Managed Client Login Failure

I'm trying to add managed clients to a new Server running 10.6.4 and I just can't get the clients to authenticate.
I created an account on the server, then sent an invite email and when I click on "Automatically Configure My Mac", it fails to authenticate with the password I previously sent. Naturally I have set and re-set the passwords several times to no avail. I have tried users with administrator access as well as standard users and with the server administrator account. I have also tried connecting and authenticating by manually entering the DNS domain and both the public and private IP address for the server.
Any help would be much appreciated.

Similar Messages

Historical Reporting Client Login Failure - UCCX 7.0(1)

We're experiencing intermittent login failures with the Historical Reporting Client, extract from the log file below:
1: 28/04/2010 11:58:25 %CHC-LOG_SUBFAC-3-UNK: Error # 35761 ,Description= Request timed out ,LastDllError= 0
2: 28/04/2010 11:58:25 %CHC-LOG_SUBFAC-3-UNK:Authentication response was NOT received from (http://<ip address>/histRepWebSrvrComp/histRepClientsServlet)
3: 28/04/2010 11:58:25 %CHC-LOG_SUBFAC-3-UNK:Login Error | Invalid server name or IP address. Check the server name or IP address and login again.
4: 28/04/2010 11:58:30 %CHC-LOG_SUBFAC-3-UNK:Authentication response was NOT received from (http://ip address/histRepWebSrvrComp/histRepClientsServlet)
5: 28/04/2010 11:58:30 %CHC-LOG_SUBFAC-3-UNK:Login Error | Invalid server name or IP address. Check the server name or IP address and login again.
6: 28/04/2010 11:58:30 %CHC-LOG_SUBFAC-3-UNK:Connection to web server failed due to: 12017 : Operation cancelled
7: 28/04/2010 11:59:05 %CHC-LOG_SUBFAC-3-UNK:Connection to web server failed due to: 12017 : Operation cancelled
8: 28/04/2010 11:59:05 %CHC-LOG_SUBFAC-3-UNK:Failed to load authentication response due to empty XML buffer from authentication servlet)
9: 28/04/2010 11:59:05 %CHC-LOG_SUBFAC-3-UNK:Login Error | Invalid server name or IP address. Check the server name or IP address and login again.
Does anyone know why this may be happening as it's driving the customer mad. User can usually login after a few attempts.
The authentication timeout is set to 15 seconds, surely this is more than enough time or should we increase the timer?
Any advice much appreciated.

Hi Robert
Thanks for the response and all very good suggestions which should help Chris narrow down his particular issue.
It's been about a year since we last looked at this so I'd quite forgotten most of the diagnostics we'd done however we did go through most of the same diagnostics ourselves but the resolution was hampered due to the fact we support the telephony/WAN and another third party supports the desktops and LAN infrastructure so after months of to and fro with the customer and their third party (and many, many man hours) we eventually left the risk with the customer and investigations never progressed any further.
1.) Upgrade to UCCX 7.0SR5. This is a very stable release of code with few open bugs or caveats against it.
            - Agreed. We also ran into other bugs which required an upgrade.
2.) Verify that the active NIC is indeed at the top of the bindings order. Just having it active isn't enough, there needs to be the further test of moving to the top of the bindings order.
            - We did check this.
3.) Verify that the hosts file on the UCCX server(s) has the external IP and hostname of the server in it.
            - Did this too.
4.) Check the remote locations to verify that the network is correctly configured, there are no line errors on the WAN circuits, no misconfiguration on the switch/router ports and that QOS is in place across the network.
            - This part of the investigation stalled due to another 3rd party supporting the onsite network however no WAN issues were found.
5.) Try to take a test system that is on the same network as the one having HRC errors. See if it's seeing the issues. If not, progressively move out to other offices/locations until you replicate the issue and then see what has changed. Something there should hopefully point to the cause of the error.
            - We did this also, using my laptop I connected from various locations and even when using the same network connection as the end user had no problems, we did note the successful connection attempts used a slightly different network route/DNS/WINS however again got nowhere with the third party supporting this aspect of the network.
6.) Finally, you may want to consider creating external data warehouse servers so that your UCCX servers aren't serving up the HRC data.
            - Not an option for this customer, again this aspect of the service is a different third party on their own network and customer not willing to pay for additional servers for the telephony estate to provide this functionality when they only have a few CCX users.
Regards
June

Syclo : Error in connecting Work Manager Client with Agentry Server

Hi,
Can somebody please shed some light on work manager client-server connections? I have downloaded the "SAP_WORK_MANAGER_BY_SYCLO_5.2" package from market place and set up the Work Manager server. It can successfully connect to the SAP back-end. Environment variables are correctly set too. However, I'm failing to connect to the Work Manager server from the Work Manager clients. I have tried from the Win32 & Android clients both.
For Win32 client, the error I'm getting is:
For Android, I can't even see the server instance, although it's running (it shows up while attempting to connect from Win32). Error:
When I attempt to connect from Work Manager client to the server, it asks for username/password and for Android client it asks for Agentry user id and password. Aren't these username/password of the server where my Work Manager (Agentry) server is installed?
Also, the "Agentry Development Server" which has been set to run as a service runs with Administrative privileges.
I followed this: http://wiki.scn.sap.com/wiki/display/SAPMOB/Agentry+error+Client+Receiving+RFC+ERROR+LOGON+FAILURE+incomplete+logon+Data+when+connecting+to+server
It didn't help. Please let me know where I'm going wrong?
Tags edited by: Michael Appleby

