Network Globe Objects

Hi-
What exactly are the nature of the objects (folders) created in the Network Globe object? I have a couple stale objects that I would like to get rid of. I think one of them was pointing at a Windows workgroup (called Workgroup) that one Windows machine was configured under. That machine is now gone, but the folder remains. Another one is Mshome (presumably XP systems configured in their default workgroup name "mshome")...this folder contains a couple active systems and one that I know is no longer there.
The main one is the workgroup folder. Changing to root in terminal and trying to whack it from /network doesn't work either.
Is this some sort of a automounted point somewhere hidden in a config file or what?
Thanks for any help!!

Hi Jaekay:
I suspect they're part of the basic user template, and have those names since Workgroup and Mshome are the default names used by Microsoft. There may be a configuration file somewhere (*.conf) that controls this, but since this is created by the system (even the root user can't delete the folders), it would be unwise to change it even if you could.
Andrew Penner

Similar Messages

Where is the network memory object?

Hello,
I have a performance problem.
I wrote a logical network in the spatial database with around 120.000 links and 100.000 nodes.
I can read the network through SDO_NET_MEM PL/SQL but I cant read it through the Java API. I get an OutofMemory error.
I tried to increase the JVM size through the IDE I'm using (eclipse) but it had no effect at all.
I read that the Java API and the SDO_NET_MEM package use the network memory object which is a cache in a virtual memory. How can I adjust the size of this cache?
Cheers,
Elif

see post :
Re: Network analysis performance issue
you have to manage your java memory to run your java client and there is also a java memory space in the oracle server that you can increase with SDO_TOPO_MAP.SET_MAX_MEMORY_SIZE(value)
value is in bytes (not in kb like the documentation says!!!)

Import Network host objects to Cisco Security Manager

Is it possible to import complete lists of Network Hosts objects to Cisco Security Manager?
Exporting the hosts already defined in the ASAs is easy but how to import them in CSM??
Thanks

No hostnames discovered go the Policy Object Manager (nor to the Access rules), only group-names (there's a bug in ASAs related to single host names too). The way CSM handles single hosts is previously creating them, so when we later discover devices, the single hosts names set in the discovered device are not considered, only their IP addresses; then you can see that in the discovered access rules CSM shows the hostname as the previously defined ones in the Policy Object Manager. If you dont define those hostnames before the device discovery, you will only see IP addresses, no hostnames, no matter they are set in your firewalls.
Imagine discovering a couple FWSM modules with 500 access rules, and you only get to see the IP addresses of the 2,500 hosts on your network. And you have all those hosts already defined in your FWSM firewalls, when you log via ASDM you view your hard created rules with hostnames, and when you log to CSM you only view IP addresses. The clients get very disappointed with CSM after that, and discard it. The bigger the network, the faster they reject CSM.
The only way to add hosts in the Policy Object Manager is 1 by 1. But as this may have happened to more than one company and considering how easy it is to code a feature like that, I assume that it's possible to import a complete list of single hosts to CSM.
is that really possible? it should be.
thanks for the replies so far

Please help : Unable to bind to Network Layer object

We have installed BO Edge 3.1 on a server and all happened successfully.
We have installed the client applicatons on the local PC (laptop) and all was fine.
From the Client, we can open any default universes and test successfully its conection. It works also with SAP connection.
On the other hand, when connected on remote on the Server, and trying to make a basic report with existing sample universe, we have an error "Unable to bind to Network Layer object".
He tries to open a dll in a Drive e:\...dataaccess\ConnectionServer\dbd_sap.dll but it happens it is not able to see the dll.
We trye with the connection of club, fashion and it is the same issue.
We connecting through the infoview, we have the same issue.
Any idea?
Thanks for your help
Best regards,
Here is the txt message we receive:
CS: DBDriver failed to load : E:\Business Objects\Edge 3.1\BusinessObjects Enterprise 12.0\win32_x86\dataAccess\connectionServer\dbd_sap.dll (The specified module could not be found.

Either SAP GUI wasn't properly installed or SAP Interation Kit wasn't properly installed.
However, if even efashion based universe is not working - this means installation wasn't succesfull.
Did you installed the product using local Administrator Account ?

Cisco CSM 4.1: delete unused networks/hosts objects

I will delete all unused networks/hosts objects in Cisco CSM 4.2 befor I compare the objects with the entries in our IPAM. Does somebody know how this is possible?
Many thanks for your support.

Yep
I had this issue with the service objects. When I created the fliter for the service objects also the CSM predefined objects are displayed. I selected all these objects and choose to delete them. During the delete process CSM stopped to delete the objects by the first CSM predefined object.
I think you have the same issue (for example with the predefined "any" object, if not referenced in your polocies).
Workaround:
- apply filter again and delete the displayed objects (deselect the predefined objects before).

