ISE disk system IOPS
Clarifying the ISE vmware appliance specifications, Can anyone provide me the ISE hardware requirement for disk system IOPS equivalent to an SNS-3495?
Thanks much,
David D.
http://www.cisco.com/en/US/docs/security/ise/1.2/installation_guide/ise_vmware.html
Cisco ISE Appliance
3495
3415
Endpoint Supported
20,000
5,000
CPU
2 X Quad Core
2.4 GHz
Intel Xeon
1 X Quad Core
2.4 GHz
Intel Xeon
CPU Model
E5-2609
E5-2609
# of Cores per CPU
4
4
# of Threads per CPU
4
4
Total CPU's
8
4
Intel® Hyper-Threading Technology
No
No
Memory
32 GB
16 GB
Hard Disk
2 x 600GB 6Gb SAS 10K RPM
Raid 0 + 1
1 x 600GB 6Gb SAS 10K RPM
Operating System
64bit
64bit
Similar Messages
-
I have big problems with mountain lion. you can not have a boot disk system I resulted in the need to re-download the os from scratch impiegandoci 8 hours, it is outrageous even with windows 95.
at least that the operator has confirmed to me that he called me. I also have problems with either the start of the mac with the power off. I can not understand if it crashes or is just very very slow.
Finally, I have a problem with the external hard disck. I often said to have been ejected incorrectly (not true) and I start to restore the startup recovery disk because disk utility is ineffective from the normal operating system .. is a shocking thing, but how you reduced. in four years it had never happened. seem to have windows or worse. Wake up.
I am an Italian, alas, and then I would like an answer to my language because my € are the same as German French or English.You are on Windows 2000, you do not have a "Firefox" button, and should consider yourself to be fortunate in that you still have menus and don't have to do anything to get the menus back instead of the "Firefox" button. (The same applies to Windows XP users).
Use the "File" menu to get to Import. You are not on Windows 7 or Vista, and don't have to put up with the nonsense added for Aero.
If you want the "Firefox" button you can get it with View -> toolbars -> (uncheck) Menu Bar. The menu bar and the "Firefox" button were supposed to be mutually exclusive (which is impossible in some cases without being incompatible).
Once you are using the "Firefox" button ...
Use the "Alt" key to view the menu bar (temporarily) containing File, Edit, View, History, Bookmarks, Tools, and Help. On Windows 7 and Vista, the menu bar was hidden by default in Firefox 4 and above. These menu items are more or less available under the "Firefox" button which has the most used of the built-in Firefox menu items available in a different format.
To get back to having menus again. "Firefox" button -> Options (second column) -> (check) Menu Bar
You can make '''Firefox 7.0.1''' look like Firefox 3.6.*, see numbered '''items 1-10''' in the following topic [http://dmcritchie.mvps.org/firefox/firefox-problems.htm#fx4interface Fix Firefox 4.0 toolbar user interface, problems (Make Firefox 4.0 thru 8.0, look like 3.6)]. ''Whether or not you make changes, you should be aware of what has changed and what you have to do to use changed or missing features.''
* http://dmcritchie.mvps.org/firefox/firefox-problems.htm#fx4interface -
Trying to install Windows7 on osx Lion using USB or External superdrive but the message i get is "NON DISK SYSTEM"
i also tried rEFIt but...the same....i tried using bootcamp to create a bootable usb stick but i lost this option after i upgraded BOOTCAMP to 5.0.4Trying to install Windows7 on osx Lion using USB or External superdrive but the message i get is "NON DISK SYSTEM"
i also tried rEFIt but...the same....i tried using bootcamp to create a bootable usb stick but i lost this option after i upgraded BOOTCAMP to 5.0.4 -
Wae-574 single disk system replacement
Hello,
We've had a wae-574 lose it's only disk. Can someone confirm the steps I need to do to replace it? I know I need to power off the unit and replace the drive. Do I need to do a disk shutdown beforehand?
