Kerberos with sbs 2008

Hello,
I've installed VDI 3.1 EA and i am trying to configure user directory using sbs 2008,
previously i established a connection to win 2000 AD but but when i change the krb5.conf
to connect to sbs 2008 i can connect through command line with kinit -V and
nslookup but in the wizard i get an error: unable to contact user directory.
any suggestions?
thank in advance,
-Michael.

Hi,
after changing the Kerberos config file you need to restart the Common Agent Container:
cacaoadm stop --force
cacaoadm start
This page gives you instructions to find more details about an error with the directory:
http://wikis.sun.com/pages/viewpage.action?pageId=171840712
log file is /var/cacao/instances/default/logs/cacao.0
Hope this helps,
Katell

Similar Messages

Using Mac Mail with SBS 2008 + Exchange 2007

Hi,
I'm having a nightmare trying to connect my Mac Mail to our mail server. We just got a brand new SBS 2008 server put in our office, but my Mac Mail doesn't want to connect.
Every time I try, it does show the Certificate, and when I click accept it trys to connect and gives this eror:
"The Exchange Server "myserver.local" doesn't have the minimum required version installed. To use Mail with Exchange, the server must be running Update Rollup 4 for Exchange Server 2007 Service Pack 1 or later. Contact your server administrator."
Obviously the myserver bit isn't the actual server, I just don't want to tell the world our server name.
The server has the required update, it actually has Update Rollup 10 installed as of today.
Any ideas?

I think any poster who replys to their own post with something like, "Actually nevermind, I got it working." and leaves it at that despite requests for help, should be banned from ever posting on or visiting any forum on the internet for the rest of their life.
NoahG - you came here looking for answers, hoping and expecting the community to aid you, but can't be arsed to help out others once you found your own solution. You sir are a leach.

WSUS timeout issues on SBS 2008 with WSUS 3.0

I am having a heck of a time using the Server Cleanup Wizard, keep getting timeouts on the Unused updates and update revisions section.
After a few hours I get the timeout message and an option to reconnect to the node.
Here is the message that I copied to the clipboard, which is also in the event viewer as event id 7042:
The WSUS administration console was unable to connect to the WSUS Server Database.
Verify that SQL server is running on the WSUS Server. If the problem persists, try restarting SQL.
System.Data.SqlClient.SqlException -- Timeout expired. The timeout period elapsed prior to completion of the operation or the server is not responding.
The statement has been terminated.
Source
.Net SqlClient Data Provider
Stack Trace:
   at System.Windows.Forms.Control.MarshaledInvoke(Control caller, Delegate method, Object[] args, Boolean synchronous)
   at System.Windows.Forms.Control.Invoke(Delegate method, Object[] args)
   at Microsoft.UpdateServices.UI.SnapIn.Wizards.ServerCleanup.ServerCleanupWizard.OnCleanupComplete(Object sender, PerformCleanupCompletedEventArgs e)
I have tried, I believe, all of Mr. Garvin's excellent advice, like defrag the file system, run the maint. script, and do the options of the cleanup wizard one at a time. All of the other options worked.
I have also declined all the superseded updates, checked to make sure only my products were downloaded, and made sure that updates are only in English.
I followed Mr. Garvin's excellent post at the PatchZone, and tried to read everything he has written about this subject (that was a lot of content!) At this point I think I am stumped, what else can I try other than a re-install of WSUS, which I don't
really want to do, but will if that's the only option. Is that even possible with SBS 2008?
Thank you all in advance!

I followed Mr. Garvin's excellent post at the PatchZone, and tried to read everything he has written about this subject (that was a lot of content!). At this point I think I am stumped
Perhaps you overlooked the singular advice to Keep Running the "Delete unused updates.." until it does NOT timeout?
This operation is atomic. It does make progress each time you run it. The timeout is a manifestation of ASP.NET getting bored waiting on the SQL Server Stored Proc, NOT a manifestation of anything failing inside the database. Each time you run the task and
it times out, it DID delete some updates (you just don't get any stats on that because ASP.NET wimped out). When the task finally completes successfully, the SCW UI will show you the results (from the last run).
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