Hi Michael,
I can login to SAP backend using the credentials mentioned in JavaBE.ini file.
Please take a look at the JavaBE.ini:
[HOST]
server=<SAP server host name>
; mobile application name configured in sap like SMART_WORK_MANAGER_51, SMART_CUSTOMER_SERVICE_10, SMART_ISU_WORK_MANAGER_10...etc
APPNAME=SMART_WORK_MANAGER_52
[CONFIG]
; Used to get the SAP Configutaions from SAP if source=SAP or from JavaBE ini file
; SAP Configurations are [ENABLE_TABLE], [TABLE_CHECK], [TABLE_REFRESH], [BAPI_WRAPPER],
; [SAPOBJECT], [CT_SAPOBJECT], [CT_BAPI_WRAPPER], [CT_RETURN_TABLE], [CT_DELETE_TABLE].....etc
source=SAP
[TEST_LOGON]
UID=
UPASSWORD=
UGUID=
SERVERSERIALNUM=
; Service login user is used to get the SAP Configutaions from SAP if source=SAP
; Set ENABLED=true if source=SAP or ENABLED=false if source=INI
; If ENABLED=true, set the UID, UPASSWORD and SERVERSERIALNUM
; SERVERSERIALNUM is the Agentry server serial number
[SERVICE_LOGON]
ENABLED=true
UID=<SAP backend username>
UPASSWORD=<SAP backend password>
UPASSWORDENCODED=false
SERVERSERIALNUM=AVKNN@NILKGGBTLD
[PUSH_LOGON]
ENABLED=false
UID=
UPASSWORD=
UPASSWORDENCODED=false
SHAREDCONNECTION=10
[CLIENT_NUM]
CLIENT=720
;CLIENT=010
[SYSTEM_NUM]
;SYSNUM=33
SYSNUM=00
[LANGUAGE]
LANG=EN
[LOGGING]
;1=Fatal, 2=Error, 3=Warning, 4=Info, 5=debug, 6=trace
Level=4
[LOGON_METHOD]
; USER_AUTH if standard UID/Password authentication is used
; USER_AUTH_GLOBAL if pooled connections using single UID/Password is used
; USER_AUTH_GROUP if UID/Password authentication with SAP Message Server
; (load balancing) is used
LOGON_METHOD=USER_AUTH
[GLOBAL_LOGON]
; referenced when LOGON_METHOD=USER_AUTH_GLOBAL
; uses a pool of connections to the SAP backend all utilizing a single
; UID/password
UID=
UPASSWORD=
SHAREDCONNECTION=100
[GROUP_LOGON]
; referenced when LOGON_METHOD=USER_AUTH_GROUP
; individual user authentication using an SAP Message Server which distributes
; client connections among a "group" of SAP application servers based on load
; balancing criteria
; host name or IP address of SAP Message Server
MESSAGE_SERVER=
GROUP_NAME=
SYSTEM_ID=
CLIENT=
[REQUIRED_BAPI_WRAPPER]
com.syclo.sap.bapi.LoginCheckBAPI=/SYCLO/CORE_SUSR_LOGIN_CHECK
com.syclo.sap.bapi.RemoteUserCreateBAPI=/SYCLO/CORE_MDW_SESSION1_CRT
com.syclo.sap.bapi.RemoteParameterGetBAPI=/SYCLO/CORE_MDW_PARAMETER_GET
com.syclo.sap.bapi.SystemInfoBAPI=/SYCLO/CORE_SYSTINFO_GET
com.syclo.sap.bapi.ChangePasswordBAPI=/SYCLO/CORE_SUSR_CHANGE_PASSWD
com.syclo.sap.bapi.CTConfirmationBAPI=/SYCLO/CORE_OUTB_MSG_STAT_UPD
com.syclo.sap.bapi.DTBAPI=/SYCLO/CORE_DT_GET
com.syclo.sap.bapi.GetEmployeeDataBAPI=/SYCLO/HR_EMPLOYEE_DATA_GET
com.syclo.sap.bapi.GetUserDetailBAPI=/SYCLO/CORE_USER_GET_DETAIL
com.syclo.sap.bapi.GetUserProfileDataBAPI=/SYCLO/CORE_USER_PROFILE_GET
com.syclo.sap.bapi.PushStatusUpdateBAPI=/SYCLO/CORE_PUSH_STAT_UPD
com.syclo.sap.bapi.RemoteObjectCreateBAPI=/SYCLO/CORE_MDW_USR_OBJ_CRT
com.syclo.sap.bapi.RemoteObjectDeleteBAPI=/SYCLO/CORE_MDW_USR_OBJ_DEL
com.syclo.sap.bapi.RemoteObjectGetBAPI=/SYCLO/CORE_MDW_SESSION_GET
com.syclo.sap.bapi.RemoteObjectUpdateBAPI=/SYCLO/CORE_MDW_SESSION_UPD
com.syclo.sap.bapi.RemoteReferenceCreateBAPI=/SYCLO/CORE_MDW_USR_KEYMAP_CRT
com.syclo.sap.bapi.RemoteReferenceDeleteBAPI=/SYCLO/CORE_MDW_USR_KEYMAP_DEL
com.syclo.sap.bapi.RemoteReferenceGetBAPI=/SYCLO/CORE_MDW_SESSION_GET
com.syclo.sap.bapi.RemoteReferenceUpdateBAPI=/SYCLO/CORE_MDW_SESSION_UPD
com.syclo.sap.bapi.RemoteSessionDeleteBAPI=/SYCLO/CORE_MDW_SESSION1_DEL
com.syclo.sap.bapi.RemoteUserDeleteBAPI=/SYCLO/CORE_MDW_SESSION1_DEL
com.syclo.sap.bapi.RemoteUserUpdateBAPI=/SYCLO/CORE_MDW_SESSION_UPD
com.syclo.sap.bapi.TransactionCommitBAPI=WFD_TRANSACTION_COMMIT
com.syclo.sap.bapi.SignatureCaptureBAPI=/SYCLO/CS_DOBDSDOCUMENT_CRT
I haven't yet installed ATE and tested out any application. I just want my connections to be perfect, first.
I have a question. Are the credentials used to connect Work Manager client to the server, same as the SAP backend credentials or are they the credentials of the host on which the Work Manager server is installed?
I have tried logging in using the SAP credentials also. But that results in error too.
These credentials are valid for SAP backend and successfully logs onto it and also responds correctly to connectTest.bat. However, I think this error is logical because these are the credentials for SAP backend and not the server where Work Manager server is hosted.