Do I need to do anything to have it recognize the replacement drive and rebuild it? All of the documentation I've found talks about replacing a drive in a multidrive raid 1 or raid 5 system but I'm not finding what steps I need to take in a single disk system scenario.
The system is still up and running it's just not accelrating any traffic at the moment.
Thanks,
ElliottNo problem. Mine knew the exact procedure but I had a hard time at the beginning convencing him the drive was actually dead since I could not generate the standard sysreprt or diagnostic report. There are no and apparently never were any drive lights. Once I got started I just had to figure out the missing pieces such as the de-register / re-register force stuff.. Also some of these did not apply as I do not have multiple drives for mirroring but the system let me know that. Here are the details he started me with...
++You need to burn this file into a disk and then follow these steps :
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/wae/troubleshooting/recoverycd/guide/17088rcd.html
There are 8 steps here, out of which you need to use 2,3,5 & 7 with the disk inserted and step 8 after manually removing the device. Step 7 should be repeated twice to make sure no file remains corrupted. Leave 1st,4th & 6th step entirely in this case.
++If you don’t have physical access to the device and the device is accessible remotely, you can download this file in accelerator.bin format from the Cisco website to your FTP server and install the software directly from there. In that case use this command on the CLI of the device :
#copy ftp install ftpserver / waas-image.bin
(This example assumes that the file is in the root directory of the FTP server. Provide the correct path if needed.)
You can go through this document to refer how to install from FTP server:
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/upgrade/guide/waas_upgrade-44.html
Brent -
On the DWH project I'm working right now we have performance problems mainly related to the IO. The DB server is a Sun Starfire 6800 with 20 CPUs and a total of 40 GB Ram. The disk system is a SAN (6 TB) linked to the server via 3 fibre chanels (2Gbit).
We are achiving a maximum IO of about 240 MBytes/second on the OS level when moving large files and 230 MB/s when executing full table scans of large tables.
So my question is: what kind of IO perfromance do you got and what kind of system configuration do you have?
I have no knowledge in this area but I would be glade to get some performance values of other system so then when our external SAN specialist arrives I have a clue which IO could be achieved.On the DWH project I'm working right now we have performance problems mainly related to the IO. The DB server is a Sun Starfire 6800 with 20 CPUs and a total of 40 GB Ram. The disk system is a SAN (6 TB) linked to the server via 3 fibre chanels (2Gbit).
We are achiving a maximum IO of about 240 MBytes/second on the OS level when moving large files and 230 MB/s when executing full table scans of large tables.
So my question is: what kind of IO perfromance do you got and what kind of system configuration do you have?
I have no knowledge in this area but I would be glade to get some performance values of other system so then when our external SAN specialist arrives I have a clue which IO could be achieved. -
Two system disks, system will not boot.
I installed a "second" system on a SSD drive I just put in a mac pro. My plan was to use the stratup utility to choose the SSD as the system disk. However, upon startup, I am getting only a white screen with the twirling circle. It is as if the mac pro doesn't know which system to boot from.
How can I get to the startup disk utility if I can not get anything to boot?reboot and hold option at the chime. this will boot you into startup disk manager where you can choose which disk to start from.
-
Satellite L455D-S5976: Disk system part deleted
Hi!!!!
Configuration:
TOSHIBA Satellite L455D-S5976
AMD Sempron SI-42
2GB DDR2 RAM, 250 GB HDD
I have trouble with my Hard disk.
The disk configuration was like this:
Part C: System about 300 Mb
Part D: second part about 120 Gb
Part F: third part about 120 Gb
I tried to reset this configuration like this:
Part C: Primary part about 120 Gb
Part D: Second part about 120 Gb
Part F: System about 300 Mb
So I delete the system part and configuration completed succefully.
But now It's impossible to install the system on the computer.
Is it possible to restore the small system part?
Please Help!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!If you created restore discs when you got the computer, you can use them to completely recover your computer to factory defaults. If not, you'll need to order recovery media from Toshiba.