Network - print object overview

hello!
i tried to print the object overview in a network (CN22, menu network->print), but the menu-entry is not selectable.
how could i print this overview - is there some customizing missing? the status of my network is already released ...
thanks!
matthias

Hi,
I just went through the same problem. Don't know if it is still open.
In customizing under "Project System"->"Structures"->"Operative Structures"->"Network"->"Printing in Networks" you will find entry "Recommendations for printing and print control". There it is stated that the number of time tickets or number of confirmation slips entered for the activity is greater than zero.
Check in transaction OPS0 if you have set the number of prints greater than zero in menu point "List control for transactions (double clic on the entry).

Cache My Network request Objects

I have been pretty much into Networking for the last two days and have a lot of questions to ask about writing java.net enabled apps. I will put one question per thread.
Question
I have an application that should implement Cache service. It works like this - when a client sends a request object, the cache service checks the service if a copy of such request exist in the cache. If yes, the cache service sends the corresponding response object in the cache; else it send the new request to the server and stores the new request. I implemented this with a normal filesystem (with a map implementation). But as new to jsk 1.5, I saw ResponseCache clas.
Can I use it or can it help me in any such way.
I am eager to learn.
Thanks in advance.
Michael

It's not just Mozilla applications that are having problems. It's all applications. But as soon as I exit Firefox, all other programs get their network connections restored. And when I start Firefox again, it works too.
I did find the [http://support.microsoft.com/kb/314067 How to troubleshoot TCP/IP connectivity with Windows XP] article on that page you mentioned, but my network is working now, so there's nothing to troubleshoot. I'll try that next time it happens.

PS Network Authorization Objects?

Hi,
I want to assign authorization for a perticular Network of a perticular WBS in a PS project.
BUt all the standard object i have checked dose not serve the purpose.
What is the standard procedure for doing that? Any object you know can be useful to me?
C_AFVG_APL           PS: Work Center for Network Activities and Activity Elements
C_AFVG_TYP           PS: Activity types for network act. and activity elements
C_AFKO_DIS            Network: MRP Group (Plant) and Transaction Type
C_AFKO_ACT           Activities on network header level

Hi Hussain,
    The authorization object related to wbs in a ps project are
*)C_PRPS_ART     you can use this object to control who can access WBS elements in the PS depending on the project type,
*)C_PRPS_KOK     you can use this object to control who can access WBS elements in the PS depending on the controlling area assigned to them,
*)C_PRPS_KST      you can use this object to control who can access WBS elements in the PS depending on the responsible cost center for the WBS elements,
*)C_PRPS_PRC       you can use this object to control who can access WBS elements in the PS depending upon the profit center ,
*)C_PRPS_USR       This authorization object is intended as a "master" for you to copy from when you create your own company-specific authorization objects for WBS elements, activities and activity elements.
*)C_PRPS_VNR     You can use this authorization object to control who has access to the WBS elements in the Project System depending on the person responsible for the project ("project manager").
    The best way to search for authorization object as i prefer is the use the tcode SUIM.
    Hussain,One thing which i want to mention here is when u give this authorization object to any user plz check the authorization field also.where u r able to restrict a user for view/display,change, create etc..

Analysis Using a Network Memory Object

When loading Spatial Network into memory where is the actual memory occupied? On client or server side?
PS, example for loading network into memory:
PL/SQL:
sdo_net_mem.network_manager.read_network(net_mem=>'XXX', allow_updates=>'TRUE');
Java:
NetworkMetadata metadata = LODNetworkManager.getNetworkMetadata(sql.getConnection(), 'XXX', 'XXX');
NetworkIO networkIO = LODNetworkManager.getNetworkIO(sql.getConnection(), 'XXX', 'XXX', metadata);

I found this thread and I thought I may add my experiments :
I've been playing with networks in 10g and ended up with these points :
I programmed some PL-SQL functions based on the SDO_NET_MEM api (I mostly use shortest_path and TSP functions). Everything was fine until I decided to "industrialize" the process :
I was originally working on small networks (around 30000 edges) and got pretty good results.Then, I started loading bigger networks (500 000 edges). At this point, memory was still OK but I encountered some really weird performance drops : Using the oracle network editor which is external to the database, shortest paths computations were fast, but inside my pl-sql code, these functions were taking much more time to complete.
I found out that the javavm inside Oracle was not optimized for calculation compared to the Sun runtime and that could explain my performance problems.
The following thread gives more details about this :
Spatial : big performance differences between server and client java calls
Anyway, I decided to test my procedure with really big networks (9 million edges, 7 million nodes). I never could load the network -> I got the outofmemory error.
My server is running under dedicated mode and I have 4gb of ram.
I tried several configurations :
I first set JAVA_POOL to 1.8 GB inside the SGA, in vain.
Then, I started to understand it had something to do with PGA so I reduced SGA and increased PGA up to 2BG. It failed.
I'm now completely stucked :
- JVM does not give as good results as on the client side :(
- Big networks don't load inside database memory.
My questions are (hopefully one could answer) :
Are there any means to estimate the size of a "loaded in memory" network, given the number of edges and nodes and then configure oracle memory areas ?
Why is the oracle javavm so bad, can we tune it ?
Should I definitively envisage to re-develop my program as a java client and simply use Oracle to store my data ?
Thank you.
Benjamin.

