Incessant failed dns requests, or timeouts every 20 seconds

The internet connection fails about every 20 seconds or so, by timing out. It is impossible to watch any streaming
media at all, or to have a coherent conversation using Skype. What could the problem be?

laurenskib wrote:
it the GT704WG wireless modem/router. How do get the stats
#1 Try going to http://192.168.1.1/ .
#2 If running the blue firmware, Choose Troubleshooting, and then click Transceiver Statistics.
#3 If using Verizon-branded firmware (should be Red and Black), go to System Monitoring, Advanced Monitors, and then choose Transceiver statistics.
#4 If you are prompted for a Username and Password at any time, try one of the following:
admin/password
admin/password1
admin/admin
admin/admin1
Your Verizon username/password
laurenskib wrote:
post them?
You could copy and paste the contents of it.
This means...
#1 Highlight the message.
#2 Either:
a) Go to Edit -> Copy
b) Press the CTRL and C keys at the same time (if a PC, not Mac).
#3 Then when in reply, before you click on Post either:
a) Go to Edit -> Paste
b) Press the CTRL and V keys at the same time (if a PC, not Mac).
If using a Mac I am sure there are key board shortcuts, but I do not know what they are.
If you have a Mac when you go to Edit in your web browser, it will tell you what they are (so even I knew, you could figure it out)
Just like when I was using Windows XP Home SP3 and now I am using ubuntu 10.0.4 LTS on my PC.
If you are the original poster (OP) and your issue is solved, please remember to click the "Solution?" button so that others can more easily find it. If anyone has been helpful to you, please show your appreciation by clicking the "Kudos" button.

Similar Messages

Mac's requesting net time every 30 seconds

We are having an issue with every Mac trying to update it's time every 30 seconds (we can see the network traffic). Is there any way to set this to once a day, or turn it off completely?
Thanks.

Go to the Date & Time preference pane, and unclick "Set date & Time automatically" to disable the behavior.
Unless it's failing to see its time server and trying multiple sites, it should just be issuing normal NTP traffic.

[SOLVED] Console gets message about mei_me timeout every 5 seconds

I was just trying to install Arch to an HP Compaq DC 7800 machine, so I downloaded the ISO image (2013.08.01) and booted the system with the cd. However, my console gets spammed every 5 seconds or so with messages like:
[65.456035] mei_me 0000:00:03.0: reset: connect/disconnect timeout.
I tried to boot with kernel option 'quiet', but that only suppressed normal messages, not the error. The only thing I could find what comes close to my problem, was this Ubuntu bug, but it turned out that it was something built in the kernel. However, I don't have access to the kernel on the installation cd. (Also, it looks like 'mei' has something to do with wifi, which isn't present in the machine.)
Do you know a kernel command line option or some other solution to get rid of the message? Thanks in advance.
Last edited by Marcel- (2013-08-17 19:01:21)

Thanks for the hint and this thread. That messages annoyed me some weeks, but I haven't found a solution until now :-)
Marcel- wrote:But where can I do that? I looked through all my BIOS settings, but nothing was related to Intel MEI.
Instead of pressing F10 for entering the BIOS setup, you can press Ctrl+P for entering the Management Extension BIOS.
This also works even if Ctrl+P is not shown on the screen. It worked for my DC8700. Besides that, I think you can activate the Ctrl+P hint in the BIOS (Advanced->Power-On Options->MEBx Setup Prompt).
By the way, the default password for the Management Extension BIOS is "admin".
I didn't have a deeper look into the Management Extension BIOS, I'm just fine with the removal of the kernel module :-)
Regards,
wopfel

DNS request timed out. timeout was 2 seconds

Hi
Why it is saying DNS request timed out was 2 seconds and showing the IPs under non-authoritative answers?
This is member DC windows 2008 R2. Primary DNS is set as 127.0.0.1 and secondary DNS is set to 192.168.10.6 which is main DC.
C:\Users\admin>nslookup filter-servers.mailguard.com.au
Server: localhost
Address: 127.0.0.1
DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
Non-authoritative answer:
Name:    filter-servers.mailguard.com.au
Addresses:50.23.252.165
199.193.116.73.. more