Problem connecting to MS Exchange 2007 on SBS 2008

I am having problems connecting to Exchange via cfexchangeconnection. Our ColdFusion environment is CF9 Enterprise on Win 2008, and the Exchange host is Win SBS 2008 (which uses IIS7).
After having worked through the documentation and following all procedures outlined at
http://help.adobe.com/en_US/ColdFusion/9.0/Developing/WSc3ff6d0ea77859461172e0811cbec14f31 -7fed.html
plus googling intensively, we have the following method to test the connection
<cfexchangeconnection action="open"
         connection="thisExchangeConnection"
         server="portal.mydomain.com"
         protocol="https"
         formBasedAuthentication="true"
         formBasedAuthenticationURL="https://portal.mydomain.com/owa/auth/owaauth.dll"
         mailboxname="myMailBox"
         username="myUsername"
         password="myPassword" />
<cfdump var="#thisExchangeConnection#">
<cfexchangeconnection action="close"
         connection="thisExchangeConnection" />
The IIS7 implementation in SBS 2008 is quite a lot different to Win 2008, so there are some question marks around some steps in the above documentation. However, we have made sure that:-
1) you can use the credentials above to login via a web browser
2) WebDav is on in IIS
3) there is no IWA and forms based authentication is on
4) certificates are installed correctly on both the CF and Exchange servers
5) the myUsernameaccount has correct permissions in iis/owa/exchange
Despite this, the net result is always
Access to the Exchange server denied.
Ensure that the user name and password are correct.
From research it seems that a lot of people have issues where the underlying problem is actually an Exchange 440 timeout error where the password in the IUSR_<servername> and IWAM_<servername> (IIS/Active Directory) is out of sync.
I was pinning my hopes on the above being the problem but now I find that in SBS 2008 there is no IWAM_<servername> server account.
All this leads me to ask is SBS 2008 actually compatible with the cfexchange tags in CF9? There is nothing in the documentation that I can find that syays that it isn't, but given the amount of time we've spent on what should be straightforward I am wondering if we are on a hiding to nothing. Anyone from Adobe care to comment?
If anyone has managed to get this to work specifically with SBS 2008, or has any advice I'd be grateful to here from you.

Hi,
As said by Sneff , I would also recommend to enable Logging to get more detailed information. Also follow
Configuration of POP/IMAP on SBS 2008 Refer to :
http://blogs.technet.com/b/sbs/archive/2008/09/19/how-to-configure-sbs-2008-to-host-pop3-imap4.aspx
http://blogs.technet.com/b/sbs/archive/2011/08/31/how-to-configure-outlook-for-pop3-imap-and-smtp-connectivity-in-sbs-2008-2011-standard.aspx
As per the error code, you need to follow
http://support.microsoft.com/kb/813514/EN-US
I would also disable AV on both Client machine and TEST , including the Filters of AV.
Binu Kumar - MCP, MCITP, MCTS , MBA - IT , Director Aarbin Technology Pvt Ltd - Please remember to mark the replies as answers if they help and unmark them if they provide no help.

How to create ADC in SBS 2008 64 bit Server for SBS 2003 32 bit Server?

Hi,
We have single windows SBS 2003 32 bit server with AD to run database as well as application of the Company. We are planning to add one more server to the network with SBS 2008 64 bit for load balancing. I just confused that two SBS servers are not compatible
in the SBS network. my requirement is to balance the database and application request load balancing along with fail over management with two Servers in the network.
Please let me know the procedure to add the SBS 2008 64 bit server as Additional Domain Controller to SBS 2003 32 bit PDC so that ADC to take role if PDC fails.
Any other ways to meet my requirement?

Hi Mallensh Patil,
Would you please let us know current situation of this issue?
I agree with Cliff. Just addition, please also refer to following article and check if can help you.
Debunking Myths About Additional Domain Controllers In SBS Domains
If any update, please feel free to let me know.
Hope this helps.
Best regards,
Justin Gu

Extend SBS 2008 - 2011 Migration

Yes, I know the SBS party has passed. But, I have a client who purchased it before the end of the year, and we are now doing a migration from SBS 2008 to SBS 2011. However, it is taking longer than 21 days.
I know with SBS 2003, you can suspend SBCore and extend the migration.
Can you do the same with SBS 2008?