SP15 in Java engine failed, "Login Failure: all modules ignored"

Hi
During the installation of sp15 (with JSPM) failed, the sdm log shows:
ERROR: Cannot connect to Host: [hostname] with user name: [J2EE_ADMIN]
My instance was down so I started but now there is an error, when I try to log on to User management it give me the error: "Login Failure: all modules ignored".
I checked the logs for the server and found the following:
#1.5^H#0000000000000067000000250000596D00045A79FA4B224F#1225379843613#com.sap.engine.services.security.resource.ResourceHandl
eImpl#sap.com/com.sap.security.core.admin#com.sap.engine.services.security.resource.ResourceHandleImpl#J2EE_GUEST#0##n/a##da7
065c0a69511ddb438000000000000#SAPEngine_Application_Thread[impl:3]_15##0#0#Error#1#/System/Security/Audit/J2EE#Java###ACCESS.
ERROR: Authorization check for caller assignment to J2EE resource [ : : : ].#4#SAP-J2EE-Engine#session-pool#ge
t_session_pool#ALL#
#1.5^H#0000000000000067000000260000596D00045A79FA4B32AC#1225379843613#com.sap.engine.services.security.authentication.loginco
ntext#sap.com/com.sap.security.core.admin#com.sap.engine.services.security.authentication.logincontext#J2EE_GUEST#0##n/a##da7
065c0a69511ddb438000000000000#SAPEngine_Application_Thread[impl:3]_15##0#0#Error##Java###Caller not authorized.
[EXCEPTION]
#1#com.sap.engine.services.security.exceptions.BaseSecurityException: Caller not authorized.
        at com.sap.engine.services.security.resource.ResourceHandleImpl.checkPermission(ResourceHandleImpl.java:627)
        at com.sap.engine.services.security.resource.ResourceHandleImpl.checkPermission(ResourceHandleImpl.java:513)
        at com.sap.engine.services.security.resource.ResourceContextImpl.checkPermission(ResourceContextImpl.java:45)
        at com.sap.engine.services.security.restriction.Restrictions.checkPermission(Restrictions.java:119)
        at com.sap.engine.services.security.server.AuthenticationContextImpl.getSessionPool(AuthenticationContextImpl.java:39
5)
        at com.sap.engine.services.security.server.AuthenticationContextImpl.getLoginContextFactory(AuthenticationContextImpl
.java:740)
        at com.sap.engine.services.security.server.AuthenticationContextImpl.getLoginContext(AuthenticationContextImpl.java:2
54)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)
        at com.sap.engine.system.SystemLoginModule.initialize(SystemLoginModule.java:72)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)
        at javax.security.auth.login.LoginContext.invoke(LoginContext.java:662)
        at javax.security.auth.login.LoginContext.access$000(LoginContext.java:129)
        at javax.security.auth.login.LoginContext$4.run(LoginContext.java:610)
        at java.security.AccessController.doPrivileged(Native Method)
        at javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:607)
        at javax.security.auth.login.LoginContext.login(LoginContext.java:534)
        at com.sap.security.core.logon.imp.SAPJ2EEAuthenticator.getLoggedInUser(SAPJ2EEAuthenticator.java:146)
        at com.sap.security.core.logon.imp.SAPJ2EEAuthenticator.forceLoggedInUser(SAPJ2EEAuthenticator.java:231)
        at com.sap.security.core.admin.ServletAccessToLogic.getActiveUser(ServletAccessToLogic.java:141)
        at com.sap.security.core.admin.UserAdminLogic.executeRequest(UserAdminLogic.java:438)
        at com.sap.security.core.admin.UserAdminServlet.doPost(UserAdminServlet.java:26)
        at com.sap.security.core.admin.UserAdminServlet.doGet(UserAdminServlet.java:19)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
        at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
        at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
        at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessio
nMessageListener.java:33)
        at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
        at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
        at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
I found the SAP Note 971249 but Iu2019m not sure it applies and even I can log on into Visual administrator.
Log for the Visual Administrator
<!LOGHEADER[START]/>
<!HELP[Manual modification of the header may cause parsing problem!]/>
<!LOGGINGVERSION[1.5.3.7185 - 630]/>
<!NAME[/usr/sap/SID/DVEBMGS00/j2ee/admin/log/./traces/visual_administration.trc]/>
<!PATTERN[visual_administration.trc]/>
<!FORMATTER[com.sap.tc.logging.ListFormatter]/>
<!ENCODING[UTF8]/>
<!FILESET[0, 5, 10000000]/>
<!PREVIOUSFILE[visual_administration.4.trc]/>
<!NEXTFILE[visual_administration.1.trc]/>
<!LOGHEADER[END]/>
#1.5^H#C000AC11873E00000000000100CEC78D00045A541BE7A040#1225217198758#com.sap.engine.services.adminadapter.gui.tasks.LoginTas
k##com.sap.engine.services.adminadapter.gui.tasks.LoginTask#######Thread[Thread-1,5,main]##0#0#Error#1#/System/Server/VisualA
dministrationTool#Java###Error while trying to login to host: null
[EXCEPTION]
#1#java.lang.NullPointerException
        at com.sap.engine.services.security.remoteimpl.login.RemoteLoginContextHelperImpl.login(RemoteLoginContextHelperImpl.
java:72)
        at com.sap.engine.services.security.remoteimpl.login.RemoteLoginContextHelperImplp4_Skel.dispatch(RemoteLoginContextH
elperImplp4_Skel.java:64)
        at com.sap.engine.services.rmi_p4.DispatchImpl._runInternal(DispatchImpl.java:319)
        at com.sap.engine.services.rmi_p4.DispatchImpl._run(DispatchImpl.java:200)
        at com.sap.engine.services.rmi_p4.server.P4SessionProcessor.request(P4SessionProcessor.java:136)
        at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessio
nMessageListener.java:33)
        at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
        at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
        at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
Thank you very much for your help.
Best Regards