HI
Use ISP DNS servers and forward DNS query from internal DNS to ISP DNS servers,

DNS request timed out. timeout was 2 seconds. *** Request to self timed-out

I am having an issue with one of my domain controllers (Server 2012 R2). It is a DNS server as well and it times out 100% of then time when attempting connect to either of the two trusted forests that are setup as conditional forwarders. There is also a
delay or a time out the first few times when attempting to resolve an external site such as google.com. The domain controller functions fine. All routing seems to fine, because I can telnet on port 53 to the trusted forest's DCs. They can even use the problem
DNS server to resolve hosts. It just does work from my controller to the other forest. Here is an example of what is happening.
> external.forest.dc
Server: problem.local.dc
Address: 192.168.1.8
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to problem.local.dc timed-out
> external.forest.dc
Server: problem.local.dc
Address: 192.168.1.8
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to problem.local.dc timed-out
Google will resolve eventually resolve
> google.com
Server: problem.local.dc
Address: 192.168.1.8
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to problem.local.dc timed-out
> google.com
Server: problem.local.dc
Address: 192.168.1.8
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to problem.local.dc timed-out
> google.com
Server: problem.local.dc
Address: 192.168.1.8
Non-authoritative answer:
Name: google.com
Addresses: 2607:f8b0:4006:808::1001
74.125.226.67
74.125.226.66
74.125.226.72
74.125.226.69
74.125.226.68
74.125.226.70
74.125.226.73
74.125.226.64
74.125.226.65
74.125.226.71
74.125.226.78
The other DC works as it should:
> external.forest.dc
Server: working.local.dc
Address: 192.168.1.7
Non-authoritative answer:
Name: external.forest.dc
Address: 10.1.1.1
There is a firewall between these networks, they connect via campus fiber. I created an any rule to rule that out. I am thinking the DNS server is corrupt, but I cannot figure it out.
Dcdiag /test:dns says everything is great.
Any suggestions?

Hi,
According to your description, my understanding is that the problem DC is configured with conditional forwarders to resolve names about other 2 trusted forests, and always times out. Besides, there is a delay or a time out the first few times when attempting
to resolve an external name.
Use NSlookup to confirm that if the conditional forwarder works. Open CMD on problem DC, type the command below and each line end with enter:
Nslookup
Server <IP address of the condition forwarder which used to resolve names on trust domain>
<name of the trust forest which you want to resolve>
If it works, try to increase time-out period:
Properties of Conditional Forwarders – Number of seconds before forward queries times out
– change the time.
If it doesn’t work, turn on exhaustive debugging mode. Open CMD on problem DC, type the command below and each line end with enter:
Nslookup
Set d2
Server <IP address of the condition forwarder which used to resolve names on trust domain>
<name of the trust forest which you want to resolve>
Post the result here.
Besides, for internet/external name resolving problem, we usually have another DNS server(except for DCs) which connected to Internet/external and used to resolve external/Internet names. And on DCs, configure forwarder and use forwarder to resolve external/Internet
names. If it is your case, check the forwarder setting on the problem DC, or use ping to test the network connectivity. Confirm that if the delay of name resolving caused by network delay.
Best Regards,
Eve Wang
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

DNS requests from Solaris 10 box to Bind/MySQL DNS server fail

We have some servers running solaris 9 and some running solaris 10. We also have a DNS server setup running BIND with the MySQL backend. When I query the DNS server from our solaris 9 boxes, they always work just fine. However, when I query the DNS server from our solaris 10 boxes, they always fail. Queries to other DNS servers from the Solaris 10 boxes work just fine - they only fail when being sent to this particular DNS server. Here's exactly what I'm doing:
ON SOLARIS 9 BOX:
bash-3.00$ nslookup google.com calo-sunset
Server: calo-sunset
Address: <IP_OF_DNS_SERVER>#53
Non-authoritative answer:
Name: google.com
Address: 64.233.187.99
Name: google.com
Address: 72.14.207.99
Name: google.com
Address: 209.85.171.99
ON SOLARIS 10 BOX:
bash-2.05$ nslookup google.com calo-sunset
*** Can't find server name for address <IP_OF_DNS_SERVER>: Non-existent host/domain
*** Default servers are not available
In the case of the SOLARIS 10 box, <IP_OF_DNS_SERVER> is correct - it knows the IP address of the DNS server, but apparently it doesn't recognize that it's actually a DNS server.
I am utterly perplexed by this. It seems to me that a DNS request is a DNS request, regardless of your OS. Clearly something is different from Solaris 9 to Solaris 10 though because the requests fail on all of our solaris 10 boxes, and they succeed on all of our Solaris 9 boxes. Incidentally, dig requests from the Solaris 10 box also fail, where they succeed on the Solaris 9 boxes.
I don't really know what other information I could offer that might be useful. If you have any information at all about this or ideas on what I might try to troubleshoot/fix it, I'd love to hear it. Thanks in advance.

