Multiple domain issues.

Hi,
We have a issue,
We are using multiple AD domains and we are able to see one of the AD domain users under u201Cusers and groups u201C in CMC but we are unable to see the second domain users in users and group under CMC.
We are able to add the one of the AD domain users manually but when tried to add another domain users getting error message.
There was an error while writing data back to the server: The secWinAD plug-in failed to look up the account for the user "tomorrow.
We are using IIS.
Environment Details -
BOXIR2,
AD authentication,
Multiple AD domains,
IIS as the application server
We are using two way trust between 2 AD domains and also we added UseFQDNForDirectoryServers in registry editor, set as true.
Is there any resolution for this issue?
Thank you in advance,
Thanks & Regards,
Bill.

If you view the trust in Microsoft management console (mmc) domains and trusts (typically available to all users) then what type of trust is listed between the 2 domains?
Regards,
Tim

Similar Messages

Issuing Multiple MYSAPSSO2 tickets for Multiple Domains

Hi,
I am having a problem understanding the SAP documentation on how to go about issuing SAP login tickets in multiple domains. In the documentation it states that in order to do so, you require either a IRJ or the SAP ISAPI Web Filter installed in on a server in the target Domain. I have now setup the IIS_SSO.dll ISAPI filter in the domain I require the SSO ticket to be issued in however when I make a request to that webserver I do not see the MYSAPSSO2 cookie being created in my browser, I do see in the ISAPI logs that the request has been filtered and the portal username extracted and set to the configured HTTP Header, but no new Cookie created in the DOMAIN.
Can anyone help? Has anyone done something like this before?
Basically I have a portal in the domain <b>myportal.subdomain.domain.com</b> and an ITS in the domain <b>myits.domain.com</b>. With this configuration the MYSAPSSO2 cookie is not sent to the ITS server as it is in a Super Domain. So what I want is to configure the portal to issue a Cookie in the super domain (domain.com) rather then subdomain.domain.com. I thought I could do this with the parameter login.ticket_recieving_hosts in the usermanagment.properties file (EP5) and the IIS ISAPI filter to SSO (IIS_SSO.dll) configured on a website in the super domain (domain.com).
Any help would be greatly appriciated.
Simon.

I believe we had to set the domain relax level (ume.logon.security.relax_domain.level) but needed to make sure this was secure since it changes the domain scope of cookies that are valid for the system.
See the following:
http://scn.sap.com/thread/1534863
http://help.sap.com/saphelp_nw70ehp3/helpdata/en/5e/473d4124b08739e10000000a1550b0/frameset.htm
Hope this helps.

Facing issue while provisioning to AD which is in multiple domain in single forest

Hi All,
I am facing issue while user provisioning to AD which is in multiple domain in single forest.I can Synchronize the OU and Groups from Global Catalog i.e. root domain,but unable to Synchronize OU and Groups from child domains.Following is depict of my domain.
Root -------   example.com
         |_______doamin1.example.com
         |_______doamin2.example.com
         |_______domain3.example.com
My global catalog is example.com where I have configure my connector.Following is the snippets of it.
Parameter
Value
ADLDSPort
BDCHostNames
Configuration Lookup
Lookup.Configuration.ActiveDirectory.Trusted
Connector Server Name
Active Directory Connector Server
Container
DC=example,DC=com
DirectoryAdminName
DWPTEST\adm
DirectoryAdminPassword
DomainName
example.com
IsADLDS
no
LDAPHostName
GlobalCatalog server name -> where my root domain is present
SyncDomainController
SyncGlobalCatalogServer
GlobalCatalog server name -> where my root domain is present
UseSSL
no
Above configuration I am using to Synch my OU and Groups using scheduler Job.Following changes I have made in connector configuration.
1. Set the value of the SearchChildDomains entry to yes in one of the following lookup definitions:
For trusted source reconciliation: Lookup.Configuration.ActiveDirectory.Trusted
For target resource reconciliation: Lookup.Configuration.ActiveDirectory
2. Specify the name of the domain controller that is hosting the Global Catalog Server as the value of the SyncGlobalCatalogServer IT resource parameter.
For provisioning purpose I am trying to find following configuration which is mentioned in connector document,but unable to locate it.
In the connector, the referral chasing option is set to All, which means that all referrals are chased when any referral is provided by the domain controller
Thanks in advance.
Regards,
Nitin Natekar