hi
we had the same issue some time back when we upgraded to SP15, we opened a OSS message and SAP had to come and fix the issue.
It was some inconsistencies in -Config DB settings and they made quite a few changes in security/configurations/ticket(config tool)
also
one Java parameter was wrong(config tool - server config) :
-Djava.security.policy=/java.policy it should be -
> Djava.security.policy=./java.policy (The DOT was missing)
thank you
Jonu Joy

SSL VPN Login failure issue

Hello,
I am having an issue with some users trying to login to our SSL VPN (Anyconnect) via ASA5505 8.2(1). Authentication is done via AD. From the same computer, the client finds the DNS name and unlocks the login username and password. When I enter a username and password and click connect, it is instantly rejected with login failure with the following event log:
Function: ConnectMgr::setPromptAttributes
File: .\ConnectMgr.cpp
Line: 2657
Invoked Function: setPromptAttributes
Return Code: -33554423 (0xFE000009)
Description: GLOBAL_ERROR_UNEXPECTED
Error text:
Login failed.
If I change the user account to another user (from the same PC), login works perfectly fine - this is only happening with 3 or 4 users - I have compared the user accounts of a failing account and a successful account and they are identical in AD.
This has been driving me crazy - as a work around for the failing users, I just created a temporary account which works perfectly fine. The request doesn't even seem to hit the ASA (there is nothing in the logs that show a failed attempt). Still troubleshooting and looking at certificate's at this point. Any help/suggestions would be greatly appreciated!! Thanks.
Regards.
After a little more testing, seems somehow related to users being in to many groups in AD.
Message was edited by: Rich Viola

Hello,
If the website is unavailable or in this case, the website is missing several characters(charts, canvas, etc or some other objects), usually could be an issue with the rewrite engine.
Solution (workaround):
You may use smart tunnel for this website, so the rewrite engine will not override any content, and it will display the website as it should.
You can implement it as follow:
Add a Bookmark
Bookmark for the service and clicking the Enable Smart Tunnel option in the Add or Edit Bookmark dialog box.
For further information you can find it here:
http://www.cisco.com/c/en/us/td/docs/security/asa/asa83/configuration/guide/config/webvpn.html#wp1272236
Let me know how tit works out!
Please don't forget to rate and mark as correct the helpful Post!
David Castro,
Regards,