First off, I am an idiot. I got this entire post backwards. The fact is that the DNS requests work swimmingly well on our Solaris 10 boxes. They fail on our Solaris 9 boxes. I don't know how I managed to read this post all of these times and not notice that I got that backwards. Nice.
In any case, I've found the problem. It was non-trivial to me because I am not terribly familiar with the inner-workings of DNS. To those who are, it may seem painfully obvious. To me it certainly was not.
The problem was that the DNS server (BIND 9 with MySQL backend) did not contain a reverse DNS entry for itself. Apparently this is a big problem for Solaris 9. I got a hint that this might be the cause when I turned on verbose debugging info when I ran nslookup (nslookup -d2). I had to add the PTR record for the DNS server itself. I don't know why Solaris 9 would require that a DNS server contain reverse DNS information about itself, but sure enough it does. As soon as I added that info, the Solaris 9 boxes were able to successfully query the DNS server. Very odd.
Anyway, I doubt anyone else will come across this problem, but if you do, now you know something that might fix it.
Edited by: dprater on Oct 7, 2008 8:09 PM

Archive log missing on standby: FAL[client]: Failed to request gap sequence

My current environment is Oracle 10.2.0.4 with ASM 10.2.0.4 on a 2 node RAC in production and a standby that is the same setup. I'm also running on Oracle Linux 5. Almost daily now an archivelog doesnt make it to the standby and oracle doesnt seem to resolve the gap sequence from the primary. If I stop and restart recovery it gets the logfile and continues recovery just fine. I have checked my fal_client and fal_server settings and they look good. The logs after this error do continue to get written to the standby but the standby wont continue recovery until I stop and restart recovery and it fetches this missing log.
The only thing I know thats happening is that the firewall people are disconnecting any connections that are inactive for 60 minutes and recently did an upgrade that they are claiming didnt change anything:) I dont know if this is causing this problem or not. Any thoughts on what might be happening?
Error in standby alert.log:
Tue Jun 29 23:15:35 2010
RFS[258]: Possible network disconnect with primary database
Tue Jun 29 23:15:36 2010
Fetching gap sequence in thread 2, gap sequence 9206-9206
Tue Jun 29 23:16:46 2010
FAL[client]: Failed to request gap sequence
GAP - thread 2 sequence 9206-9206
DBID 661398854 branch 714087609
FAL[client]: All defined FAL servers have been attempted.
Error on primary alert.log:
Tue Jun 29 23:00:07 2010
ARC0: Creating remote archive destination LOG_ARCHIVE_DEST_2: 'WSSPRDB' (thread 1 sequence 9265)
(WSSPRD1)
ARC0: Transmitting activation ID 0x29c37469
Tue Jun 29 23:00:07 2010
Errors in file /u01/app/oracle/admin/WSSPRD/bdump/wssprd1_arc0_14024.trc:
ORA-03135: connection lost contact
FAL[server, ARC0]: FAL archive failed, see trace file.
Tue Jun 29 23:00:07 2010
Errors in file /u01/app/oracle/admin/WSSPRD/bdump/wssprd1_arc0_14024.trc:
ORA-16055: FAL request rejected
ARCH: FAL archive failed. Archiver continuing
Tue Jun 29 23:00:07 2010
ORACLE Instance WSSPRD1 - Archival Error. Archiver continuing.
Tue Jun 29 23:00:41 2010