Hi All,
Thanks all for the reply.I was not getting an error,but once I changed the connector configuration,It started working. I Kept the LDAPHostName parameter blank in connector configuration.
Thanks all for reply
Regards,
Nitin Natekar

Multiple domains and multiple IPs in the same MacMini Server

I am sure that this topic has been faced already but I cannot find enough information to really dig into a solution.
I have a macmini server with two IPs let say x.x.x.12 and x.x.x.13 .
The server is set up on the first IP. It has his primary zone, machine record, mail aslias and www alias.
Lets call the server domain server.domain1.com
Everything works fine I have a couple of local users and a couple of LDAP users. Just to test the machine setup.
I can send and receive emails using any of the users as [email protected]
Now I would like to have another domain, domain2.com in the same server .
The final goal is to have users under different domains. They have their own email box, calendar, etc.
It will be preferable that I can share the same username with different domains. But I can live without that option.
My first test was to have the second domain called server.domain2.com using the second IP. x.x.x.13 .
For that I created another Primary Zone with domain2.com as machine record of x.x.x.13 . To use the second IP I simply create another Ethernet interface on the macmini.
In the Mail -> Advance settings I added the host aliases as well as virtual hosting domains for domains2.com.
With this setting I can send emails as [email protected] or [email protected] but when I replay to their messages I get a "Relay access denied" error from server.domain1.com .
I also tryed another domain pointing to x.x.x.12, the same as server.domain1.com . I did not create any extra Primary Zone but the local host aliases and the virtual hosting domains.
Same issue. I can send but I get a "Relay access " error.
As you might notice I am a novice on servers settings. I just try to recreate a similar environment common to Virtual Hosting providers for my own website playground but I cannot cut through this email configuration obstacle.
Any significant meaning that can be leading me to learn how to do it will be very very appreciated . (beside lynda,com tutorials that I followed already but do not mention multiple domains for mails).
Thanks

the problem I try to solve is to manage multiple domains in one MacMini Server.
Having two IPs is secondary.
I would like that each domains has his own users with emails, iCals, Wiki and web sites.
The main problem is having emails to work for any additional domain beside the default one on the machine IP.
I also got an additional IP address to be used on the same server hoping that it make things easier but apparently is making things more difficult.

Supporting Multiple domains in IM&P with and Expressway deployment?

Hello everyone. This is long winded but the context is needed to explain what I'm looking for. Any help is appreciated.
My customer has piloted IM&P for 1 year now and is looking to take it to the next level. They purchased Expressway Core & Edge and they are looking to enable Mobile Remote Access, B2B Video and XMPP Federation. One issue is that the Jabber domain that was selected 1 year ago for the pilot was a local domain. The reason for this is because the multidomain support was not available at the time. Internally there are 3 domains. example.ca, examplesales.ca, and examplebanannas.com. Their Jabber ID they use today is example.root.local. I am reading through the guides and it seems as though IM&P allows you to map a JABBER ID to an email address or a directory URI. This will allow multiple presence domains within one Presence cluster. The problem is that it appears as though federation will not work through expressway core / edge if you use this method. Can this be confirmed?
I am providing you these URL's only for guidance, to show you how I arrived at my situation where I’m asking for help on a configuration change to my customers IM&P settings.
note the section on page 41 of the following guide http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/X8-5/Mobile-Remote-Access-via-VCS-Deployment-Guide-X8-5-1.pdf
One would presume that Multi-domain support is now supported with expressway core & edge. The caveat I found on page 4 of the following guide in relation to xmpp federation.
http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/XMPP-Federation-with-Cisco-VCS-and-IM-and-Presence-Service.pdf
and page 10 of the following guide
http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/X8-5/XMPP-Federation-with-Cisco-VCS-and-IM-and-Presence-Service.pdf
and this section
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/interdomain_federation/10_5_1/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105_chapter_01010.html#CUP0_RF_CAF8AEDD_00
Expressway-E does not support XMPP address translation (of email addresses, for example). If you are using Expressway-E for XMPP federation, you must use native presence Jabber IDs from IM and Presence Service.
This being said
Based on my findings, I believe Cisco now supports multi-domain setup for IM&P with the "caveat" federation still doesn't work. My customer is not happy with this but still would like to proceed with the rest of the benefits that MRA brings to the table for their Jabber deployment.
To support the above scenario it is my understanding I need to make an adjustment to the configuration of IM&P. As I stated when I opened the case my customer’s current IM&P domain is “example.root.local” their JID is made up of [email protected]. It’s my understanding we cannot use this domain and activate MRA so we need to adjust everyone’s JID to be a Publicly routable DNS name. Since everyone that has a JABBER account also has an email account I was thinking we map the JID to the email. I’m trying to understand how to get from where we are to where we need to be. I found this guide but it doesn’t talk about the effects of doing this on a live system setup the way my customer is setup.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/interdomain_federation/10_5_1/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105_chapter_01100.html
I am also not certain this is the setting I’m looking for. I believe what I need to change is actually on the Presence server under the domains section I found this
Domains Configuration
Use the controls on this window to view and edit domains managed by the IM and Presence Service. Previously, the IM and Presence Service supported a single domain. With this release, you can specify multiple domains.
Before You Begin
To take advantage of multiple IM and Presence Service domains, you must choose Directory URI as the IM address scheme on the Advanced Presence Settings window. If the IM address scheme is set to UserID@domain, the default domain is used for the IM and Presence Service. The status of the IM Address Scheme setting is displayed at the top of the window in the Status box. The Status box contains a link to the Advanced Presence Settings window.
Is this what I need to do?