Unable to copy hidden package "Configuration Manager Client Package" to local DP

Content status lists it as successfully distributed to all DPs (including the local site server)
However, component status for SMS_DISTRIBUTION_MANAGER continually logs these events:
Distribution Manager failed to process package "Configuration Manager Client Package" (package ID = CDW00001).
Possible cause: Distribution manager does not have access to either the package source directory or the distribution point.
Solution: Verify that distribution manager can access the package source directory/distribution point.
Possible cause: The package source directory contains files with long file names and the total length of the path exceeds the maximum length supported by the operating system.
Solution: Reduce the number of folders defined for the package, shorten the filename, or consider bundling the files using a compression utility.
Possible cause: There is not enough disk space available on the site server computer or the distribution point.
Solution: Verify that there is enough free disk space available on the site server computer and on the distribution point.
Possible cause: The package source directory contains files that might be in use by an active process.
Solution: Close any processes that maybe using files in the source directory. If this failure persists, create an alternate copy of the source directory and update the package source to point to it.
NOTE: It appears to not be any of these causes.
If I look at the smsdpmon.log on the server in question, the following is logged every half hour:
Intializing DP Monitoring Manager...    SMS_Distribution_Point_Monitoring 1/2/2013 1:29:45 PM 2840 (0x0B18)
Getting monitoring thread priority SMS_Distribution_Point_Monitoring 1/2/2013 1:29:45 PM 2840 (0x0B18)
Getting content library root path SMS_Distribution_Point_Monitoring 1/2/2013 1:29:45 PM 2840 (0x0B18)
Getting site code SMS_Distribution_Point_Monitoring 1/2/2013 1:29:45 PM 2840 (0x0B18)
Getting algorithm ID SMS_Distribution_Point_Monitoring 1/2/2013 1:29:45 PM 2840 (0x0B18)
Failed to find algorighm ID from registry. Use default algorithm. SMS_Distribution_Point_Monitoring 1/2/2013 1:29:45 PM 2840 (0x0B18)
Getting DP Cert Type SMS_Distribution_Point_Monitoring 1/2/2013 1:29:45 PM 2840 (0x0B18)
Failed to find DP cert type from registry. Use default type. SMS_Distribution_Point_Monitoring 1/2/2013 1:29:45 PM 2840 (0x0B18)
Getting this DP NALPath SMS_Distribution_Point_Monitoring 1/2/2013 1:29:45 PM 2840 (0x0B18)
Failed to create certificate store from encoded certificate..
An error occurred during encode or decode operation. (Error: 80092002; Source: Windows) SMS_Distribution_Point_Monitoring 1/2/2013 1:29:45 PM 2840 (0x0B18)
Failed to initialize DP monitoring object. Error code: 0x80092002 SMS_Distribution_Point_Monitoring 1/2/2013 1:29:45 PM 2840 (0x0B18)
distmgr.log shows the following:
STATMSG: ID=2304 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=BRICK-CONFIGMGR.corp.COMPANY.com SITE=CDW PID=2212 TID=2124 GMTDATE=Wed Jan 02 19:29:45.109 2013 ISTR0="CDW00001" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=1 AID0=400 AVAL0="CDW00001"   SMS_DISTRIBUTION_MANAGER   1/2/2013 1:29:45 PM   2124 (0x084C)
Retrying package CDW00001   SMS_DISTRIBUTION_MANAGER   1/2/2013 1:29:45 PM   2124 (0x084C)
No action specified for the package CDW00001.   SMS_DISTRIBUTION_MANAGER   1/2/2013 1:29:45 PM   2124 (0x084C)
Start validating package CDW00001 on server ["Display=\\BRICK-CONFIGMGR.corp.COMPANY.com\"]MSWNET:["SMS_SITE=CDW"]\\BRICK-CONFIGMGR.corp.COMPANYNAME.com\...   SMS_DISTRIBUTION_MANAGER   1/2/2013 1:29:45 PM   2124 (0x084C)
Failed to start DP health monitoring task for package 'CDW00001'. Error code: -1   SMS_DISTRIBUTION_MANAGER   1/2/2013 1:29:45 PM   2124 (0x084C)
Updating package info for package CDW00001   SMS_DISTRIBUTION_MANAGER   1/2/2013 1:29:45 PM   2124 (0x084C)
Only retrying local DP update for package CDW00001, no need to replicate package definition to child sites or DP info to parent site.   SMS_DISTRIBUTION_MANAGER   1/2/2013 1:29:45 PM   2124 (0x084C)
StoredPkgVersion (2) of package CDW00001. StoredPkgVersion in database is 2.   SMS_DISTRIBUTION_MANAGER   1/2/2013 1:29:45 PM   2124 (0x084C)
SourceVersion (2) of package CDW00001. SourceVersion in database is 2.   SMS_DISTRIBUTION_MANAGER   1/2/2013 1:29:45 PM   2124 (0x084C)
STATMSG: ID=2302 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=BRICK-CONFIGMGR.corp.COMPANYNAME.com SITE=CDW PID=2212 TID=2124 GMTDATE=Wed Jan 02 19:29:45.213 2013 ISTR0="Configuration Manager Client Package" ISTR1="CDW00001" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=1 AID0=400 AVAL0="CDW00001"   SMS_DISTRIBUTION_MANAGER   1/2/2013 1:29:45 PM   2124 (0x084C)
Failed to process package CDW00001 after 41 retries, will retry 59 more times   SMS_DISTRIBUTION_MANAGER   1/2/2013 1:29:45 PM   2124 (0x084C)
Exiting package processing thread.   SMS_DISTRIBUTION_MANAGER   1/2/2013 1:29:45 PM   2124 (0x084C)
Used 0 out of 3 allowed processing threads.   SMS_DISTRIBUTION_MANAGER   1/2/2013 1:29:50 PM   3784 (0x0EC8)
Sleep 1825 seconds...   SMS_DISTRIBUTION_MANAGER   1/2/2013 1:29:50 PM   3784 (0x0EC8)

Both errors are certificate related. Is there anything special about your configuration such as special ACLs on the certificate store or FIPS compliance mode (see
http://support.microsoft.com/kb/811833) being enabled?
Nothing special with certificates; I've used the basic stuff for intranet management of clients.
The only related thing I can think of that may have affected this, is that I discovered earlier today that my MP installation got hosed (error 500) due to a broken client install on the site server itself. I uninstalled the client manually and the server
(as indicated by the component status views) appears to have repaired the MP install. Perhaps it didn't repair it completely? Would a site reset do me any good?

How to see / limit consecutive login failures?