- Peter -
Satellite L455D-S5976: Disk system part deleted
Hi!!!!
Configuration:
TOSHIBA Satellite L455D-S5976
AMD Sempron SI-42
2GB DDR2 RAM, 250 GB HDD
I have trouble with my Hard disk.
The disk configuration was like this:
Part C: System about 300 Mb
Part D: second part about 120 Gb
Part F: third part about 120 Gb
I tried to reset this configuration like this:
Part C: Primary part about 120 Gb
Part D: Second part about 120 Gb
Part F: System about 300 Mb
So I delete the system part and configuration completed succefully.
But now It's impossible to install the system on the computer.
Is it possible to restore the small system part?
Please Help!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!If you created restore discs when you got the computer, you can use them to completely recover your computer to factory defaults. If not, you'll need to order recovery media from Toshiba.
- Peter -
No more xp icone at startup disk system preference
Hi all,
I have Windows XP installed in Bootcamp on my Mac pro. Now when I want to choose to start in Windows at System Preference Start Up Disk, the Windows XP icon is not there anymore!
Someone have an idea?
Thanks.Thank you Tug!
Actually the issue is Tuxera ntfs. I just unistalled it and It's O.K. now. -
Disk System Prefs on a Mac Pro with SSD
I have recently installed an OWC 120 GB SSD on my Mac Pro in the 2nd Optical Bay and am using it as the boot disk. Should I leave the system prefs settings at the default, or should change them so that the disc does not go to sleep. I have had a few freezes when staying in one app for an extended period (Front Row watching movies, for example) and am guessing that the power down of the disks in the default settings is the culprit.
Unchecking the box seems to cure the problem, but imagine that the regular disks in bays 1-4 are now spinning. What is the answer.Most likely it hung trying to spin down the SSD. You are better off disabling the spin down option anyway. Modern hard drives are designed to run all the time. The spin down option is just for energy saving or battery saving on a laptop.
The only time my drives stop spinning is if I turn off the computer. I haven't done that in since August and most likely won't until the end of April. -
ISE distribution system with 4 nodes & Licensing
Hi,
Question 1
We have 04 ISE appliances and we are planning to deploy in distributed system such way that 02 ISE will act as PRI/SEC with the roles PAD/M&T and other 02 to be act as PRI/SEC with PDPs.
Configuring PAD/MT pair is straighforward and has no doubts, however we have issue with other two nodes which is (PDP) as PRI/SEC.
ISE giving us warning that atleast one node should have monitor role enabled, however by the time Admin role is already enabled where we cant disabled.
If someone has deployed this, appreciate can guide me in proper direction or share any document how to achieve this requirement.
Question 2
My other querry is about the licensing on this requirement. We have only 1 Base and 1 Adv license for all these 04 boxes for about 500 endpoints. However we can generate licenses against only 1 ISE appliance giving it's serial number and that will be installing on Primary PAP/MT box only, and what about other two boxes which will act as PRI/SEC PDPs and it will still giving warning that there's no licenses.
Question 3
When we deploy distributed system with above senario, what ISE node IP addresses that we need to configure on NAD (switch), will it be all 04 ip addres or it will be the pair of PAP/MT or PDP..?
Thanks in advance.Question 1
We have 04 ISE appliances and we are planning to deploy in distributed system such way that 02 ISE will act as PRI/SEC with the roles PAD/M&T and other 02 to be act as PRI/SEC with PDPs. Configuring PAD/MT pair is straighforward and has no doubts, however we have issue with other two nodes which is (PDP) as PRI/SEC. ISE giving us warning that atleast one node should have monitor role enabled, however by the time Admin role is already enabled where we cant disabled. If someone has deployed this, appreciate can guide me in proper direction or share any document how to achieve this requirement.
Answer- The type of ISE deployment you want to implement is Distributed with HA.
In this particular case, you must have PAN and one MNT and rest nodes can be PSN, which depends as per your requirement.
