Remote Client take 60 - 90 Seconds to get logon window
I posted this earlier on the Tiger Server section but got no replies. Hopefully someone here has an idea?
We have a 10.4.11 server running AFP and multiple other services. About 25 users connect to the AFP sharepoints via the internal network and the login window appears immediately. Another 25 users connect through a hardware VPN from another office and their login screen appears immediately as well. We have another set of 25 users who connect directly over the internet, and only recently, it is taking 60 - 90 seconds for the logon window to appear. Once it does appear, the connection runs at normal speed.
It makes no difference whether the address is specified as FQDN or IP address. I've tried turning off Bonjour, and adding the host domain name to the search domains, but this made no difference either.
This problem did not exist until recently. It may have been about the same time as the 10.5.4 update, but I can't be sure.
Also, our ISP is known to play with "Shaping" although we did have AFP set to high priority and Port 548 is not restricted.
Is there another service that Apple uses to bring up the logon window? If so perhaps our provider is restricting bandwidth on that.
Tim
Okay, Here's the DIG output from one of the remotes:
; <<>> DiG 9.4.2-P1 <<>> cclgw.georgian.net
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47412
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;cclgw.georgian.net. IN A
;; ANSWER SECTION:
cclgw.georgian.net. 3600 IN CNAME www.e3.ca.
www.e3.ca. 3600 IN A 142.46.42.2
;; Query time: 770 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: Fri Aug 22 08:36:03 2008
;; MSG SIZE rcvd: 75
The telnet connection to the AFP port from the same machine was immediate.
I don't think that this is a DNS issue (Yes we have tried connecting to www.e3.ca with the same results)
- Tim
Similar Messages
-
Some times when I press the home button to read my finger the screen becomes black and it shows the Apple logo, this take a few seconds to get back the screen and this has been happening even 3 or 4 times in a row!
What should I do?Basic troubleshooting from the User's Guide is reset, restart, restore (first from backup then as new). Try each of these in order until the issue is resolved.
-
Login window appears, but it takes 40-72 seconds to get the
hello,
We have the following problem with Windows XP SP3 Novell Client 4.9 SP5 IR1.
Novell login screen appears, but it still takes 40-72 seconds to send a DHCP-Request
from Windows XP to DHCP-Server (Novell OES2 SP3)
What can be the cause for this delay?
(The NIC IEEE 802.1X Authentification delayed by 20-30 Sec)
For your efforts in advance, thank you.
RolfOriginally Posted by partnernetrst
hello,
We have the following problem with Windows XP SP3 Novell Client 4.9 SP5 IR1.
Novell login screen appears, but it still takes 40-72 seconds to send a DHCP-Request
from Windows XP to DHCP-Server (Novell OES2 SP3)
What can be the cause for this delay?
(The NIC IEEE 802.1X Authentification delayed by 20-30 Sec)
For your efforts in advance, thank you.
Rolf
My first guess would be the setting of the switch port connected to the pc. It should be set to client mode (spanning-tree portfast as it's called by some vendors) or else the pc port won't directly get initialized while booting, resulting in the initial dhcp packets sent by the pc not finding their way to the network.
Could that be the issue?
- Willem -
Client takes a long time to get network login screen from server
I have just installed the new xserve with 10.5.1
I have configured DNS
My problem is that my client 10.5 takes about 1 and a half minutes to get the network users show up on the login screen.
I have searched through the system logs and found the following. Don't know if these have anything to do with the slow client but it is a start. If anyone can shed some light on this I would appreciate it. Thanks Bails:)
following are some error messages
*_System Log*_
Feb 25 09:27:59 xserve mDNSResponder[30]: mDNSPlatformSendUDP sendto failed to send packet on InterfaceID 00821E00 en0/4 to 224.0.0.251:5353 skt 7 error -1 errno 65 (No route to host) 2628017487
Feb 25 09:27:59 xserve mDNSResponder[30]: mDNSPlatformSendUDP sendto failed to send packet on InterfaceID 00823E00 en1/4 to 224.0.0.251:5353 skt 7 error -1 errno 65 (No route to host) 2628017487
Feb 25 09:29:21 xserve [0x0-0x12012].com.apple.ServerAdmin[232]: * ERROR: -[GRAxes computeLayout]:1124 - plotRect height = 0.000000 <= 0.0 *
Feb 25 09:29:21 xserve [0x0-0x12012].com.apple.ServerAdmin[232]: * ERROR: -[GRChartView computeLayout]:1194 - Layout for overlay axes (0xa815bf0) failed. *
Feb 25 09:29:21 xserve [0x0-0x12012].com.apple.ServerAdmin[232]: * ERROR: -[GRAxes computeLayout]:1124 - plotRect height = 0.000000 <= 0.0 *
Feb 25 09:29:21 xserve [0x0-0x12012].com.apple.ServerAdmin[232]: * ERROR: -[GRChartView computeLayout]:1194 - Layout for overlay axes (0xa8084e0) failed. *
Feb 25 09:29:21 xserve [0x0-0x12012].com.apple.ServerAdmin[232]: * ERROR: -[GRAxes computeLayout]:1124 - plotRect height = 0.000000 <= 0.0 *
Feb 25 09:29:21 xserve [0x0-0x12012].com.apple.ServerAdmin[232]: * ERROR: -[GRChartView computeLayout]:1194 - Layout for overlay axes (0xa815bf0) failed. *
Feb 25 09:29:21 xserve [0x0-0x12012].com.apple.ServerAdmin[232]: * ERROR: -[GRAxes computeLayout]:1124 - plotRect height = 0.000000 <= 0.0 *
Feb 25 09:29:21 xserve [0x0-0x12012].com.apple.ServerAdmin[232]: * ERROR: -[GRChartView computeLayout]:1194 - Layout for overlay axes (0xa8084e0) failed. *
_*LDAP Log*_
Feb 25 10:49:53 xserve slapd[68]: <= bdbsubstringcandidates: (authAuthority) index_param failed (18)I just guess hete based on the first two logs entries that the server is unable to query DNS. All sorts of DNS lookup failures are a common source of such long timeout errors. It might be because your DNS is not set up right or because the DNS server is not accessible to the server (incorrect routing rules or network settings in general).