Cisco Network Assistant - object not visible

I am running CNA 5.8. I have a situation where a device is discovered and is referenced on the left frame / Tree Diagram (in Topology View), BUT the device scrolls to the extreme corner of the right frame / Topology Map. I am unable to select and drag to a point where it is again visible. Most frustrating! Does anyone have a similar experience and a "fix"?
Thanks.

It will be helpful for other community members to know the solution and cause, if can be shared.
-Thanks
Vinod

Cisco ASA 5505 Routing between internal networks

Hi,
I am new to Cisco ASA and have been configuring my new firewall but one thing have been bothering. I cannot get internal networks and routing between them to work as I would like to. Goal is to set four networks and control access with ACL:s between those.
1. Outside
2. DMZ
3. ServerNet1
4. Inside
ASA version is 9.1 and i have been reading on two different ways on handling IP routing with this. NAT Exempt and not configuring NAT at all and letting normal IP routing to handle internal networks. No matter how I configure, with or without NAT I cannot get access from inside network to DMZ or from ServerNet1 to DMZ. Strange thing is that I can access services from DMZ to Inside and ServerNet1 if access list allows it. For instance DNS server is on Inside network and DMZ works great using it.
Here is the running conf:
interface Ethernet0/0
switchport access vlan 20
interface Ethernet0/1
switchport access vlan 20
interface Ethernet0/2
switchport access vlan 19
interface Ethernet0/3
switchport access vlan 10
switchport trunk allowed vlan 10,19-20
switchport trunk native vlan 1
interface Ethernet0/4
switchport access vlan 10
interface Ethernet0/5
switchport access vlan 10
switchport trunk allowed vlan 10-11,19-20
switchport trunk native vlan 1
switchport mode trunk
interface Ethernet0/6
switchport access vlan 10
switchport trunk allowed vlan 10-11,19-20
switchport trunk native vlan 1
switchport mode trunk
interface Ethernet0/7
switchport access vlan 10
interface Vlan10
nameif inside
security-level 90
ip address 192.168.2.1 255.255.255.0
interface Vlan11
nameif ServerNet1
security-level 100
ip address 192.168.4.1 255.255.255.0
interface Vlan19
nameif DMZ
security-level 10
ip address 192.168.3.1 255.255.255.0
interface Vlan20
nameif outside
security-level 0
ip address dhcp setroute
ftp mode passive
clock timezone EEST 2
clock summer-time EEDT recurring last Sun Mar 3:00 last Sun Oct 4:00
object network obj_any
subnet 0.0.0.0 0.0.0.0
object network obj-192.168.2.0
subnet 192.168.2.0 255.255.255.0
object network obj-192.168.3.0
subnet 192.168.3.0 255.255.255.0
object network DNS
host 192.168.2.10
description DNS Liikenne
object network Srv2
host 192.168.2.10
description DC, DNS, DNCP
object network obj-192.168.4.0
subnet 192.168.4.0 255.255.255.0
object network ServerNet1
subnet 192.168.4.0 255.255.255.0
object-group protocol TCPUDP
protocol-object udp
protocol-object tcp
object-group network RFC1918
object-group network InternalNetworks
network-object 192.168.2.0 255.255.255.0
network-object 192.168.3.0 255.255.255.0
object-group service DM_INLINE_SERVICE_1
service-object tcp destination eq domain
service-object udp destination eq domain
service-object udp destination eq nameserver
service-object udp destination eq ntp
object-group service DM_INLINE_TCP_1 tcp
port-object eq www
port-object eq https
port-object eq ftp
port-object eq ftp-data
object-group service rdp tcp-udp
description Microsoft RDP
port-object eq 3389
object-group service DM_INLINE_TCP_2 tcp
port-object eq ftp
port-object eq ftp-data
port-object eq www
port-object eq https
object-group service DM_INLINE_SERVICE_2
service-object tcp destination eq domain
service-object udp destination eq domain
object-group network DM_INLINE_NETWORK_1
network-object object obj-192.168.2.0
network-object object obj-192.168.4.0
access-list dmz_access_in extended permit ip object obj-192.168.3.0 object obj_any
access-list dmz_access_in extended deny ip any object-group InternalNetworks
access-list DMZ_access_in extended permit object-group TCPUDP object obj-192.168.3.0 object DNS eq domain
access-list DMZ_access_in extended permit object-group TCPUDP object obj-192.168.3.0 object-group DM_INLINE_NETWORK_1 object-group rdp
access-list DMZ_access_in extended deny ip any object-group InternalNetworks
access-list DMZ_access_in extended permit tcp object obj-192.168.3.0 object obj_any object-group DM_INLINE_TCP_2
access-list inside_access_in extended permit ip object obj-192.168.2.0 object-group InternalNetworks
access-list inside_access_in extended permit object-group TCPUDP object obj-192.168.2.0 object obj_any object-group rdp
access-list inside_access_in extended permit tcp object obj-192.168.2.0 object obj_any object-group DM_INLINE_TCP_1
access-list inside_access_in extended permit object-group DM_INLINE_SERVICE_1 object Srv2 object obj_any
access-list inside_access_in extended permit object-group TCPUDP object obj-192.168.2.0 object obj-192.168.3.0 object-group rdp
access-list ServerNet1_access_in extended permit object-group DM_INLINE_SERVICE_2 any object DNS
access-list ServerNet1_access_in extended permit ip any any
pager lines 24
logging enable
logging asdm informational
mtu ServerNet1 1500
mtu inside 1500
mtu DMZ 1500
mtu outside 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-711-52.bin
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
nat (inside,DMZ) source static obj-192.168.2.0 obj-192.168.2.0 destination static obj-192.168.2.0 obj-192.168.2.0 no-proxy-arp
object network obj_any
nat (inside,outside) dynamic interface
nat (DMZ,outside) after-auto source dynamic obj_any interface destination static obj_any obj_any
nat (ServerNet1,outside) after-auto source dynamic obj-192.168.4.0 interface
access-group ServerNet1_access_in in interface ServerNet1
access-group inside_access_in in interface inside
access-group DMZ_access_in in interface DMZ
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
aaa authentication ssh console LOCAL
http server enable
http 192.168.2.0 255.255.255.0 inside
http 192.168.4.0 255.255.255.0 ServerNet1
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
crypto ipsec security-association pmtu-aging infinite
crypto ca trustpool policy
telnet timeout 5
ssh 192.168.4.0 255.255.255.0 ServerNet1
ssh 192.168.2.0 255.255.255.0 inside
ssh timeout 5
console timeout 0
dhcpd auto_config outside
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect icmp
service-policy global_policy global
prompt hostname context
no call-home reporting anonymous