In your case you are going to run PAN & MNT on single node with HA and other 2 nodes are left for PSNs.
There is no concept of HA for individual PSN, your all PSNs will remain active; however you can distribute the requests coming from NADs between 2 PSNs, like configure some NADs with one PSN IP and rest with other PSN.
Question 2
My other querry is about the licensing on this requirement. We have only 1 Base and 1 Adv license for all these 04 boxes for about 500 endpoints. However we can generate licenses against only 1 ISE appliance giving it's serial number and that will be installing on Primary PAP/MT box only, and what about other two boxes which will act as PRI/SEC PDPs and it will still giving warning that there's no licenses.
Answer- First node in ISE is considered as Primary node under the ISE instance, so when you add more ISE appliances under that ISE instance all become secondary except the first one.
Hence you install licenses on the Primary ISE node on which you installed ISE in early stage or you introduced in your network.
So Licenses are meant for ISE instance not for the node.
Question 3
When we deploy distributed system with above senario, what ISE node IP addresses that we need to configure on NAD (switch), will it be all 04 ip addres or it will be the pair of PAP/MT or PDP..?
Answer- On NADs you have to configure PSN's IPs, like you can configure one PSN IP as a primary and other one as a secondary. -
Can't switch Startup Disks - System Freezes
I read and applied many solutions to my problem, but after I switched over from OS 10.2.8 to 9.1 I've had nothing but freezes and can't get out of 9.1. Here's what I tried.
*Holding down the x key.
*Trashing preferences ASLM, Finder, Mac OS, & System
*Holding down keys: Apple, Option, Shift & Delete
*Zapping PRAM: Changed the screen to flashing ? & Mac file folder, then eventually attempted restart but with large images on the screen. It seems like it made it worse.
*Removed the battery. Tried to restart. No change.
*Unplugged the machine, bought a new battery, installed it & plugged in and restarted. Nothing changed.
The computer freezes on Restart unless I hold down the Shift key and starts with Extensions Off.
*Then I went into Control Panels/Startup Disk, switched to 10.2.8, and whether I click on Restart or just highlight 10.2.8 and try to Restart from the drop down menu the machine freezes.
It freezes on regular startup without extensions Off, and any attempt to Restart.
*I also tried Disk First Aid several times. At first I received the message that everything appears to be normal. Then on another attempt I received "Test interrupted because another program is using the disk."
What else can I do? Help!
Thank you,
Dave
G3 Blue Mac OS X (10.2.x) Also 9.1Hi, David -
Welcome to Apple's Discussions.
From the specs you've given - G3 Blue Mac
Is your machine a G3 B&W (Blue & White) 'tower' model? - or is it an iMac?
If it is an iMac, which specific model? - what is the CPU (machine) speed?
Be sure you have updated the firmware for your model -
Article #86117 - Firmware Updates
Some machines need that firmware update before the X key will force a boot to OSX. If your machine needs a firmware update, it will need to be installed while it is booted to OS 9 from the internal hard drive. Running the firmware installer is safe - if your machine does not need it (such as it has already been done), the installer will so state and refuse to run further.
The Startup Disk control panel that comes with OS 9.1 and earlier is not capable of recognizing OSX as a valid OS. The solution is to either update the OS to OS 9.2.1 or later (which can be done via download updater), or update just the control panel. You can download a replacement control panel from this page -
Startup Disk 9.2.1 Document and Software
It may help to throw away the file named Startup Disk Preferences (System Folder >> Preferences >> Startup Disk Preferences) after replacing that control panel.
FWIW, I've found that using the Restart button in OS 9's Startup Disk control panel usually does not work worth a hoot. What does work, is to make the selection of boot volume/OS in Startup Disk, then close the control panel and use the Restart item in Finder's Special menu.
I also tried Disk First Aid several times. At first I received the message that everything appears to be normal. Then on another attempt I received "Test interrupted because another program is using the disk."