Redo Shipping Client Connected as PUBLIC
-- Connected User is Valid
Tue Jun 29 23:00:41 2010
FAL[server, ARC2]: Begin FAL archive (dbid 0 branch 714087609 thread 2 sequence 9206 dest WSSPRDB)
FAL[server, ARC2]: FAL archive failed, see trace file.
Tue Jun 29 23:00:43 2010
Errors in file /u01/app/oracle/admin/WSSPRD/bdump/wssprd1_arc2_14028.trc:
ORA-16055: FAL request rejected
ARCH: FAL archive failed. Archiver continuing
Tue Jun 29 23:00:43 2010
ORACLE Instance WSSPRD1 - Archival Error. Archiver continuing.
Tue Jun 29 23:01:16 2010
Redo Shipping Client Connected as PUBLIC
-- Connected User is Valid
Tue Jun 29 23:15:01 2010
Thread 1 advanced to log sequence 9267 (LGWR switch)
I have checked the trace files that get spit out but they arent anything meaningful to me as to whats really happening. Snipit of the trace file:
tkcrrwkx: Starting to process work request
tkcrfgli: SRL header: 0
tkcrfgli: SRL tail: 0
tkcrfgli: ORL to arch: 4
tkcrfgli: le# seq thr for bck tba flags
tkcrfgli: 1 359 1 2 0 3 0x0008 ORL active cur
tkcrfgli: 2 358 1 0 1 1 0x0000 ORL active
tkcrfgli: 3 361 2 4 0 0 0x0008 ORL active cur
tkcrfgli: 4 360 2 0 3 2 0x0000 ORL active
tkcrfgli: 5 -- entry deleted --
tkcrfgli: 6 -- entry deleted --
tkcrfgli: 7 -- entry deleted --
tkcrfgli: 8 -- entry deleted --
tkcrfgli: 9 -- entry deleted --
tkcrfgli: 191 -- entry deleted --
tkcrfgli: 192 -- entry deleted --
*** 2010-03-27 01:30:32.603 20998 kcrr.c
tkcrrwkx: Request from LGWR to perform: <startup>
tkcrrcrlc: Starting CRL ARCH check
*** 2010-03-27 01:30:32.603 66085 kcrr.c
Beginning controlfile transaction 0x0x7fffd0b53198 [kcrr.c:20395 (14011)]
*** 2010-03-27 01:30:32.645 66173 kcrr.c
Acquired controlfile transaction 0x0x7fffd0b53198 [kcrr.c:20395 (14024)]
*** 2010-03-27 01:30:32.649 66394 kcrr.c
Ending controlfile transaction 0x0x7fffd0b53198 [kcrr.c:20397]
tkcrrasgn: Checking for 'no FAL', 'no SRL', and 'HB' ARCH process
# HB NoF NoS CRL Name
29 NO NO NO NO ARC0
28 NO YES YES NO ARC1
27 NO NO NO NO ARC2
26 NO NO NO NO ARC3
25 YES NO NO NO ARC4
24 NO NO NO NO ARC5
23 NO NO NO NO ARC6
22 NO NO NO NO ARC7
21 NO NO NO NO ARC8
20 NO NO NO NO ARC9
Thanks.
Kristi

It's the network that's messing up; unlikely due to firewall timeout as it waits for 60 minutes and you are switching every 15 minutes. There may be some other network glitch that needs rectified.
In any case - arch file missing/ corrupt / halfway through - FAL setting should have refetched the problematic archive log automatically.
As many had suggested already, the best way to resolve RFS issues I believe is to use real-time apply by configuring standby redo logs. It's very easy to configure it and you can opt for real-time apply even in max-performance mode that you are using right now.
Even though you are maintaining (I guess) 1-1 between primary & standby instances, you can provide both primary instances in fal_server (like fal_server=string1,string2). See if that helps.
lastly, check if you are having simiar issue at other times as well that might be getting rectified automatically as expected.
col message for a80
col time for a20
select message, to_char(timestamp,'dd-mon-rr hh24:mi:ss') time
from v$dataguard_status
where severity in ('Error','Fatal')
order by timestamp;
Cheers.

SL constantly making DNS requests for "local" ?