Hello everyone. This is long winded but the context is needed to explain what I'm looking for. Any help is appreciated.
My customer has piloted IM&P for 1 year now and is looking to take it to the next level. They purchased Expressway Core & Edge and they are looking to enable Mobile Remote Access, B2B Video and XMPP Federation. One issue is that the Jabber domain that was selected 1 year ago for the pilot was a local domain. The reason for this is because the multidomain support was not available at the time. Internally there are 3 domains. example.ca, examplesales.ca, and examplebanannas.com. Their Jabber ID they use today is example.root.local. I am reading through the guides and it seems as though IM&P allows you to map a JABBER ID to an email address or a directory URI. This will allow multiple presence domains within one Presence cluster. The problem is that it appears as though federation will not work through expressway core / edge if you use this method. Can this be confirmed?
I am providing you these URL's only for guidance, to show you how I arrived at my situation where I’m asking for help on a configuration change to my customers IM&P settings.
note the section on page 41 of the following guide http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/X8-5/Mobile-Remote-Access-via-VCS-Deployment-Guide-X8-5-1.pdf
One would presume that Multi-domain support is now supported with expressway core & edge. The caveat I found on page 4 of the following guide in relation to xmpp federation.
http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/XMPP-Federation-with-Cisco-VCS-and-IM-and-Presence-Service.pdf
and page 10 of the following guide
http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/X8-5/XMPP-Federation-with-Cisco-VCS-and-IM-and-Presence-Service.pdf
and this section
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/interdomain_federation/10_5_1/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105_chapter_01010.html#CUP0_RF_CAF8AEDD_00
Expressway-E does not support XMPP address translation (of email addresses, for example). If you are using Expressway-E for XMPP federation, you must use native presence Jabber IDs from IM and Presence Service.
This being said
Based on my findings, I believe Cisco now supports multi-domain setup for IM&P with the "caveat" federation still doesn't work. My customer is not happy with this but still would like to proceed with the rest of the benefits that MRA brings to the table for their Jabber deployment.
To support the above scenario it is my understanding I need to make an adjustment to the configuration of IM&P. As I stated when I opened the case my customer’s current IM&P domain is “example.root.local” their JID is made up of [email protected]. It’s my understanding we cannot use this domain and activate MRA so we need to adjust everyone’s JID to be a Publicly routable DNS name. Since everyone that has a JABBER account also has an email account I was thinking we map the JID to the email. I’m trying to understand how to get from where we are to where we need to be. I found this guide but it doesn’t talk about the effects of doing this on a live system setup the way my customer is setup.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/interdomain_federation/10_5_1/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105_chapter_01100.html
I am also not certain this is the setting I’m looking for. I believe what I need to change is actually on the Presence server under the domains section I found this
Domains Configuration
Use the controls on this window to view and edit domains managed by the IM and Presence Service. Previously, the IM and Presence Service supported a single domain. With this release, you can specify multiple domains.
Before You Begin
To take advantage of multiple IM and Presence Service domains, you must choose Directory URI as the IM address scheme on the Advanced Presence Settings window. If the IM address scheme is set to UserID@domain, the default domain is used for the IM and Presence Service. The status of the IM Address Scheme setting is displayed at the top of the window in the Status box. The Status box contains a link to the Advanced Presence Settings window.
Is this what I need to do?