That would indicate you are running Disk First Aid from the hard drive while booted to the hard drive. In order for DFA to do some diagnostics or testing and to do any repairs the machine can not be booted to the hard drive being examined, nor DFA run from it.
The solution for that is to boot to (in this case) an OS 9 Install CD (the most recent one you have valid for that machine - a retail OS 9.1 Install CD is perfect) -and then run DFA from the CD - it can be found in the Utilities folder on any OS 9 install CD.
It freezes on regular startup without extensions Off, and any attempt to Restart.
At what point does it freeze?
- before extensions start to load?
- in the middle of extensions and control panels loading?
- after extensions and control panels have loaded, but before the desktop has fully loaded?
- or some other point? -
Ipod plugged to external hub / Hard disk = system crashed !!
Hello I have an external disk with a hub (minipartner from Macway) it seems that it isn't possible to plugged it & using Itunes (in despite that under the explorer I can see my ipod)
I tried few times & windows crased down each time, it's boring because I have only a 4 pins firewire used for that external disk, otherwise I have a pc card as well but it put extra wire again on my desk which contains already many things so anybody have a good experience with that configuration. Otherwise i had no success as well to put my the itunes library on the external disk, i have some errors messages each times during synchronisation......
Thanks for any suggestion !
toshiba Windows XP Ipod 2 g (still working ...)Any hooks in particular? I don't know which hook to add other then the 'blocks' hook, which is there already:
HOOKS="base udev autodetect modconf block filesystems keyboard fsck"
Also, I don't think that could be the problem since loading the initramfs image takes place after choosing something from the Grub Menu. That menu never appears, I just get "welcome to grub!" with a blinking cursor underneath.
I did add "insmod usbms" in grub.cfg, but that didn't change anything.
What strikes me as odd is that in grub.cfg, the disk is referred to as "hd1", where I think it could just as well be "hd0" if that's the first hard disk the BIOS boots from. But I'm not sure if that really matters since the search is done with the UUID.
Another thing I tested earlier: I dd 'd the Arch Live image to the external usb HDD, and then it boots fine... -
ISE Distributed System - AD join issue
Hi,
We have deployed 04 ISE nodes in the following senario. (ISE ver 1.1.2.245)
1 ISE - Primary (A) Secondary (M)
2 ISE - Primary (M) Secondary (A)
3 ISE - Policy Service (PDP)
4 ISE - Policy Service (PDP)
When integrating with AD, we can only integrat to the 1 ISE only. NTP, Timezone, DNS working on all 04 boxes perfectly. We are getting the attached error while integrating AD with other ISE nodes.
In the above senario, what ISE nodes should have the AD joined, only the PDP or all 04 nodes should have joined..?
Can someone please advise. Please see the attached screenprints for the deployment and detailed error while joining to AD.
Thanks in advance.Hi Neno,
Below is the debug logs for AD joining. I can see the below two issues, but dont know how to find the solution..