I've been troubleshooting a problem with my DSL router crashing and noticed that my Macs continuously, even when idle, have nearly 200 open connections at any given time, whereas my Windows boxes peak at 50 and drop down to under 10 when idle. The Macs are running SL 10.6.2.
Poking around in the router logs, I found that the Macs are constantly making udp DNS requests to my router, even when I'm not browsing or doing anything else. tcpdump of udp and port 53 gives me the following:
00:21:53.371671 IP 192.168.0.8.59304 > 192.168.0.1.53: 18151+ SOA? local. (23)
00:21:53.674232 IP 192.168.0.8.49916 > 192.168.0.1.53: 48169+ SOA? local. (23)
00:21:53.977128 IP 192.168.0.8.52735 > 192.168.0.1.53: 25906+ SOA? local. (23)
00:21:54.279836 IP 192.168.0.8.60409 > 192.168.0.1.53: 18252+ SOA? local. (23)
00:21:54.582518 IP 192.168.0.8.52350 > 192.168.0.1.53: 61085+ SOA? local. (23)
00:21:54.885866 IP 192.168.0.8.62450 > 192.168.0.1.53: 21082+ SOA? local. (23)
00:21:55.189449 IP 192.168.0.8.56146 > 192.168.0.1.53: 32869+ SOA? local. (23)
00:21:55.494834 IP 192.168.0.8.50517 > 192.168.0.1.53: 19194+ SOA? local. (23)
00:21:55.797551 IP 192.168.0.8.52035 > 192.168.0.1.53: 7558+ SOA? local. (23)
00:21:56.100390 IP 192.168.0.8.52101 > 192.168.0.1.53: 40847+ SOA? local. (23)
00:21:56.403436 IP 192.168.0.8.52194 > 192.168.0.1.53: 6087+ SOA? local. (23)
00:21:56.706299 IP 192.168.0.8.52347 > 192.168.0.1.53: 9339+ SOA? local. (23)
00:21:57.009058 IP 192.168.0.8.56200 > 192.168.0.1.53: 25553+ SOA? local. (23)
00:21:57.312098 IP 192.168.0.8.51976 > 192.168.0.1.53: 20703+ SOA? local. (23)
00:21:57.616665 IP 192.168.0.8.54563 > 192.168.0.1.53: 54141+ SOA? local. (23)
00:21:57.923536 IP 192.168.0.8.65097 > 192.168.0.1.53: 45734+ SOA? local. (23)
00:21:58.226243 IP 192.168.0.8.54125 > 192.168.0.1.53: 33647+ SOA? local. (23)
00:21:58.529128 IP 192.168.0.8.54571 > 192.168.0.1.53: 17218+ SOA? local. (23)
00:21:58.831897 IP 192.168.0.8.60218 > 192.168.0.1.53: 48469+ SOA? local. (23)
00:21:59.135020 IP 192.168.0.8.60466 > 192.168.0.1.53: 37003+ SOA? local. (23)
00:21:59.437998 IP 192.168.0.8.58798 > 192.168.0.1.53: 17670+ SOA? local. (23)
00:21:59.741022 IP 192.168.0.8.60276 > 192.168.0.1.53: 47469+ SOA? local. (23)
00:22:00.055207 IP 192.168.0.8.57066 > 192.168.0.1.53: 20384+ SOA? local. (23)
00:22:00.360458 IP 192.168.0.8.50152 > 192.168.0.1.53: 29721+ SOA? local. (23)
00:22:00.663357 IP 192.168.0.8.63487 > 192.168.0.1.53: 35833+ SOA? local. (23)
00:22:00.966073 IP 192.168.0.8.64900 > 192.168.0.1.53: 34951+ SOA? local. (23)
00:22:01.271649 IP 192.168.0.8.64314 > 192.168.0.1.53: 25719+ SOA? local. (23)
00:22:01.574530 IP 192.168.0.8.55922 > 192.168.0.1.53: 5842+ SOA? local. (23)
00:22:01.877146 IP 192.168.0.8.51874 > 192.168.0.1.53: 59071+ SOA? local. (23)
00:22:02.179921 IP 192.168.0.8.56913 > 192.168.0.1.53: 43487+ SOA? local. (23)
00:22:02.482738 IP 192.168.0.8.62907 > 192.168.0.1.53: 26628+ SOA? local. (23)
00:22:02.785409 IP 192.168.0.8.51599 > 192.168.0.1.53: 57463+ SOA? local. (23)
00:22:03.088321 IP 192.168.0.8.60417 > 192.168.0.1.53: 8857+ SOA? local. (23)
00:22:03.391227 IP 192.168.0.8.57872 > 192.168.0.1.53: 36002+ SOA? local. (23)
00:22:03.694211 IP 192.168.0.8.58774 > 192.168.0.1.53: 1662+ SOA? local. (23)
192.168.0.8 is my Mac and 192.168.0.1 is my DSL router. The Mac is ip'd using DHCP on the router. The router sends DNS requests from my clients out to my ISPs DNS servers.
Eventually, the DNS requests timeout and I get this:
00:21:43.145103 IP 205.171.3.65.53 > 192.168.0.8.52959: 38258 NXDomain 0/1/0 (98)
00:21:43.450086 IP 205.171.3.65.53 > 192.168.0.8.55938: 46832 NXDomain 0/1/0 (98)
00:21:43.763304 IP 205.171.3.65.53 > 192.168.0.8.50265: 62399 NXDomain 0/1/0 (98)
00:21:44.049705 IP 205.171.3.65.53 > 192.168.0.8.59991: 5960 NXDomain 0/1/0 (98)
It's a never-ending cycle that eventually kills my router.
If I'm reading the tcpdump output correctly, SL appears to be looking for some server named "local" 3 times every second. The TTL is roughly 90 seconds, so 3 requests/second gets me to an average of 180 connections at any give time -- which is approximately what my router is showing. If I do start browsing the connection count goes even higher. Trying to use both Macs at the same time has caused my router to crash due to running out of memory (it's obviously a very weak router .
Can someone give me some insight into what SL is doing and how I can stop this?
Thanks,
Randy