DNS for Multiple Domains

I am trying to figure out the proper configuration for DNS that will support multiple domains. I have DSN working now for just one domain.
My XServe has a static IP connected directly to cable modem and is the master nameserver. I also have an Ubuntu server with static IP connected directly to cable modem that is the secondary (slave) nameserver.
On the XServe, I currently have a primary zone created for domain1.com. with:
* an A record for domain.com. (Fully Qualified) and the same static IP as the XServe
* an A record for ns1 (not fully qualified) and the same static IP as the XServe
* Aliases for ftp, www and mail (not fully qualified) mapped to destination ns1.domain1.com. (Fully Qualified)
Nameservers under the Primary Zone is ns1.domain1.com. and Mail Exchangers is ns1.domain1.com. with a priority of 10.
The reverse zone is getting created appropriately for me as far as I can tell. I am able to access www.domain1.com just fine as well as mail and ftp.
Now I want to add a new domain2.com to this master nameserver. I know that I will need a new Primary Zone for domain2.com. to be recognized and to setup it's aliases?
Can I use the same static IP or do I have to have a unique static IP?
Can I use the ns1.domain1.com. nameserver or does the new domain2.com need new nameservers?
Does domain2.com have it's own A records?
Does the mail exchangers need to be different for domain2.com?
It seems like all the documentation and information that I can find are just for configuring one domain and not so much for multiple domains. Any help would be greatly appreciated.
Spotted Dog

Don't think of subsequent domains as being any different from the first domain.
For every domain you need to provide certain information, including a list of the hostnames within that domain. There is no relationship between 'www' in domain1.com and 'www' in domain2.com (unless you point them to the same address, but that's a different issue).
Any host record in the zone can either be an A record (where you specify an IP address) or a CNAME (where you specify another hostname that it maps to).
In the case of your web server handling both domains you could set 'www.domain2.com' as an A record with the appropriate IP address, or you could set it as a CNAME with a value of 'www.domain1.com.' (essentially saying 'www.domain2.com has the same IP address of www.domain1.com, so go find that address').
It's also possible to use cross-domain records for things like name servers and mail servers - in other words you can set your MX record for domain2.com to mail.domain1.com (essentially saying that domain2.com's email is handled by mail.domain1.com).
Can I use the same static IP or do I have to have a unique static IP?
That's not a question for DNS. What you're defining are the hostnames in that domain. If you have one server (e.g. a web server) that can handle multiple domains (e.g. one apache server handling web traffic for both domain1.com and domain2.com) then, sure, you can use the same IP address for both.
If, on the other hand, you have specific services that cannot be multi-hosted (e.g. HTTPS) then you will need different IP addresses.
Can I use the ns1.domain1.com. nameserver or does the new domain2.com need new nameservers?
Sure, it's entirely possible to use domain1.com's name servers for domain2.com.
Does domain2.com have it's own A records?
It can do, or not, as you choose. If you're running www.domain2.com on the same server as www.domain1.com then you could use a CNAME record to point www.domain2.com to www.domain1.com.,or you could set an A record with the same IP address.
The result would be the same, but the CNAME has the advantage that if your IP address changes you only need to change your DNS in one place (www.domain1.com) and all the other addresses would automatically follow.
Does the mail exchangers need to be different for domain2.com?
Not at all, if your mail server is configured to handle mail for both domains it's entirely possible to specify mail.domain1.com as the MX record for domain2.com.

Multiple domains hosted on one OSX Server

Hi guys,
Does anyone know if it is possible to host more than one domain name on OSX server?
A client of mine runs a number of businesses and is considering Snow Leopard Server, and wants to have multiple email domains and websites hosted on one server. Also per-account contacts sync and calendar sync would be useful, does anyone know if that's available?
Thanks!
W.