Hi,
Any update?
Just checking in to see if the suggestions were helpful. Please let us know if you would like further assistance.
Best Regards,
Andy Qi
TechNet
Subscriber Support
If you are TechNet
Subscription user and have any feedback on our support quality, please send your feedbackhere.
Andy Qi
TechNet Community Support

Has anyone completly migrated/moved SBS 2008 to Office 365 ?

Hello All,
We have a client with SBS 2008 and would like to moe all AD/ emails / data / possibly some 3rd party applications like QuickBooks (This is not confirmed yet) to office 365 and once moved would like to decommission the SBS 2008 box so from that
point onwards everything including AD authentication would be done via office 365.
I have seen articles/information about moving exchange/data etc. but not the whole infrastructure to office 365 and depend entirely on office 365 without any onsite servers.
Has anyone tested this method? if so please let me know your feedback.
Also what are the cons of depending solely on office 365 apart from the obvious , office365 or internet outages , lack of full control etc.
Regards,
Dhanushka

First off that's not possible. Unless the application can run natively inside SharePoint, Office 365 does not give you NTFS file share platform for which to install QuickBooks.
Email and SharePoint yes. Native file shares no.
What can be done however is look over to Azure. On Azure you can turn on Remote desktop services, host a file sharing server in Azure/then host desktops in azure, use the Essentials role to hook into Office 365.
But bottom line what you think can be done in 365, can't all be done in 365. It needs Azure.
http://blogs.msmvps.com/bradley/2014/09/04/no-office-but-still-need-a-server-something-to-think-about/
My blog

SBS 2008 & Forefront Exchange 2010

Uninstalled the Forefront for Exchange that ships with SBS 2008 and installed the new Forefront 2010 for Exchange. Everything works great but I have a problem with the SBS Console alert. In Forefront Exchange 2010, the Forefront engine takes over the anti-SPAM function from Exchange and that is a good thing, but now the inherent SBS 2008 console has an error message under SECURITY for "Spam protection for E-Mail" as CRITICAL. I know what the problem is but I do not know how to disable the alert. Now that Excahnge is no longer handling anti-SPAM, the SBS server sees the function inactive and issues an alert sice it is unaware that that role is now filled by the Forefront 2010 anti-spam engine. Is there a method do disable the SBS Consoel alert on the SECURITY tab? Everything is working great with Forefront Exchange 2010 on SBS 2008 other than this little alert that is bugging me.
Thanks to anyone out there that has any insight on this...

GaryD9, on this thread:
http://social.technet.microsoft.com/Forums/en-US/smallbusinessserver/thread/67eea70a-5ed8-49ae-ba06-6abb2673f38e
posted a detailed answer which worked for me, as far as the Console alert goes. It doesn't fix the emailed reports. I'll copy it here incase that thread becomes unavailable:
the CAUSE of the error is that the MS Exchange "content filter" is turned off in favor of the forefront content filter when forefront is installed. The SBS console is still looking at the Exchange filter status (which is now off) and is generating an
error. On my SBS 2011 server, the cause of this is a file named "E12AntiSpam.xml" in the "C:\Program Files\Windows Small Business Server\Data\SHExtensions" directory. Within that file, there is probably a line such as
$(Get-TransportAgent "Content Filter Agent").Enabled
The fix can be as simple as changing the line to:
$(Get-TransportAgent "FSE Content Filter Agent").Enabled
(just inserting "FSE " in the front of the agent name)
It should be noted that you can't edit this file unless you open it from Notepad after right clicking
on the shortcut for Notepad and selecting "Run as Administrator". Also, you won't see any changes until you close and re-open the Windows SBS Console.
I'm a little concerned that removing the FSE.XML file (as proposed on the SBS forum) may stop ALL error
reporting rather than just changing the source from the regular content filter to the Forefront version. This solution of editing the E12AntiSpam.XML file seems a safer bet.

P45-8D Memory Lover & SBS 2008

Anybody had succes with this setup in respect to drivers etc?
DDR3 ram installed.
It's for personal use and not for a business setup.
Thanks.