Does this server handle DNS requests?
If so, make sure under the local static IP for DNS servers you can try 127.0.0.1, and server IP.
Under the DNS tab make sure you have the ISP IP's under forwarder.
As a safety open terminal and run
su changeip -checkhostname

WRT1900AC: Can it block DNS requests?

Hello,
Can the WRT1900AC block DNS request from devices in a home network to public DNS service like GoogleDNS? Can anyone tell me what steps are necessary to accomplish this?
I tried to follow instructions found on the web but I could not add static routes under Advanced Routing, I got errors either about the network submask or the Gateway (mine is 192.168.1.1 and is not accepted). i don't know what to enter in these fields and also what Interface to select (LAN/Wireless or Internet).
My firmware version is 1.1.8.164461.
I would appreciate any help.
Thank you,
Luiz
Solved!
Go to Solution.

Hi,
Thanks for replying. I haven't contacted support yet to confirm you suspicion, My cable modem is a Motorola SB6141. I have done some basic research that indicates that it is not capable of NAT.
However, I was able to configure a static route in my router,using the cable modem IP asgateway. After this my ping requests to Google DNS (8.8.8.8 and 8.8.4.4) started to fail. This is probably still not what I need. I don't understand why I can't save my router's IP as gateway as indicated here: http://help.unotelly.com/support/solutions/articles/193662-setup-static-routes-on-linksys-and-cisco-... This link alerts to a bug in Linksys routers but the error message I get is not "invalid static route" as indicated.
Thanks,
Luiz

SCOM 2012 R2 Data Warehouse failed to request a list of management packs from SQL RS server

Hello, I get this alert can someone help me out ?
I did check the Proxy and is configured on all the MS and DW server.
Alert Description
Data Warehouse failed to request a list of management packs which contain
reports deployed to SQL Reporting Services Server. Report deployment process
failed to request management pack list from SQL RS Server. The operation will be
retried.
Exception 'WebException': The request failed with HTTP status 407:
Proxy Authentication Required ( Forefront TMG requires authorization to fulfill
the request. Access to the Web Proxy filter is denied. ).
One or more
workflows were affected by this.
Workflow name:
Microsoft.SystemCenter.DataWarehouse.Deployment.Report
Instance name:
Data Warehouse Synchronization Service
Instance ID:
{FDC7C774-397C-3660-9D57-EFBED3B60329}