You can certainly host multiple domains on Mac OS X Server. There are a few options depending on how you want it to work.
If all the usernames are the same across all domains (e.g. [email protected] is the same person as [email protected]) then just change the mail server configuration to match all the domains in the mydestination parameter in /etc/postfix/main.cf.
If the domains are different (e.g. [email protected] is not the same account as [email protected]) then you have two options - one is to use the postfix model (which requires command-line management), the other is to add the email addresses in the shortname section for each user.
You may have some issues integrating contacts and calendars, though - if you take the postfix model then the users won't exist in Open Directory and won't have a calendar/contact link, etc.
If you follow the shortname model then you have one directory with all users in all domains and you'll need to work to separate them out if you need to.

Strip multiple @domain used in username on AD Integration with Cisco ISE?

Hi there ,
How to strip multiple domain suffixes from username through ISE with AD being used as external Identity Source. Username is being used in username@domain format.
Cisco ISE 1.2 patch 4 introduced strip prefix or suffix @domain realm from username through ISE with AD being used as external Identity Source. But the documentation is not updated for this feature. I am able to strip 1 domain suffix successfully but subsequent ones listed in the suffix list fails to get stripped.
Any thoughts on the same.
Thanks Kumar

In the ISE Under Administration > Identity Management > External Identity Sources
Choose Active Directory on the Left, Select your AD Server and select Advanced Settings
Under Identity Suffix Strip, Make sure Strip prefixes listed below: is selected (I know, it says prefix).
In the List of Suffixes box, enter your list of domain suffixes to strip. The separating character is a comma (,).
If this doesn't fix your issue, then I am afraid that a call to TAC may be in order.
*****UPDATE*****
Spaces are significant characters. When listing domains, do so as such:
@domain.com,@domain.local,@testdomain.com
*****END UPDATE*****
Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question. Otherwise, feel free to post follow-up questions.
Charles Moreton
Message was edited by: Charles Moreton

WLC AAA Radius to ISE - Multiple Domains in Single Forrest

I am currently having a problem configuring AAA for management access to our wireless controllers.
Our active directory structure is as below: (note all domains are part of the same forest and full trusts between the domains)
Root Domain
Americas domain UK Domain EU Domain APAC Domain
Because of the multiple domains that exist when admins login they need to use their full UPN ([email protected]), since just using username will only authenticate agains the Root Domain and there may be duplicate usernames between the domains.
I cant even see the radius request hitting ISE and i found out that this is due to a 24 character limit on the username field on the WLC's.
I dont have this issue with other IOS based devices.
I could just create some admin accounts in the root domain but the problem is that lobbyadmin staff also needs to authenticate and they will run into the same issue.
Dont know if someone has any suggestions for a possible workaround?

http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-security/howto_45_multiple_active_directories.pdf

Using Multiple Domain Names to Access Our Portal

We operate one domain corp.company.com but all internal intranet web servers get assigned the address inside.ZZZ. The inside.ZZZ is on our IE exclusion list but company.com is not. Adding company.com seems to be a miserable task so we are looking at adding an alias so our users can access the server at the new inside.ZZZ url. We have DNS pointing the URL to the right server and that seems to be working properly.
Something within the application is redirecting the page to gnwhepdev.corp. company .com (our servers domain address) after the initial login. Since *.corp. company .com is not in the exclusion list, it is considered an outside address and rerouted. We are trying to find some way to pass the alias within the application itself so that we dont need *.corp. company .com in the exclusion list and we can point users to the inside.ZZZ url.
Our team researched this issue and found documentation that supported the use of multiple domain names to access a Enterprise Portal. The documentation that we found is below:
How ToConfigure the J2EE Engine Deployment Descriptor (Version 1.00 July 2004)
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d0eb8120-b66c-2910-5795-894f384fc054
Particularly on page 13-15 in the documentation it talks about enabling the portal via multiple domain names (Section 3.7: Using Multiple Domain Names to Access the Portal). Also, the documentation says the following:
You must have sever proxy servers, each with a different domain name. You then activate the filter mechanism and configure it to work with several proxy servers
We have several questions about the possiblities of being able to set this up and whether it would require another server where Web Dispatcher would need to be installed for this configuration to work properly. Can someone please provide some insight into what needs to be configured and answer the question about the Web Dispatcher? Also, if Web Dispatcher is required, what steps need to be done to configure? If Web Dispatcher is not needed, what will we need to do apart from that to set this up for our Enterprise Portal system?