I have set it up, using the sbs wizards etc. but intermittently got "bsod". Have tried spare video card, ram, hdd's but still no joy.
I read somewhere that you should use the vista 64-bit drivers for sbs 2008 and the windows 7 64-bit drivers for windows 2008 R2 (not sbs 2008).
I must admit that I ran windows 7 64-bit drivers and canned sbs 2008 before I read the above somewhere hence me asking if somebody had success with SBS 2008 on this board before I start loading again.
Running windows 7 32-bit at the moment to see how stable the box is...just in case the mainboard has an fault.

RD220 MR10i SBS 2008

I am running a RD220 with MR10i configured in raid 5 with sbs 2008 running on it. I was wondering what options are available from monitoring the raid. I downloaded acronis free drive monitor, but it said I SMART was not supported. I also tried the thinkserver tools, but they were not supported by the os. Anyway that's my question, thanks a bunch!!!

Try IBM§s ServeRAID
http://www-947.ibm.com/systems/support/supportsite.wss/docdisplay?brandind=5000008&lndocid=SERV-RAID
Jan Solar
Product Marketing
(not a technical support)
http://blog.lenovo.com/author/jsolar/

WRT350N and MS SBS 2008

I am trying to configure my WRT350 to work with SBS 2008. I used single port forwarding setup in the router manually for ports 25, 80, 443, 987, 1723 to the IP address of my server. (I have the router assigned to a static IP address). SBS 2008 tells me it can't open those ports no matter how I try to forward them with router settings. I even tried Port Range Forwarding and DMZ enabling for the server IP address to no avail.
Anyone working with SBS 2008 using this router?

Thanks. I upgraded to firmware v1.03.7 and reset and reconfigured the router. Still get the same warning error from SBS 2008 when running the "Set up Internet Address Wizard" - SBS 2008 cannot open ports 25, 80, 443,and 987to the IP address of the server. In order to receive e-mail and other info over the Internet you must manually open the ports". The router is configured with a static ip address with DHCP disabled (handled by the server). I do have Internet access through the router. I have tried single port forwarding and port range forwading under the "application & Gaming" menu on the router to open the ports for email but still no success.

Removing Exchange 2007 from SBS 2008 after Migrating to Office 365 Mid Sized with DirSync and SSO

We have recently completed off a Migration of Exchange 2007 to Office 365 Mid Sized platform.
I now need to decomission the old SBS 2008 server as they have moved to a Windows Server 2012 R2 server setup for DC, File and print and application servers.
I need to know what are the ramifications of removing the Exchange 2007 server from the SBS 2008 server and will this remove the LegacyDN details from AD and cause any issues with internal emails between users using Outlook linked through to Office365.
I understand that after removing Exchange 2007 there will be no friendly GUI to update and maintain proxyAddress, targetAddress and LegacyDN addresses, I am comfortable doing this in ADSI edit or with a script.
Will this remove the x500 addresses relating to the on premise Exchange Orgainisation and just leave behind the x500 addresses for Exchange Labs which I assume is the x500 addresses for the Azure AD intergration for Office365.

Hi ,
Thank you for posting your issue in the forum.
I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience.
Thank you for your understanding and support.
Best Regards,
Andy Qi
Andy Qi
TechNet Community Support

Migrate SBS 2008 with exchange 2007 to office365

Hi, we have a sbs 2008 with exchange 2007 the boss got the idea to move the E-mail to office 365, i have done some research but still have some questions, now i am not an expert on exchange, could some one tell me if this is a straight operation going from
exchange 2007 to office 365, is it supported or do we have to move to exchange 2010 and then to office 365?
Thank you very much in advanced.

Yes, going from Exchange 2007 to Office 365 is supported. You want to run a Migration.
Check out this link for exact instructions on what to do for the migration:
http://help.outlook.com/en-US/140/ms.exch.ecp.emailmigrationwizardexchangelearnmore.aspx
Then, when you are ready to setup Outlook with Office 365, check out this link to make Outlook use the public Autodiscover rather than SBS Autodiscover:
http://www.mcbsys.com/techblog/2011/08/using-office-365-in-an-sbs-2008-environment-take-2/
I just did a cutover migration from SBS 2008 to Office 365 using both these websites and it went off very nicely.
Good luck on your migration.
Oh, and if you only use Office 365 for email, it is $4 a month per user.