Every call to the SRS generates a call to the OpsMgr SDK on Root Management
Server to check permissions (security integration). It apepars the account
the call is made under does not have access.
To figure out which account is used follow this process:
1) Run console and click on "Run As Profiles" in the Administration space;
2) Double-click "Data Warehouse Report Deployment Account";
3) Click on "Run As Accounts" tab;
4) If you have a line in the accounts which lists your Root Management
Server in the "Target Computer" column, note the account name in the "Run As
Account" column. If you do not have such a line, follow steps 2-4 for the
"Default Action Account" profile and note the account name;
5) Click on "Run-As Accounts" in the Administration space and double click
the account name which you got on step 4)
6) Switch to the "Account" tab and note domain name and user name;
Once you found the account (say, DOMAIN\user) check that it is a member of
the User Role "Operations manager Report Security Administrators". If not -
add it and the process will recover automatically.
Also You can refer below links
http://blogs.technet.com/b/smsandmom/archive/2007/09/06/system-center-operations-manager-doesn-t-show-any-reports.aspx
http://www.networksteve.com/enterprise/topic.php/Data_Warehouse_failed_to_request_a_list_of_management_packs..._E/?TopicId=16627&Posts=2
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"

DNS request behind content switch: troubleshooting

Hi, sometimes we experience problems resolving a dns name behind a content switch. The problem solves himself after 5 minutes or something like that. We see the dns request on the dns servers subnet. It looks like the is a problem when the packet returns. I'm thinking of a nat problem. How can i best troubleshoot this?

Can i e-mail you the config file? I will also e-mail as soon as possible a network capture in front of the CSS. Where can i e-mail it? For the moment dns is working so i will have to wait for network capture untill it fails again.
Kind regards,
Frederik De Muyter
[email protected]

Weblogic invoking web service failed due to socket timeout

Hi,
I encountered an error when I invoke web service from OBIEE 11g. The web serivce resides on Websphere running on other machine.
An error says that "Invoking web service failed due to socket timeout." and it seems that it stopped in just 40 secs.
Is there any settings of WebLogic server to avoid this? This web service normally runs for more than 60 sec.
I have checked several parameters by WebLogic admin console and changed those values, but I still receive same errors.
Regards,
Fujio Sonehara

Hey Eason,
As I had previously mentioned, I have checked the FE server certs and have mentioned the signing algorithm it used to sign the certs, which was sha1DSA and not sha1RSA, I even checked my CA list of issued certs and have found all certs are signed the same.
Signature algorithm: sha1DSA
Signature Hash Algorithm: sha1
Public Key: RSA (1024 bit)
I could run request and reinstall all day long it will still get the same certs signed with the algo..
Doing some research I attempted to see if I could change the signing cert for a specific cert template that was being used to issue the Lync FE certs... however seems that from according to
this, that I'd have to completely rebuild my CA before I'd be able to request and issue a cert with the proper signing algorithm?!
This
says its possible but not supported, what do I do in this situation? Is my only option to rebuild teh entire CA and cert infrastructure?
I noticed my CSP is set to Microsoft Base DSS Cryptographic Provider, and under the CSP folder there is no "CNGHashAlgorithm" key so I'm using a "Next Gen CSP" apparently? Is this CSP good enough to support Lync...Straight up where is
the Lync documentation on the CA setup requirements??
This google link doesn't tell you how you should setup a CA for Lync, what settings need to set etc..