Hi Jouni,
Yep, Finnish would be good also =)
In front of ASA is DSL modem, on the trunk ports is Hyper-V host that uses the trunk ports so that every VM has their VLAN ID defined in the VM level. Everything is working good on that end. Also there is WLAN Access Pois on one of the ASA ports, on the WLAN AP there is the management portal address on DMZ that i have been testing agains (192.168.3.4)
If i configure Dynamic PAT from inside to the DMZ then the traffic starts to work from inside to all hosts on DMZ but thats not the right way to do it so no shortcuts =)
Here is the conf now, still doesnt work:
interface Ethernet0/0
switchport access vlan 20
interface Ethernet0/1
switchport access vlan 20
interface Ethernet0/2
switchport access vlan 19
interface Ethernet0/3
switchport access vlan 10
switchport trunk allowed vlan 10,19-20
switchport trunk native vlan 1
interface Ethernet0/4
switchport access vlan 10
interface Ethernet0/5
switchport access vlan 10
switchport trunk allowed vlan 10-11,19-20
switchport trunk native vlan 1
switchport mode trunk
interface Ethernet0/6
switchport access vlan 10
switchport trunk allowed vlan 10-11,19-20
switchport trunk native vlan 1
switchport mode trunk
interface Ethernet0/7
switchport access vlan 10
interface Vlan10
nameif inside
security-level 90
ip address 192.168.2.1 255.255.255.0
interface Vlan11
nameif ServerNet1
security-level 100
ip address 192.168.4.1 255.255.255.0
interface Vlan19
nameif DMZ
security-level 10
ip address 192.168.3.1 255.255.255.0
interface Vlan20
nameif outside
security-level 0
ip address dhcp setroute
ftp mode passive
clock timezone EEST 2
clock summer-time EEDT recurring last Sun Mar 3:00 last Sun Oct 4:00
object network obj_any
subnet 0.0.0.0 0.0.0.0
object network obj-192.168.2.0
subnet 192.168.2.0 255.255.255.0
object network obj-192.168.3.0
subnet 192.168.3.0 255.255.255.0
object network DNS
host 192.168.2.10
description DNS Liikenne
object network Srv2
host 192.168.2.10
description DC, DNS, DNCP
object network obj-192.168.4.0
subnet 192.168.4.0 255.255.255.0
object network ServerNet1
subnet 192.168.4.0 255.255.255.0
object-group protocol TCPUDP
protocol-object udp
protocol-object tcp
object-group network RFC1918
object-group network InternalNetworks
network-object 192.168.2.0 255.255.255.0
network-object 192.168.3.0 255.255.255.0
object-group service DM_INLINE_SERVICE_1
service-object tcp destination eq domain
service-object udp destination eq domain
service-object udp destination eq nameserver
service-object udp destination eq ntp
object-group service DM_INLINE_TCP_1 tcp
port-object eq www
port-object eq https
port-object eq ftp
port-object eq ftp-data
object-group service rdp tcp-udp
description Microsoft RDP
port-object eq 3389
object-group service DM_INLINE_TCP_2 tcp
port-object eq ftp
port-object eq ftp-data
port-object eq www
port-object eq https
object-group service DM_INLINE_SERVICE_2
service-object tcp destination eq domain
service-object udp destination eq domain
object-group network DM_INLINE_NETWORK_1
network-object object obj-192.168.2.0
network-object object obj-192.168.4.0
object-group network DEFAULT-PAT-SOURCE
description Default PAT source networks
network-object 192.168.2.0 255.255.255.0
network-object 192.168.3.0 255.255.255.0
network-object 192.168.4.0 255.255.255.0
access-list dmz_access_in extended permit ip object obj-192.168.3.0 object obj_any
access-list dmz_access_in extended deny ip any object-group InternalNetworks
access-list DMZ_access_in extended permit object-group TCPUDP object obj-192.168.3.0 object DNS eq domain
access-list DMZ_access_in extended permit object-group TCPUDP object obj-192.168.3.0 object-group DM_INLINE_NETWORK_1 object-group rdp
access-list DMZ_access_in extended deny ip any object-group InternalNetworks
access-list DMZ_access_in extended permit tcp object obj-192.168.3.0 object obj_any object-group DM_INLINE_TCP_2
access-list inside_access_in extended permit ip object obj-192.168.2.0 object-group InternalNetworks
access-list inside_access_in extended permit object-group TCPUDP object obj-192.168.2.0 object obj_any object-group rdp
access-list inside_access_in extended permit tcp object obj-192.168.2.0 object obj_any object-group DM_INLINE_TCP_1
access-list inside_access_in extended permit object-group DM_INLINE_SERVICE_1 object Srv2 object obj_any
access-list inside_access_in extended permit object-group TCPUDP object obj-192.168.2.0 object obj-192.168.3.0 object-group rdp
access-list ServerNet1_access_in extended permit object-group DM_INLINE_SERVICE_2 any object DNS
access-list ServerNet1_access_in extended permit ip any any
pager lines 24
logging enable
logging asdm informational
mtu ServerNet1 1500
mtu inside 1500
mtu DMZ 1500
mtu outside 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-711-52.bin
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
nat (any,outside) after-auto source dynamic DEFAULT-PAT-SOURCE interface
access-group ServerNet1_access_in in interface ServerNet1
access-group inside_access_in in interface inside
access-group DMZ_access_in in interface DMZ
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
aaa authentication ssh console LOCAL
http server enable
http 192.168.2.0 255.255.255.0 inside
http 192.168.4.0 255.255.255.0 ServerNet1
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
crypto ipsec security-association pmtu-aging infinite
crypto ca trustpool policy
telnet timeout 5
ssh 192.168.4.0 255.255.255.0 ServerNet1
ssh 192.168.2.0 255.255.255.0 inside
ssh timeout 5
console timeout 0
dhcpd auto_config outside
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect icmp
service-policy global_policy global
prompt hostname context
no call-home reporting anonymous