It is but you have to use masking......
http://iwebfaq.org/site/iWeb_Domains.html

Cannot have multiple domain controllers with Essentials role in 2012 R2 Standard/Datacenter

Microsoft's Technet post on deploying Essentials Role in an existing AD environment states the following:
"The online service integration features only work when the server is a domain controller. Also, integration cannot be initiated if there are multiple domain controllers in the environment. The product team is investigating possible solutions."
http://blogs.technet.com/b/sbs/archive/2013/10/28/enabling-multiple-instances-of-windows-server-essentials-experience-in-your-environment.aspx
Microsoft Essentials Role product team, can you let us know when this will be fixed? I will not be installing Essentials as a Role if I cannot have multiple domain controllers.
As soon as I add another domain controller the Essentials role no longer functions as designed.
This is quite an oversight by your team. Can we have an ETA for a fix to this please?
Here are more with the same issue:
http://social.technet.microsoft.com/Forums/en-US/ed34abe9-6412-415d-950a-50c9675deb2e/unable-to-register-essentials-experience-role-with-microsoft-online-services?forum=2012R2EssentialsPreview

Hi. We can't give ETA. Most user there that help does not work for Microsoft. (and if a Microsoft's employee help, then it's on it's free time at home or during break)
Thus, for that reason, please call the support to get a good answer on the ETA is it's planned or not. Be advised that the essential's version replaced the SBS, thus it target small office, such limitation can stay for a long time IMO.
Regards, Philippe

Scanning Multiple Domains

I'm trying to scan across multiple domains with the MAP toolkit. I have a stand-alone computer not in any domain and I'm searching by IP address. When I try to enter the credentials I use domain\username and I get an error that I the wizard can't
authenticate to that domain. I need a single database that collects data from several domains, so I either need this to work, or another option.
Any help is greatly appreciated. Thanks!

As found in our Read Me's known issues section:
If the MAP Toolkit is installed on a computer that is a member of a domain, log on to the computer using a domain user account. Use of a local computer account on a computer that is a member of a domain will result in authentication failures to remote computers,
even if the correct domain credentials are provided to the Inventory and Assessment or Performance Metrics Wizards.
Please remember to click "Mark as Answer" on the post that helps you, and to click
"Unmark as Answer" if a marked post does not actually answer your question. Please
VOTE as HELPFUL if the post helps you. This can be beneficial to other community members reading the thread.

Accessing same Content Management Repository from Multiple Domains

I'm attempting to point many different domains to a single content management repository to avoid the duplication of data.
All the domains are able to read content correctly, but when trying to create content (whether programmatically or through the admin tool), most of the domains will get this error:
java.sql.SQLException: ORA-00001: unique constraint (SCHEMA_NAME.PK_CM_NODE) violated
Since there's no sequence generated in the database, it appears that the primary key is defined by something in the portal code. This seems to imply that you can't have multiple domains pointing to the same repository. Can someone confirm that they've seen this work? And if you've gotten it to work, what I am doing wrong?
Thanks for any help,
Dan Turkenkopf

This particular issue is inherent to the OOTB repository in WLP. The repository uses a sequencer to generate id's for created content. The way these ID's are generated causes the possibility of two applications attempting to create items with the same ID. This is due to the fact that the WLP repository manages the ID's used when creating content and doesn't currently use a GUID strategy for content id's.
You could configure another repository which does ID generation in a different fashion and avoid the persistence problem I've described.
The VCR layer which provides the access to the OOTB repository really only has the cache issue I described. This can be worked around with some custom event listener implementations that can manage stales caches. These would need to be aware of the other applications sharing the underlying content repository.
-Ryan

Enabling Multiple domains

hi,
I have a 2013 exchange installation utilizing multiple domains. for eg. domain abc.com; hgi.net, etc on the same server. Whenever now I want to create a new mail on say hgi.net it by default creates one on abc.com instead. I am using the office 365 enterprise
(online exchange edition). Can you help me resolve error and give steps on how to get around this error.
Thank you.