Hi, our server is running 10.4.7 server.
In terms of hardening the machine against attacks, is there be default a limit to the number of failed logins that occur before an account is locked in some way?
If not, is there a way to turn ON that security feaure?
Where are login failures logged?
Thanks!

Yes, you can set a limit to login failures. The following assumes that you are using Open Directory and that your users are authenticating against the server's Open Directory database.
For global policies =
Open Server Admin > for the proper server select Open Directory > select Policy > select Passwords > adjust settings
For a single user = this will override global policies listed above
Open Workgroup Manager > browse users > select the account you wish to manage > Select the Advanced user settings > select Options > dialog box gives ability to limit access in a variety of ways.
Authentication is logged =
Server Admin > Open Directory > Logs > Password service server log

OS X server (10.10.1) Imap Internal login failure

I have a problem with my main server on a OS X server 10.10.1 (Mac mini)
Clients cannot log in to the IMAP side of an account on the server.
So when using the mail client Connection Doctor the SMTP is successful and the IMAP portion not.
This happens with both accounts Local as with the accounts in the Open Directory service
The log of the Open Directory service indicates that ist was an successful login.
The IMAP log shows.
error Jan 17 18:44:04 imap-login: Info: Internal login failure (pid=93306 id=27) (internal failure, 1 successful auths): user=<test>, method=PLAIN, rip=10.0.0.101, lip=10.0.0.101, mpid=93310, TLS
The user test is local users.
The server was up-grade from Maverick to Yosemite a few months ago.
It runs 10.10.1 and Server 4.0.3
Any suggestion?
Thanks and regards,
Jacob

The reason that I wanted to use WGM was because it allows you to configure a maximum backup volume size per machine. If you just configure through TM, a single machine could fill the entire volume with backups.
I know that there's a way to use hdiutil to max the sparsebundle size that is created when you don't use WGM, but lets face it folks - if the option is there, then apple should support it!

Some managed clients don't pick up managed prefs.

i have a brand new G5 Xserve running OS X 10.4.7 with all current updates installed. DNS, OD, AFP, NFS, and SMB are all working as expected.
there are two user groups, faculty and students, that contain around 40 and 300+ accounts, respectively. all logins appear to be working fine.
all previously unmanaged client machines -- seemingly regardless of OS version (a mix of 10.3.9 and 10.4.x) -- log in fine, and users receive all managed prefs.
some of the previously managed clients -- an old OD master now demoted to standalone on a 10.3.9 server -- login fine but don't grab some of the managed prefs. specifically, faculty user accounts don't show the required dock links to shares on the server and don't automount the two main AFP directories they need. home directories mount fine.
all problematic machines have been joined to the new OD.
has anyone seen this happen? i appreciate any insight you may have.
macbook pro 2.16 ghz, powerbook G4 1ghz, G4 400 mhz, poweredge and some junkers Mac OS X (10.4.7)

i have a brand new G5 Xserve running OS X 10.4.7 with all current updates installed. DNS, OD, AFP, NFS, and SMB are all working as expected.
there are two user groups, faculty and students, that contain around 40 and 300+ accounts, respectively. all logins appear to be working fine.
all previously unmanaged client machines -- seemingly regardless of OS version (a mix of 10.3.9 and 10.4.x) -- log in fine, and users receive all managed prefs.
some of the previously managed clients -- an old OD master now demoted to standalone on a 10.3.9 server -- login fine but don't grab some of the managed prefs. specifically, faculty user accounts don't show the required dock links to shares on the server and don't automount the two main AFP directories they need. home directories mount fine.
all problematic machines have been joined to the new OD.
has anyone seen this happen? i appreciate any insight you may have.
macbook pro 2.16 ghz, powerbook G4 1ghz, G4 400 mhz, poweredge and some junkers Mac OS X (10.4.7)

TC Login failure

Every day when all the PC's are switched on, I cannot mount the time capsule's network drive with the APBS Agent OR by entering \\timecapsule\share.
The only way i have managed to login is by restarting it.
'APBS Agent' Error message in XP "Unknown user, incorrect password or login is disabled. (error 64)"
i am 98% sure it's the TC not the computers.
Any ideas on whats wrong.
Thanks in advance
Message was edited by: TimmmyS

I would call this fairly typical if you are running Mountain Lion on the MBP.. particularly if you upgrade installed the OS and use Wireless.
It is a network issue.. and in particular is fault between Lion.. worse even on ML.. and the TC.. especially on later firmware ie 7.6 which was ironically released for Lion.. a veritable bug zoo in there.
Solutions.
1. Use ethernet.. if everything goes away and it all works fine.. it is highly likely wireless is messed up from upgrade install.. the solution is clean install of the OS.. and/or setup the TC again with a large reduction in the automatic wireless settings.. ie use SMB names.. short, no spaces, pure alphanumeric, including different name for 5ghz. Use fixed channels.. test 1, 6, 11 and stick with the best or force the connection to 5ghz. You may even need to fix mode.. and dhcp lease times..
2. For now a simple reboot will probably get things running.. or a full network restart. .in correct order.. modem.. TC.. clients. 2min gap.
3. Study until your eyes bleed, the various issues Pondini has written up.. C12 and C17 being the most common but understand the full range of what you are looking at.
http://pondini.org/TM/Troubleshooting.html
In the A section he has how to get log info.. A1.. reset the TM A4 and how to verify disks A5.. all most commonly used.