Failover Cluster Network Name Failed and Can't be Repaired

I have an issue that seem to be a different problem than any others have encountered.
I've scoured everything I can find and nothing has fixed my problem.
The problem starts with the common problem of the cluster network name failing on my 2 node server 2012 file server cluster. The computer object was still in AD and appeared to be fine so it was not the common problem of the object
getting deleted somehow. At the time, there was no other object with that name in the recycling bin, so I don't think it was mistakenly deleted and quickly recreated to cover any tracks, so to speak.
Following one guide, I tried to find the registry key that corresponded with the GUID of the object, but neither node in the cluster had it in its registry (which may be part of the problem).
Since it was in the failed state, I tried to do the repair on the object to no avail.
We run a "locked down" DC environment so all computer objects have to be pre-provisioned. They were all pre-provisioned successfully and successfully assigned during cluster creation. The cluster was running with no issues for a month
or so before this problem came up.
When I do a repair on the object while taking diagnostic logs the following 4609 error appears:
The action 'Repair' did not complete. - System.ApplicationException: An error occurred resetting the password for 'Cluster Name'. ---> System.ComponentModel.Win32Exception: Unknown error (0x80005000)
There appears to be a corresponding 4771 error with a failure code 0x18 that comes from the security log of the DC that states there was a Kerberos pre-authentication failure for the cluster network name object (Domain\Clustername$)
I believe this is what is causing the repair failure. All the information I found related to security error 4771 was either a bad credentials given for a user account or the fix was to reconnect the computer to the domain. I can't seem to find
a way to do this with the cluster network name. If there's a way please let me know.
I've tried a number of things, like resetting the object, disabling it, deleting and creating a new object with the same name, deleting that new object and recovering the original, etc...
Can anyone shed some light on what is going on and hopefully how to fix it other than rebuilding the cluster? I'm quite close to just tearing it down and building it back up but am hesitant because this cluster in currently in production...
Any help would be appreciated

Hi,
I don’t find out the similar issue with yours, base on my experience, the 4096 error
often caused by the CSV disk issue, and the 0x80005000 error some time caused by the repetitive computer object in OU. Please check the above related part or run the validate test then post the error information.
Although I do have a CSV, there doesn't seem to be any problems with it and it was running just fine for a month or so before the problem started. I double checked and there is no duplicate computer objects, maybe I don't understand what you mean by
repetitive, could you explain further?
The cluster validates successfully with a few warnings:
Validating cluster resource Name: DT-FileCluster.
This resource is marked with a state of 'Failed' instead of
'Online'. This failed state indicates that the resource had a problem either
coming online or had a failure while it was online. The event logs and cluster
logs may have information that is helpful in identifying the cause of the
failure.
- This is because the cluster name is in the failed state
Validating the service principal names for Name:
DT-FileCluster.
The network name Name: DT-FileCluster does not have a valid
value for the read-only property 'ObjectGUID'. To validate the service principal
name the read-only private property 'ObjectGuid' must have a valid value. To
correct this issue make sure that the network name has been brought online at
least once. If this does not correct this issue you will need to delete the
network name and re-create it.
- This is definitely related to the problem and the GUID probably got removed when we attempted a fix by resetting the object and trying the repair from the failover cluster manager.
The user running validate, does not have permissions to create
computer objects in the 'ad.unlv.edu' domain.
- This is correct, we run a restricted domain. I have a delegated OU that I can pre-provision accounts in. The account was pro-provisioned successfully and was at one point setup and working just fine.
There are no other errors nor warnings.

