System account
and only running on both Front-end servers. We are not using Kerberos in our environment.
My question is should this service be configured with domain account even we are not using Kerberos?
Also should this server be started on App sharepoint servers?
Is any other way to prevent those errors?
Thank you,

Since local accounts are unable to query the domain, and I suspect that the Local System account uses a virtual local account (as opposed to the computer's domain account), then the same would apply to your C2WTS.
Yes, configure a domain account (DEDICATED, since C2WTS requires some VERY elevated privileges), and the C2WTS will be able to do all of its domain lookups.
Scott Brickey
MCTS, MCPD, MCITP
www.sbrickey.com
Strategic Data Systems - for all your SharePoint needs

Error: SPSecurityContext.WindowsIdentity: Could not retrieve a valid windows identity for NTName='

I'm getting the following error, but it only seems to happen with my 'admin' id. At our company we have a regular user id that we use for daily use that has our email attached to it, and then we have an admin id that has elevated privileges on the
various systems.
I haven't found any trace of this error appearing for anyone else in the system, only for my Admin id. I don't know if it has something to do with not having an Exchange account set up for it, or if there is something else missing. In searching
for this error I can find lots of references to Kerberos, but we don't have that running at this company. I'm not sure why it says Kerberos in the error message.
Any ideas?
THanks.
Ted
P.S. Here is the error:
SPSecurityContext.WindowsIdentity: Could not retrieve a valid windows identity for NTName='Domain\ID', UPN='[email protected]'. UPN is required when Kerberos constrained delegation is used. Exception: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]:
WTS0003: The caller is not authorized to access the service. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: System.UnauthorizedAccessException: WTS0003: The caller is not authorized to access
the service.
at Microsoft.IdentityModel.WindowsTokenService.CallerSecurity.CheckCaller(WindowsIdentity callerIdentity)
at Microsoft.IdentityModel.WindowsTokenService.S4UServiceContract.PerformLogon(Func`1 logonOperation, Int32 pid)
at SyncInvokeUpnLogon(Object , Object[] , Object[] )
at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)
at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage4(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet))..

Hi Ted,
What operations(e.g. create a site?) are your performing with your "admin" account, when you are getting this error?
Please check the following article with similar posts, e.g. grant the admin account proper permissions, or modify the config file (please back up the original file in a safe place for recovery in future), etc., let us know results.
http://onefootinthecloud.blogspot.jp/2012/01/save-template-error-no-windows-identity.html
https://social.msdn.microsoft.com/Forums/sqlserver/en-US/efb39291-857c-4a85-b244-56712f11430a/sharepoint-2010-migrated-to-claims-strange-error?forum=sharepointadminprevious
https://social.technet.microsoft.com/Forums/sharepoint/en-US/b4d06b64-a713-480e-a00c-d02a466ad891/claims-to-windows-token-issue?forum=sharepointadminprevious
Thanks,
Daniel Yang
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]
Daniel Yang
TechNet Community Support

Creating Kerberos Identity for RD Session Host Farms for w 2012 r2

anyone knows how Creating Kerberos Identity for RD Session Host Farms for w 2012 r2.
I tried what they said the post
to w 2008, With
powershell I find the possibility and the
script indicates the error class is not
valid

Hi,
Referring to your comment, here providing you article for Kerberos authentication in server 2012. Please refer to the below article.
What's New in Kerberos Authentication (You can refer for Server 2012 R2)
http://technet.microsoft.com/en-us/library/hh831747.aspx
Hope it helps!
Regards.

Maximum Nodes supported for NLB and Cluster in Windows Server 2008 Standard Edition ?

Hi.
I am looking for information How many nodes supported for NLB and Cluster in Windows Server 2008 Standard Edition ?
If you can provide for all the versions that would be great.
-Thanks
- Ajay Chanana

Hi,
You can configure a Windows server 2008 NLB cluster with up to 32 nodes. However,
scaling beyond 8 nodes will cause a slight performance hit because the network traffic is broadcasted to every node and only one NLB node accepts the connection.
For more detailed information, please refer to the link below:
FAQ Week for NLB: Tuesday
Best regards,
Susie

Identity for Singleton in cluster

Similar Messages

Maybe you are looking for