Fail on windowsupdate because of Configuration Manager Client

Hello everbody,
I have setup a Build and Capture task and this works ok until i enable the windowsupdate post application installation.
It looks good but it then stumbles on installing the Configuration Manager Client. Our WSUS server is also our SCCM server.
Googled arround but not much to be found other then one suggestion to exclude it using the KB number.
This is what the log is saying:
<![LOG[Scan complete, ready to install updates. Count = 1]LOG]!><time="11:05:51.000+000" date="02-05-2015" component="ZTIWindowsUpdate" context="" type="1" thread="" file="ZTIWindowsUpdate">
<![LOG[Begin Downloading...]LOG]!><time="11:05:51.000+000" date="02-05-2015" component="ZTIWindowsUpdate" context="" type="1" thread="" file="ZTIWindowsUpdate">
<![LOG[Begin Installation...]LOG]!><time="11:06:06.000+000" date="02-05-2015" component="ZTIWindowsUpdate" context="" type="1" thread="" file="ZTIWindowsUpdate">
<![LOG[ 8427071a-da80-48c3-97de-c9c528f73a2d result(4 / HR = 80070643 ) : Configuration Manager Client (5.00.7958.1000)]LOG]!><time="11:06:07.000+000" date="02-05-2015" component="ZTIWindowsUpdate"
context="" type="1" thread="" file="ZTIWindowsUpdate">
<![LOG[Failure, Please run again!]LOG]!><time="11:06:07.000+000" date="02-05-2015" component="ZTIWindowsUpdate" context="" type="1" thread="" file="ZTIWindowsUpdate">
Regards,
Francis

Hi Nick,
No it does not have to be into the image, i just wanted to use the WSUS to update more quickly instead of downloading it using the internet.
Small update, i excluded the Configuration manager client to install during update, that works but no othe updates gets installed. It is finishing the deployment succesfuly without any update installed.
Somehow i thing it needs Configuration Manager Client to be installed to install other updates.....
When i do not point the deployment to the wsus server (i comment out the wsus server in customsettings) it start downloading and installing updates as it should.
Regards,
Francis

OD managed client proxy-config

Hello all,
we created at the OD-server (OSX 10.5.8) a computergroup for our
managed clients (OSX 10.6.2).
Some configs working correct, f.e dock-config (ID com.apple.dock).
But the proxy-config (ID com.apple.SystemConfiguration)
wasn't executed at the client.
The client keep former proxy-entries.
Is this an error or because of forward reverse proxy?
Thanks! Wolfgang

Hi
I have seen this before a number of times and only on Intel iMacs, old and new. All I can put it down to is a possible screen corruption at the Login Window? Perhaps a rogue or damaged/corrupted font? It may also have something to do with how the setting is being applied locally which might be conflicting with the Managed Preferences applied from the Server?
I have also seen it initially with an OD Master/Replica pair.
For me it tends to disappear after a while or if you click the back button or restart. It might be a timing issue with whatever is providing the routing? Perhaps the NTP Server? If you're in a position you could investigate the Switch or Router? Perhaps replace one or the other or both (temporarily) to see if things change?
Tony

IFS-21008 Login Failure

I'm using an old version of iFS v1.1.10.0 and 9iAS v1.0.2.2.2a. I'm trying to get a simple LibrarySession connection to work with no luck.
My program is:
// Copyright (c) 2001 MCIA
import oracle.ifs.beans.*;
import oracle.ifs.common.*;
import java.util.*;
* A Class class.
* <P>
* @author ISB
public class IfsConnection1 extends Object {
public static void main (String args []) throws Exception
//Connect to the repository.
LibraryService ifsService = new LibraryService();
System.out.println("LibraryService, ifsService established.\n Creating LibrarySession using: userID = system and password = manager.");
CleartextCredential me = new CleartextCredential("system","manager");
ConnectOptions connectOpts = new ConnectOptions();
connectOpts.setServiceName("ServerManager");
connectOpts.setServicePassword("servermanager"); // IFS schema password: servermanager
LibrarySession ifsSession = ifsService.connect(me,connectOpts);
My error msg/stack trace is:
"D:\Program Files\JDeveloper\java1.2\jre\bin\javaw.exe" -mx50m -classpath "D:\Program Files\JDeveloper\myclasses;D:\Program Files\JDeveloper\lib\jdev-rt.zip;D:\Program Files\JDeveloper\jdbc\lib\oracle8.1.7\classes12.zip;D:\Program Files\JDeveloper\lib\connectionmanager.zip;D:\Program Files\JDeveloper\lib\servlet.jar;D:\Program Files\JDeveloper\lib\xmlparserv2.jar;D:\Program Files\JDeveloper\ifs\lib\adk.jar;D:\Program Files\JDeveloper\ifs\lib\email.jar;D:\Program Files\JDeveloper\ifs\lib\release.jar;D:\Program Files\JDeveloper\ifs\lib\repos.jar;D:\Program Files\JDeveloper\ifs\lib\utils.jar;F:\ORACLE\iSuites\ifs1.1\lib;F:\ORACLE\iSuites\ifs1.1\settings;D:\Program Files\JDeveloper\java1.2\jre\lib\rt.jar;F:\ORACLE\iSuites\jdbc\lib\classes12.zip;F:\jpdk\lib\provider.jar;F:\ORACLE\iSuites\Bin;D:\Program Files\JDeveloper\java1.2\jre\bin;D:\Program Files\JDeveloper\java1.2\jre\lib;F:\ORACLE\iSuites\jdbc\lib" IfsConnection1
LibraryService, ifsService established.
Creating LibrarySession using: userID = system and password = manager.
oracle.ifs.common.IfsException: IFS-21008: Login failure
     oracle.ifs.server.S_LibrarySessionInterface oracle.ifs.server.S_LibraryService.connect(oracle.ifs.common.Credential, boolean)
     oracle.ifs.server.S_LibrarySessionInterface oracle.ifs.beans.LibraryService.connectLocal(oracle.ifs.common.Credential, oracle.ifs.common.ConnectOptions)
     oracle.ifs.beans.LibrarySession oracle.ifs.beans.LibraryService.connect(oracle.ifs.common.Credential, oracle.ifs.common.ConnectOptions)
     void IfsConnection1.main(java.lang.String[])
Exception in thread main
thank you for any help, Tim