Driver errors reported when trying to start objects

We have a standard PCI can card, and are developing in the following environment:
Software written in VC++ Version6,
running under NT4.0,
Port configured as 'CAN0',
using extended arbitration IDs.
We create one network interface object, and, depending on the test configuration, four CAN response objects.
The problems are :-
1) if the network interface object (nio) is configured as 'start on open'= TRUE then the other objects fail to initialise. If the other objects aren't started, the nio works perfectly though.
2) If the nio is configured not to start on open, the other objects will initialise successfully (obviously not a lot of use though).
Any attempt to call ncAction trying to start any of the objects will however fail with a status of 0xBFF62002, which is CanErrDriver.
Below is a stripped down set of events as to how we start our card.
AttrIdList[0] = NC_ATTR_BAUD_RATE;
AttrValueList[0] = 125000; //BaudRate;
AttrIdList[1] = NC_ATTR_START_ON_OPEN;
if( Response_Enabled == 0 )
AttrValueList[1] = NC_TRUE;
NotificationStates = (NC_ST_READ_AVAIL |
NC_ST_ERROR | NC_ST_WARNING | NC_ST_STOPPED);
else
AttrValueList[1] = NC_FALSE;
// don't look for stopped state else it
// will interrupt continuously.
NotificationStates =
(NC_ST_READ_AVAIL | NC_ST_ERROR |
NC_ST_WARNING);
AttrIdList[2] = NC_ATTR_READ_Q_LEN;
AttrValueList[2] = 50; //500;
AttrIdList[3] = NC_ATTR_WRITE_Q_LEN;
AttrValueList[3] = 20;
AttrIdList[4] = NC_ATTR_CAN_COMP_STD;
AttrValueList[4] = 0;
AttrIdList[5] = NC_ATTR_CAN_MASK_STD;
AttrValueList[5] = 0; // NC_CAN_MASK_STD_DONTCARE;
AttrIdList[6] = NC_ATTR_CAN_COMP_XTD;
AttrValueList[6] = 0;
AttrIdList[7] = NC_ATTR_CAN_MASK_XTD;
AttrValueList[7] = 0; // NC_CAN_MASK_XTD_DONTCARE;
// Configure the CAN Network Interface Object
Status = ncConfig(szCanObject, 8, AttrIdList,
AttrValueList);
CheckStatus(Status, "ncConfig");
CCanObject* pCanObject = new CCanObject;
pCanObject->m_phObject = new (NCTYPE_OBJH);
ASSERT (pCanObject->m_phObject != NULL);
Status = ncOpenObject(szCanObject,
pCanObject->m_phObject);
CheckStatus(Status, "ncOpenObject");
if (Status == 0) // object was
// successfully created
// add the CAN object to the list,
// indexed by name
m_CanObjectMap.SetAt(strObjectName,
pCanObject);
// create a string to identify the Notification
pCanObject->m_pszObjectName = new char[strObjectName.GetLength() + 1];
strcpy(pCanObject->m_pszObjectName, strObjectName);
// Create the notification used to store incoming frames.
// CanCallback will be called whenever a frame is available,
// a background error occurs, or no frame is received for 30 seconds.
// We pass a pointer to the global Queue data structure to the
// callback's RefData parameter.
Status = ncCreateNotification(
*(pCanObject->m_phObject),
NotificationStates,
NC_DURATION_INFINITE, //CAN_TIMEOUT
pCanObject->m_pszObjectName,
CanCallback); // name of callback fn
// check callback was installed
CheckStatus(Status, "ncCreateNotification");
at this point we kick off a timer for 200 msecs, and then carry on when the timer expires.
This allows the card to get itself settled.
This consists of checking configuration, and doing the following code for each of the response objects.
The things that change are the object names, the arbitration IDs, and the response data.
AttrIdList[0] = NC_ATTR_COMM_TYPE;
AttrValueList[0] = NC_CAN_COMM_TX_RESP_ONLY;
//failed bff62002 if objects set to 'start on open'