•1) (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
•2) SASL bind to ldap/[email protected] - GSSAPI Mechanism with Kerberos error ": Cannot contact any KDC for requested realm"
Mar 3 09:53:47 xxx-TW-ISE-2 adjoin[27660]: DEBUG network.state ProbePorts complete for hqv-dcs-02.xxx.gov.qa. Elapsed time 0.014737 secs
Mar 3 09:53:47 xxx-TW-ISE-2 adjoin[27660]: DEBUG dns.findkdc KDC locator for xxx.GOV.QA
Mar 3 09:53:47 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domaincontroller: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:53:47 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.dc.xxx.gov.qa: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:53:47 xxx-TW-ISE-2 adjoin[27660]: DEBUG dns.findsrv FindSrvFromDns(0): _kerberos._tcp.xxxsite._sites.xxx.gov.qa
Mar 3 09:53:47 xxx-TW-ISE-2 adjoin[27660]: DEBUG network.state NST: SniffList: postfailsort=hqv-dcs-02.xxx.gov.qa, hqp-dcs-01.xxx.gov.qa
Mar 3 09:53:47 xxx-TW-ISE-2 adjoin[27660]: DEBUG base.kerberos.keytab GetSaltFromKDC returns: xxx.GOV.QAAdmin-Asif
Mar 3 09:53:47 xxx-TW-ISE-2 adjoin[27660]: DEBUG base.aduser getSalt update: user:[email protected] salt:xxx.GOV.QAAdmin-Asif
Mar 3 09:53:47 xxx-TW-ISE-2 adjoin[27660]: DEBUG dns.findkdc KDC locator for xxx.GOV.QA
Mar 3 09:53:47 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domaincontroller: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:53:47 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.dc.xxx.gov.qa: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:53:47 xxx-TW-ISE-2 adjoin[27660]: DEBUG dns.findsrv FindSrvFromDns(0): _kerberos._tcp.xxxsite._sites.xxx.gov.qa
Mar 3 09:53:47 xxx-TW-ISE-2 adjoin[27660]: DEBUG network.state NST: SniffList: postfailsort=hqv-dcs-02.xxx.gov.qa, hqp-dcs-01.xxx.gov.qa
Mar 3 09:53:49 xxx-TW-ISE-2 adjoin[27660]: DEBUG dns.findkdc KDC locator for xxx.GOV.QA
Mar 3 09:53:49 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domaincontroller: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:53:49 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.dc.xxx.gov.qa: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:53:49 xxx-TW-ISE-2 adjoin[27660]: DEBUG dns.findsrv FindSrvFromDns(0): _kerberos._tcp.xxxsite._sites.xxx.gov.qa
Mar 3 09:53:49 xxx-TW-ISE-2 adjoin[27660]: DEBUG network.state NST: SniffList: postfailsort=hqv-dcs-02.xxx.gov.qa, hqp-dcs-01.xxx.gov.qa
Mar 3 09:53:49 xxx-TW-ISE-2 adjoin[27660]: DEBUG base.bind.ad Performing LDAP binding with GSSAPI mechanisms to server - hqp-dcs-01.xxx.gov.qa
Mar 3 09:53:49 xxx-TW-ISE-2 adjoin[27660]: DEBUG dns.findkdc KDC locator for xxx.GOV.QA
Mar 3 09:53:49 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domaincontroller: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:53:49 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.dc.xxx.gov.qa: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:53:49 xxx-TW-ISE-2 adjoin[27660]: DEBUG dns.findsrv FindSrvFromDns(0): _kerberos._tcp.xxxsite._sites.xxx.gov.qa
Mar 3 09:53:49 xxx-TW-ISE-2 adjoin[27660]: DEBUG network.state NST: SniffList: postfailsort=hqv-dcs-02.xxx.gov.qa, hqp-dcs-01.xxx.gov.qa
Mar 3 09:54:04 xxx-TW-ISE-2 adjoin[27660]: DEBUG base.osutil Module=Kerberos : SASL bind to ldap/[email protected] - GSSAPI Mechanism with Kerberos error ": Cannot contact any KDC for requested realm" (reference base/adbind.cpp:495 rc: -1765328228)
Mar 3 09:54:04 xxx-TW-ISE-2 adjoin[27660]: DEBUG network.state NST:reportFailure: hqp-dcs-01.xxx.gov.qa
Mar 3 09:54:04 xxx-TW-ISE-2 adjoin[27660]: DIAG base.bind.ad connectToServiceInDomain: Failed to connect to hqp-dcs-01.xxx.gov.qa:389: SASL bind to ldap/[email protected] - GSSAPI Mechanism with Kerberos error ": Cannot contact any KDC for requested realm"
Mar 3 09:54:04 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domaincontroller: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:54:04 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.dc.xxx.gov.qa: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:54:04 xxx-TW-ISE-2 adjoin[27660]: DEBUG dns.findsrv FindSrvFromDns(0): _ldap._tcp.xxxsite._sites.xxx.gov.qa