Macbook pro with OS 10.6.4 cannot join Windows SBS 2008 .local domain

Hi,
I just had a windows SBS 2008 installed and it controls a .local domain where all my Windows7 PC's are connected to. I can access the internet wired/wirelessly but i cannot see any of the computers on the network at all, thus i cannot share files or share the printer which is connected to one of the local PC's.
I have read many threads indicating possible fixes but no one has been able to give me a permanent solution. Is this inability to connect my MAC to the SBS 2008 local domain fixable from my MAC or is it to be resolved from the SBS 2008 side? Any help would be greatly appreciated.

Greetings,
Download the combo update (don't install it yet): http://support.apple.com/kb/DL1400
SafeBoot your computer: http://support.apple.com/kb/HT1455
While in SafeBoot install the combo update
Restart the computer to come out of SafeBoot
Try running software update again and see if it works.
Hope that helps.

SBS 2008 - Server Infrastructure Licensing - event id 4 and 38

Hi everybody,
I have these errors in Event Viewer
The Additional Server Count Check in the Licensing component did not pass because error 0x8007200a occurred in function f1031 [WLTT]. The specified directory service attribute or value does not exist.
Make sure that your DNS server can be contacted and the following services are running: Active Directory Domain Services (NTDS), DNS Server (DNS), Kerberos Key Distribution Center (KDC). This server will be automatically shut down if the issue is not corrected
FOLLOWED BY
The Additional Server Count Check detected a condition in your environment that is out of compliance with the licensing policy. This server will be automatically shut down if the issue is not corrected in 58 day(s) 16 hour(s) 30 minute(s). Please look for additional
events for Additional Server Count Check to troubleshoot.
BEFORE these events we have 3 informational events:
Domain Controller Check passed.
Forest Trust Check passed.
FSMO Role Check passed.
We have just ONE server (the SBS 2008, not R2); we had two but the second one (Win2008 Srv) has been dismissed. No reference to the old server is found in AD, registry or other location (DNS, DHCP...). No event about the old server is recorded at all.
This server is also a DNS server; in its network properties it has itself as the DNS server (I mean: its IP, of course)
We have no problem in FMSO roles (checked with "dcdiag /test:fsmocheck") and the server is going on regularly (no issues with services, users, ...)
Any idea? I tried to solve this all by myself but with no result at all
Thanks
Cosimo
Milan, Italy

Hi Justin,
thanks for your reply. This server was a clean install, but the domain existed before (with a SBS 2003).
I have a failed test with dcdiag /e /v
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC SERVERNAME.
The forest is not ready for RODC. Will skip checking ERODC ACEs.
* Security Permissions Check for
DC=ForestDnsZones,DC=DOMAINNAME,DC=msft
(NDNC,Version 3)
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=ForestDnsZones,DC=DOMAINNAME,DC=msft
* Security Permissions Check for
DC=DomainDnsZones,DC=DOMAINNAME,DC=msft
(NDNC,Version 3)
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=DOMAINNAME,DC=msft
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=DOMAINNAME,DC=msft
(Schema,Version 3)
* Security Permissions Check for
CN=Configuration,DC=DOMAINNAME,DC=msft
(Configuration,Version 3)
* Security Permissions Check for
DC=DOMAINNAME,DC=msft
(Domain,Version 3)
......................... SERVERNAME failed test NCSecDesc
And BSA shows:
The DNS client is not configured to point only to the internal IP address of the server. For information about how to fix network settings, see "Managing Your Windows Small Business Server 2008 network" at the Microsoft Web site (http://go.microsoft.com/fwlink/?LinkId=115881).
+
There are no DNS name server (NS) resource records with SERVERNAME.DOMAINNAME.msft for the _msdcs delegation in the forward lookup zone astra.msft.
+
The DNS CNAME resource record for Connect in the forward lookup zone for Windows SBS 2008 does not exist.
What would you suggest to me?
thanks
Cosimo

Kerberos with sbs 2008

Similar Messages

Maybe you are looking for