DNS request when Anyconnect launch the tunnel

Hi, just a quick question, I am trying Anyconnect client v3.1.03103-k9. I would like to setup an ipsec tunnel on a private ip, the IP has no dns entry. If I specify the IP address and try to connect the tunnel does not come up as there is a dns request to resolve the entry. Can I bypass this dns request ?
Thanks,
Jerome

Can i e-mail you the config file? I will also e-mail as soon as possible a network capture in front of the CSS. Where can i e-mail it? For the moment dns is working so i will have to wait for network capture untill it fails again.
Kind regards,
Frederik De Muyter
[email protected]

DNS request for Adobe

I was running Wireshark (checking something else) and noticed that every 90 seconds there is a DNS request/response for www.adobe.com. The requests continue withour Adobe Reader running. Two things puzzle me: What is doing it? Why is it doing it?
Normally following a DNS request you would expect to see some sort of activity at the TCP or UDP level to the resolved address, but here there is none.
AK

Good suggestion, but all it can tell me is what makes the dns request - lookupd - it doesn't say what process asked it to make the request.
I had already turned off Adobe Reader, without stopping the requests, so I tried Mail, which also had no effect. Next went Safari, and the requests stopped, and restarting Safari didn't restart them, at least not so far.
Strange.
AK

Cbac and dns requests

can anyone tell me why my dns requests on cbac are not working, I allowed everything from inside out, but dns requests are not allowed for some reasons...
Building configuration...
Current configuration : 3265 bytes
! Last configuration change at 08:47:57 UTC Thu Jun 14 2012 by admin
version 15.1
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime
service password-encryption
hostname oecl
boot-start-marker
boot-end-marker
logging buffered 64000
enable secret 5 $1$kIPV$0ixUVG.EY10hIznM/HN5z/
aaa new-model
aaa authentication login default local-case
aaa session-id common
no ipv6 source-route
no ipv6 cef
no ip source-route
ip cef
ip dhcp excluded-address 10.28.3.1 10.28.3.2
ip dhcp excluded-address 10.28.4.1 10.28.4.2
ip dhcp pool OEC2al
network 10.28.3.0 255.255.255.0
default-router 10.28.3.1
dns-server 10.28.3.1
domain-name oec2al.co.uk
lease 5
ip dhcp pool Wellmax
network 10.28.4.0 255.255.255.0
default-router 10.28.4.1
dns-server 10.28.4.1
lease 5
no ip bootp server
ip name-server 8.8.8.8
ip name-server 4.2.2.5
ip inspect name firewall tcp
ip inspect name firewall udp
ip inspect name firewall icmp
multilink bundle-name authenticated
crypto pki token default removal timeout 0
license udi pid CISCO2911/K9 sn FCZ1605705Q
username admin secret 5 $1$L94s$LrPxn0IWRRu74KEQvlWIL/
redundancy
ip tcp selective-ack
ip tcp timestamp
ip tcp path-mtu-discovery
interface Loopback1
ip address 1.1.1.1 255.255.255.0
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0
description WAN
ip address 10.28.9.241 255.255.255.0
ip access-group 102 in
ip nat outside
ip inspect firewall out
ip virtual-reassembly in
duplex auto
speed auto
interface GigabitEthernet0/1
no ip address
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
interface GigabitEthernet0/1.1
encapsulation dot1Q 1 native
no cdp enable
interface GigabitEthernet0/1.3
encapsulation dot1Q 3
ip address 10.28.3.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
no cdp enable
interface GigabitEthernet0/1.4
encapsulation dot1Q 4
ip address 10.28.4.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
no cdp enable
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
ip forward-protocol nd
no ip http server
no ip http secure-server
ip dns server
ip nat inside source list 100 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 10.28.9.251
access-list 5 remark -=VTY local access=-
access-list 5 permit 10.28.3.0 0.0.0.255
access-list 100 remark -=NAT access=-
access-list 100 permit ip 10.28.0.0 0.0.255.255 any
access-list 101 remark -=VTY access restriction=-
access-list 101 permit ip host 181.143.217.54 any
access-list 102 remark -=Local firewall=-
access-list 102 permit icmp any any unreachable
access-list 102 permit icmp any any time-exceeded
access-list 102 permit icmp any any echo-reply
access-list 102 permit ip host 181.143.217.54 any
no cdp run
control-plane
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
access-class 5 in
transport input ssh
scheduler allocate 20000 1000
end

I have set up two public dns servers, it works ok until i enable access-list 102, i solved this problem by adding to acl 102 entry permit tcp any eq 53 any, but on different router (also 2911) everything was ok and cbac and same config were similar. What could be wrong?

Incessant failed dns requests, or timeouts every 20 seconds

Similar Messages

Maybe you are looking for