// All of the following are here as a result of testing.
// The setting above is the one that should eventually be used.
// Finally resolved by not using start-on-open above.
// AttrValueList[0] = NC_CAN_COMM_RX_UNSOL; //worked
// AttrValueList[0] = NC_CAN_COMM_RX_PERIODIC; //failed bff62005
// AttrValueList[0] = NC_CAN_COMM_RX_BY_CALL; //worked
/// AttrValueList[0] = NC_CAN_COMM_TX_PERIODIC; //worked - crashed with unhandled exception on closure though
// AttrValueList[0] = NC_CAN_COMM_TX_BY_CALL; //worked
// AttrValueList[0] = NC_CAN_COMM_TX_WAVEFORM; //worked - crashed with unhandled exception on closure though
// Specify watchdog timer period
AttrIdList[1] = NC_ATTR_BKD_PERIOD;
AttrValueList[1] = 1000;
// respond with DLC
AttrIdList[2] = NC_ATTR_BKD_READ_SIZE;
AttrValueList[2] = 0;
AttrIdList[3] = NC_ATTR_BKD_WRITE_SIZE;
AttrValueList[3] = DataLengthCode; // normally 3
AttrIdList[4] = NC_ATTR_CAN_TX_RESPONSE;
AttrValueList[4] = NC_TRUE;
/* This attribute is ignored for CAN Objects which transmit data. */
AttrIdList[5] = NC_ATTR_RX_CHANGES_ONLY;
AttrValueList[5] = NC_TRUE;
// maximum number of frames to hold in read queue
AttrIdList[6] = NC_ATTR_READ_Q_LEN;
AttrValueList[6] = 0;
// The write queue length is set to zero (queuing disabled).
// This means that for each request, the most recent data written
// using ncWrite will be transmitted in a Data Frame.
AttrIdList[7] = NC_ATTR_WRITE_Q_LEN;
AttrValueList[7] = 0;
// build the CAN object name
sprintf(szCanName, "%s::XTD0x%08lx", CanBus, ArbitrationId );
//*arbitration IDs normally used are
//*0x19008000,
//*0x19008001,
//*0x19008002
// configure the CAN object
Status = ncConfig(szCanName, ATTR_LIST_LEN, AttrIdList, AttrValueList);
// check for errors
CheckStatus(Status, szTemp);
// Open the transmitting CAN Object. The object starts up, but it
// will wait for the first call to ncWrite before it transmits a Data
// Frame.
CCanObject* pCanObject = new CCanObject;
pCanObject->m_phObject = new (NCTYPE_OBJH);
ASSERT (pCanObject->m_phObject != NULL);
Status = ncOpenObject(szCanName,
pCanObject->m_phObject);
CheckStatus(Status, szTemp);
if (Status == 0) // CAN object created successfully
// Store CAN bus information into object
pCanObject->m_strCanBusName = CanBus;
pCanObject->m_strCanName.Format("%s", szCanName);
pCanObject->m_ArbitrationID = ArbitrationId;
// add the CAN object to the list, indexed by name
// put data into output buffer
for (int i = 0; i < DataLengthCode; i++)
Transmit.Data[i] = DefaultData[i];
// setup CAN object output buffer
Status= ncWrite(*(pCanObject->m_phObject),
sizeof(Transmit), &Transmit);
CheckStatus(Status, "ncWrite");
// create a string to identify the Notification
pCanObject->m_pszObjectName = new char
[strObjectName.GetLength() + 1];
strcpy(pCanObject->m_pszObjectName,
strObjectName);
Status = ncCreateNotification(
*(pCanObject->m_phObject),
NC_ST_WRITE_SUCCESS,
NC_DURATION_INFINITE,
pCanObject->m_pszObjectName,
NotificationCallback);
// check callback was installed
CheckStatus(Status, "ncCreateNotification");
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
So, Any ideas what we're doing wrong ??
The cards were new in December 2001.
Software driver version installed is Version 1.5.1
It makes little difference which card we use, as we have many cards at this site in various pieces of test equipment, and I have tried at least 6 !
Things are beginning to get a little depserate here =:-/
Regards,
John Webster.