Mar 3 09:54:04 xxx-TW-ISE-2 adjoin[27660]: DEBUG network.state NST: SniffList: postfailsort=hqv-dcs-02.xxx.gov.qa, hqp-dcs-01.xxx.gov.qa
Mar 3 09:54:04 xxx-TW-ISE-2 adjoin[27660]: DEBUG base.bind.ad Attempting to connect to a DC in site 'xxxsite'
Mar 3 09:54:04 xxx-TW-ISE-2 adjoin[27660]: DEBUG base.bind.ad Connecting to hqv-dcs-02.xxx.gov.qa:389
Mar 3 09:54:04 xxx-TW-ISE-2 adjoin[27660]: DIAG base.bind.ldap 10.0.11.52:389 fetch dn="" filter="(objectclass=*)" timeout=11
Mar 3 09:54:06 xxx-TW-ISE-2 adjoin[27660]: DEBUG lrpc.adobject new object:
Mar 3 09:54:06 xxx-TW-ISE-2 adjoin[27660]: DEBUG base.bind.ad Connected root=DC=xxx,DC=gov,DC=qa, domain=xxx.GOV.QA functionality=3
Mar 3 09:54:06 xxx-TW-ISE-2 adjoin[27660]: DEBUG base.bind.ad Address of hqv-dcs-02.xxx.gov.qa is 10.0.11.52
Mar 3 09:54:06 xxx-TW-ISE-2 adjoin[27660]: DEBUG base.bind.ad Performing LDAP binding with GSSAPI mechanisms to server - hqv-dcs-02.xxx.gov.qa
Mar 3 09:54:06 xxx-TW-ISE-2 adjoin[27660]: DEBUG dns.findkdc KDC locator for xxx.GOV.QA
Mar 3 09:54:06 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domaincontroller: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:54:06 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.dc.xxx.gov.qa: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:54:06 xxx-TW-ISE-2 adjoin[27660]: DEBUG dns.findsrv FindSrvFromDns(0): _kerberos._tcp.xxxsite._sites.xxx.gov.qa
Mar 3 09:54:06 xxx-TW-ISE-2 adjoin[27660]: DEBUG network.state NST: SniffList: postfailsort=hqv-dcs-02.xxx.gov.qa, hqp-dcs-01.xxx.gov.qa
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG base.osutil Module=Kerberos : SASL bind to ldap/[email protected] - GSSAPI Mechanism with Kerberos error ": Cannot contact any KDC for requested realm" (reference base/adbind.cpp:495 rc: -1765328228)
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG network.state NST:reportFailure: hqv-dcs-02.xxx.gov.qa
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG base.bind.ad connectToList: Failed to connect to hqv-dcs-02.xxx.gov.qa:389: SASL bind to ldap/[email protected] - GSSAPI Mechanism with Kerberos error ": Cannot contact any KDC for requested realm"
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG base.osutil Module=LDAP : reconnect failed (reference base/adbind.cpp:785 rc: -11)
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG base.bind.ad Destroying binding to 'xxx.GOV.QA'
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.settings Setting zonename to
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.settings Setting schema to
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.settings Setting zone to
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.dc.xxx.gov.qa: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.settings Setting domaincontroller to
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.settings Setting site to
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.settings Setting domain to
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.settings Setting prew2k.host to
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.settings Setting host to
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG cli.adjoin Unexpected LDAP Error Connect error
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG cli.adjoin due to unexpected configuration or network error.
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG cli.adjoin Please try the --verbose option or run 'adinfo --diag' to diagnose the problem.
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.settings Setting host to
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: DEBUG util.settings Setting prew2k.host to
Mar 3 09:54:21 xxx-TW-ISE-2 adjoin[27660]: INFO cli.adjoin Join to domain 'xxx.gov.qa', zone 'null' failed.