thanks, here's my new stack trace:
"D:\Program Files\JDeveloper\java1.2\jre\bin\javaw.exe" -mx50m -classpath "D:\Program Files\JDeveloper\myclasses;D:\Program Files\JDeveloper\lib\jdev-rt.zip;D:\Program Files\JDeveloper\jdbc\lib\oracle8.1.7\classes12.zip;D:\Program Files\JDeveloper\lib\connectionmanager.zip;D:\Program Files\JDeveloper\lib\servlet.jar;D:\Program Files\JDeveloper\lib\xmlparserv2.jar;D:\Program Files\JDeveloper\ifs\lib\adk.jar;D:\Program Files\JDeveloper\ifs\lib\email.jar;D:\Program Files\JDeveloper\ifs\lib\release.jar;D:\Program Files\JDeveloper\ifs\lib\repos.jar;D:\Program Files\JDeveloper\ifs\lib\utils.jar;F:\ORACLE\iSuites\ifs1.1\lib;F:\ORACLE\iSuites\ifs1.1\settings;D:\Program Files\JDeveloper\java1.2\jre\lib\rt.jar;F:\ORACLE\iSuites\jdbc\lib\classes12.zip;F:\jpdk\lib\provider.jar;F:\ORACLE\iSuites\Bin;D:\Program Files\JDeveloper\java1.2\jre\bin;D:\Program Files\JDeveloper\java1.2\jre\lib;F:\ORACLE\iSuites\jdbc\lib" IfsConnection1
LibraryService, ifsService established.
user = system password = manager
oracle.ifs.common.IfsException: IFS-21008: Login failure
oracle.ifs.common.IfsException: IFS-20002: Invalid schema version 1.1.0.1.0 (must be between 1.1.0.0.0 and 1.1.0.0.0)
     oracle.ifs.server.S_LibrarySessionInterface oracle.ifs.server.S_LibraryService.connect(oracle.ifs.common.Credential, boolean)
     oracle.ifs.server.S_LibrarySessionInterface oracle.ifs.beans.LibraryService.connectLocal(oracle.ifs.common.Credential, oracle.ifs.common.ConnectOptions)
     oracle.ifs.beans.LibrarySession oracle.ifs.beans.LibraryService.connect(oracle.ifs.common.Credential, oracle.ifs.common.ConnectOptions)
     void IfsConnection1.main(java.lang.String[])
Exception in thread main

Help! Can't add MacBook Air as managed client

Hi,
Running 10.6.8 Server, with just a few managed clients, all of them running Lion now. I manage things like TimeMachine, Printer settings, and Software Update. Managed computers include a 2009 MacBook Air and a 2009 Mac Mini. Works nice.
We just bought a brand new MacBook Air and when I try to add it to the ComputerGroup that is managed, it won't boot. I identify it by its MAC address as a Computer. It gets stuck during bootup and doesn't get it out of that mode.
I need to force it to shut down, remove it as a member of the managed ComputerGroup, then restart it.
Why would my others boot up OK and not this machine?
Thanks
Alain

I haven't trained on Lion Server yet, but I do know that they've changed the way computers handle profiles and management in Lion. Both client and server. It wouldn't surprise me if that's part of the problem.
That said, I'd weed out hardware failure as well. Boot the Macbook Air with the Command and R key pressed. Run the disk utility and check if the hard drive is working properly. Do a disk first aid check etc.
If all checks out, then likely it's a problem with the managed prefs. Try and reformat the main drive on the Macbook Air and try to duplicate the problem with the same result. In otherwords, from a fresh install, bind the computer to the server and try to set up the managed prefs agian. If the problem is duplicated, then it's indeed a compatibility issue with Lion Client and SL Server.
-Graham

Random Email server login failures

For the last month or so I have been having random email server login failures. This happens on my desktop and also on my smartphone, and possibly on a tablet. This is annoying because my mail program (Thunderbird) occasionally fails to start as a result. My cell phone also beeps when it fails to log into the email server, which is annoying. I am in Stuart, FL and haven't cme up with any other way to get support. Help.

I too am fed up with getting the constant run around from the Verizon support .... I even did a snail mail complaint to Verizon head quarters.... None of them respond acknowledging the problem. They keep looking client side, when it is obvious from all these posts, it is on their server. For the money I pay every month just for Fios, I am currently investigating my local Time Warner package....

Managed Client Login Failure

Similar Messages

Maybe you are looking for