Many thanks for the prompt reponse Diego.
A couple of comments on what you have written above.
The Response objects are only used for the 4 messages that need responses. All other messages are handled (received) by the Network Interface Object. Is it still therefore true to say that I should be using NC_CAN_ARBID_NONE ?
I think the answer will be yes, but want to confirm.
Am I correct to say that from your description, the only change was as belows :-
AttrValueList[2] = 0;
AttrValueList[3] = 0;
AttrValueList[6] = NC_CAN_ARBID_NONE;
Should I also be setting NC_ATTR_CAN_COMP_STD to NC_CAN_ARBID_NONE too ?
Many thanks for your help. This one has been causing us a lot of problems for a long time. I have changed many of the pa
rameters, but must admit I don't think I tried that one before.
Just off now to try this, see if it makes our code work !
Regards,
John.

Leopard iMacs don't function in home network folder - only in "My Network"

Since upgrading two of our iMacs to Leopard, in Finder, the iMacs appear in both "Chris's" (our home network name), and in the generic "My Network" folders.
However, when I want to connect to the iMacs in the proper network (Chris's) I get the infuriating "...fix alias" garbage. Only by selecting the iMacs in "My Network" can I make a connection. Why? Is Leopard, even now, still behaving like a Beta product?
I want all of our Macs in the same folder, on the same network, accessible in the same folder. Just like it was in Tiger.
How do I do that? Or should I just revert to Tiger?
Many thanks in advance.
Cheers
Chris

Well, I tried to post a screenshot but obviously cannot on this forum (!!!!!!!)
On all of my Tiger computers here, Finder's column to the far left has the Grey network Icon. Click on that, and column 2 has:
Library (Document icon)
My Network (Blue folder icon)
Reynolds (Blue folder icon - our actual named network at home)
Servers (network 'globe' icon)
I have had the 'My Network' icon since I installed Leopard on one iMac. I do not have any servers, this is purely a home network, I have no Windows PCs on the network, and the network is managed by a regular Apple Airport (n) Extreme Base Station.
This isn't life threatening. It's just an annoyance that normally is associated with Windows networking. But it isn't Windows, it's all Apple. I haven't created 'My Network' - Apple's equipment here has.
If it's just a stupidly bad designed element of OS X then I'll try to forget about it. It's just inexplicable and over-complicating an already complicated technology.
Thanks for your interest.
Chris

How to accommodate changes to a document when it is linked to other objects?

We are using SAP Document Management System and Easy DMS to store and retrieve documents in all functional areas of the organization, i.e. engineering, sales, finance, etc. We have linked the Document Info Records (DIRs) for several engineering documents to the networks in the projects where they are required. When the engineering documents are updated our configuration requires that new versions of the document and DIR be created. The old version of the document and DIR are still linked to the project network. In order to see the new version of the document and DIR from the project network, the object link must be manually updated.
Is there a way to make the new version of the document and DIR automatically be linked to the project network?
We are not now using Engineering Change Management. If Engineering Change Management were used to control changes to the document - rather than document versions - would the changes in the document be available from the project network with out having to update the object links? This of course would be due to the fact that we are not creating a new version of the document.
Any other insight that anyone can provide would be helpful. We are actually linking the document and DIRs to several networks in the project. When the version of one document and DIR changes - there is a lot of maintenance involved in updated all of the object links.
Thanks,
BGS

Hi Barry,
Could you please clarify on what do you mean by documents in this context. Most of the people see documents as DIR originals.
Regards,
Ravi

Network Globe Objects

Similar Messages

Maybe you are looking for