Mar 3 09:54:23 xxx-TW-ISE-2 adinfo[27666]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:54:23 xxx-TW-ISE-2 adinfo[27666]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:54:23 xxx-TW-ISE-2 adinfo[27668]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:54:23 xxx-TW-ISE-2 adinfo[27668]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:54:33 xxx-TW-ISE-2 adinfo[28164]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:54:33 xxx-TW-ISE-2 adinfo[28164]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:54:44 xxx-TW-ISE-2 adinfo[28172]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:54:44 xxx-TW-ISE-2 adinfo[28172]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:54:54 xxx-TW-ISE-2 adinfo[28900]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:54:54 xxx-TW-ISE-2 adinfo[28900]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:55:05 xxx-TW-ISE-2 adinfo[28905]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:55:05 xxx-TW-ISE-2 adinfo[28905]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:55:16 xxx-TW-ISE-2 adinfo[28907]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:55:16 xxx-TW-ISE-2 adinfo[28907]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:55:27 xxx-TW-ISE-2 adinfo[28911]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:55:27 xxx-TW-ISE-2 adinfo[28911]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:55:38 xxx-TW-ISE-2 adinfo[28913]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:55:38 xxx-TW-ISE-2 adinfo[28913]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:55:49 xxx-TW-ISE-2 adinfo[28920]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:55:49 xxx-TW-ISE-2 adinfo[28920]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:56:00 xxx-TW-ISE-2 adinfo[28988]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:56:00 xxx-TW-ISE-2 adinfo[28988]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2)
Mar 3 09:56:11 xxx-TW-ISE-2 adinfo[29010]: DEBUG util.except (IO) : Cannot open file /var/centrifydc/kset.domain: No such file or directory (reference util/setting.cpp:106 rc: 2) -
Cisco ISE Error, System Alarm (Colector)
Hi there,
Some Authentication erros won't show up on the Cisco ISE /Operations/Authentications Log.
There is an error on the database:
Details: Database failure (<ise-hostname>, RadiusAuthenticationFailed)
Exception:
ORA-01461: can bind a LONG value only for insert into a LONG column
Any ideas?
Thanks,
NorbertHi Jallaluddin
I work for Centrify Support and saw your posting. Here our analysis on checking the adlogs.txt.zip:
Server not found in Kerberos database" (reference base/adbind.cpp:495 rc: -1765328377)
That error is likely coming from the KDC - meaning there is some problem with server side SPNs
We need the following:
1) A network trace.
2) adcheck output.
3) adinfo --support output
4) Run dcdiag or netdiag on the server side.
Also we partner with Cisco and so would it possible to work with your partners and I am pretty sure they have seen this before with DC issues etc. Can you please work with them and see?. TIA
Best Regards
Raghu Srinivasan
Maybe you are looking for
-
I would like to decide what pictures I put on my phone and which ones to delete NOT APPLE. This as you can see has really annoyed me, if any APPLE employees read these posts I would like to know how to get rid of. The Photo library and all of the fo
-
Which two statements are true about WHERE and HAVING clauses? (Choose two) A. A WHERE clause can be used to restrict both rows and groups. B. A WHERE clause can be used to restrict rows only. C. A HAVING clause can be used to restrict both rows and g
-
SQL Developer for Deployments of scripts?
I currently use SQL Station for deploying code into my database. There is a Code Manager feature that allows developers to Develop Code into a central Repository. This Code is added to a Release Folder, so developer a, b and c can add code to a relea
-
?When I run with my Muvo TX FM around my arm, it sometimes suddenly stops, even though the battery is fresh, or was fresh when I left home. When I get back home, I tested the battery and found it completely dead. I replaced it with a fresh one and fo
-
How to print at 1440, 2880 dpi now? Epson 2200.
The dropdown is gone to choose hi-rez. Now I just get 180, 360, 720. I have: Epson 2200, Leopard, just installed Epson 2200 drivers. Thx Message was edited by: intellivision