Hi,
Since Exchange Online is different from Exchange On-Premises , I suggest ask Exchange Online forum for help so that we can get more professional suggestions. For your reference:
http://social.technet.microsoft.com/Forums/msonline/en-US/home?forum=onlineservicesexchange
However, I can also share my suggestions on Exchange On-Premises.
According to your description, it seems an "E-mail Address Policy" issue.
By default, Exchange contains an email address policy for every mail-enabled user.
This default policy specifies the recipient's alias as the local part of the email address and uses the default accepted domain.
More details to see:
http://technet.microsoft.com/en-us/library/bb232171(v=exchg.150).aspx
It seems abc.com is the default accept domain in your environment. If you want to change abc.com to hgi.net to be the default accept doamin, you need to create external domain name as accepted domain so that Exchange server can handle emails sending to external
domain.
More details to see:
http://social.technet.microsoft.com/Forums/exchange/en-US/9a61b340-462d-41a8-a6e7-83663fea0a29/default-accepted-domain
Please correct me if there is anything misunderstand.
I still suggest ask Exchange Online Forum for help.
Good Luck : )
Thanks
Mavis Huang
TechNet Community Support

Exchange 2003 migrate to Exchange 2010 - single forest multiple domain. Active Sync problem

Hi All,
I have AD single forest and multiple domain. for example, the forest domain is jakarta.co.id, and the other domain is bali.co.id.
Exchange 2003 deployed in jakarta.co.id, User mail enabled in domain jakarta.co.id and bali.co.id.
Then, I upgrade to Exchange 2010 (deploy in jakarta.co.id) and move mailbox from Exchange 2003 to Exchange 2010.
All users in bali.co.id are able to access email from Owa, BlackBerry (BIS), Outlook, but cannot access from Android, Windows Phone. (Active-Sync).
I got error information generated from https://testconnectivity.microsoft.com, as following:
Attempting the FolderSync command on the Exchange ActiveSync session.
The test of the FolderSync command failed.
Tell me more about this issue and how to resolve it
Additional Details
Exchange ActiveSync returned an HTTP 500 response (Internal Server Error).
Active-Sync still not work even I check option "Include inheritable permissions from this object" in security tab.
any idea to fix this issue?
Thanks.
Endrik
Endrik | blog: itendrik.wordpress.com Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.

Hi Sathish,
We are planning to migrate Exchange 2003 to Exchange 2013, all user already in Exchange 2010 and Exchange 2003 was decommissioned
Event Viewer log as following:
Log Name: Application
Source: MSExchange ActiveSync
Date: 1/17/2014 10:00:48 PM
Event ID: 1008
Task Category: Requests
Level: Warning
Keywords: Classic
User: N/A
Computer: EXC2010.jakarta.co.id
Description:
An exception occurred and was handled by Exchange ActiveSync. This may have been caused by an outdated or corrupted Exchange ActiveSync device partnership. This can occur if a user tries to modify the same item from multiple computers. If this is the case,
Exchange ActiveSync will re-create the partnership with the device. Items will be updated at the next synchronization.
URL=/Microsoft-Server-ActiveSync/default.eas?Cmd=Sync&User=bali%5Csteveng&DeviceId=SAMSUNG123456789&DeviceType=SAMSUNGGTN7000
--- Exception start ---
Exception type: Microsoft.Exchange.AirSync.AirSyncPermanentException
Exception message: A null value was received for the NTSD security descriptor of container CN=ExchangeActiveSyncDevices,CN=Steven Gerrard,OU=IT,DC=bali,DC=co,DC=id.
Exception level: 0
HttpStatusCode: 500
AirSyncStatusCode: 110
XmlResponse:
This request does not contain a WBXML response.
Exception stack trace: at Microsoft.Exchange.AirSync.ADDeviceManager.SetActiveSyncDeviceContainerPermissions(ActiveSyncDevices container)
at Microsoft.Exchange.AirSync.ADDeviceManager.CreateActiveSyncDeviceContainer(Boolean retryIfFailed)
at Microsoft.Exchange.AirSync.ADDeviceManager.CreateActiveSyncDevice(GlobalInfo globalInfo, ExDateTime syncStorageCreationTime, Boolean retryIfFailed)
at Microsoft.Exchange.AirSync.ADDeviceManager.CreateActiveSyncDevice(GlobalInfo globalInfo, ExDateTime syncStorageCreationTime)
at Microsoft.Exchange.AirSync.Command.UpdateADDevice(GlobalInfo globalInfo)
at Microsoft.Exchange.AirSync.Command.CompleteDeviceAccessProcessing()
at Microsoft.Exchange.AirSync.Command.WorkerThread()
--- Exception end ---.
I think KB817379 is not related because Exchange 2003 was decommissioned.
Regards,
Endrik
Endrik | blog: itendrik.wordpress.com Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.

Multiple domain issues.

Similar Messages

Maybe you are looking for