-
IPhone takes about 10 seconds to get recognized by PC
When I plug in my iPhone to my PC for the first time after a system restart, it takes about 7-10 seconds for it to get recognized by the PC. On any subsequent plug-ins, the phone gets recognized, and starts charging and all, almost instantly.
I have tried reinstalling the iPhone driver, but that didn't help. Does anybody know what causes this? I don't have a similar problem with other USB devices, so it's not my PC's hardware's fault.
Thanks.My girlfriend has the same problem as you - her iPhone is less than a week old, and already the home button is becoming unresponsive. I encourage you as I encourage her to use the button on the top of the phone more until a more permanent solution can be found, unless of course that guy is bugging out too...
We're going to go through the usual reset / restore motions the next chance we have, and maybe even take it to a genius bar this weekend if we have the time. I will let you know if I have any success. -
AFP logon window takes 60 - 90 seconds for remote users
We have a 10.4.11 server running AFP and multiple other services. About 25 users connect to the AFP sharepoints via the internal network and the login window appears immediately. Another 25 users connect through a hardware VPN from another office and their login screen appears immediately as well. We have another set of 25 users who connect directly over the internet, and only recently, it is taking 60 - 90 seconds for the logon window to appear. Once it does appear, the connection runs at normal speed.
It makes no difference whether the address is specified as FQDN or IP address. I've tried turning off Bonjour, and adding the host domain name to the search domains, but this made no difference either.
This problem did not exist until recently. It may have been about the same time as the 10.5.4 update, but I can't be sure.
Also, our ISP is known to play with "Shaping" although we did have AFP set to high priority and Port 548 is not restricted.
Is there another service that Apple uses to bring up the logon window? If so perhaps our provider is restricting bandwidth on that.
- TimThis problem related to AFP requesting a "Service Record" first and waiting until that timed out before requesting the "A" record for the site. It seems to be an issue with OS X 10.5.4 and OpenDNS. Hopefully they will sort it out soon.
-
Dears,
Today I am going to do remote client copy from PRD to QAS.
For it yesterday i scheduled Test run in simulation mode.As i am having two CPU for both Dev and PRD so I scheduled it with 6 Parallel Processes.
But my Test run failed with errors:
Copy Type Remote copy
Test Run
Profile SAP_ALL
Status Ended with Errors
User SAP*
Start on 14.08.2008 / 01:30:54
Last Entry on 14.08.2008 / 05:57:54
Statistics for this Run
- No. of Tables 30,806 of 30,808
- Deleted Lines 15
- Copied Lines 72748,776
Warnings and Errors
Table/Object Component Error
BKPF FI Read or Conversion Error
BSIS FI Read or Conversion Error
Thus showing read or Conversion Error in these two tables.
In System log of source system I also see these error:
ORA-01652 unable to extend temp segment by 2560 in PSAPTEMP
Database Error 1652 at SEL access to table BKPF.
Database Error 1652 at SEL access to table BSIS.
Please suggest how to resolve the issue.
Shivam
Edited by: Shivam Mittal on Aug 14, 2008 6:08 AMHello Shivam
How is your remote copy going on?
Did you increase the size of psap temp in order to carryon with the copy?
Your Source system is PRD system.Are you doing this copy while users are using the PRD system.
If not then this may not be result of client copy? or
if no user is logged in in your PRD system,You have to decide if this is due to client copy.
Let me know what corrective measure taken by you to completed the remote client copy?
normally we dont get this dump in the source system but I have psaptemp around 30 GB or more in al my systems so may be this might have not surfaced in my environment.
Thanks
Amit -
I'm on Firefox 3.6.8 running on a 2008 IMAC with OS 10.5.8 yet every click to move pages, from start-up, to return to Home Page takes minutes, not seconds! If I use Safari that's greatly faster on this same set-up. How do I get Firefox to be as fast ?
== Some time back, beggining with Firefox updates, at least three, or more updates ago.Thanks for the tip. I took the following steps:
1) Backed up the existing profile (presumably corrupted somewhere);
2) Deleted the existing profile;
3) Moved the existing Firefox to the Trash and downloaded a fresh copy;
4) Started Firefox (thus allowing it to create its default profile)
5) Copied the following files from the backup copy of the previous profile: places.sqlite, key3.db, signons.sqlite, permissions.sqlite, persdict.dat, cert8.db ---
I'm posting this from a Firefox browser, so I guess I'm OK now. -
Background noise removal takes about 3 seconds into each clip in timeline to kick in, so each clip has noise in the first few seconds. How do you get this to remove noise from the very start of the clip?
insert a 5 second gap in the beginning of the timeline.
-
CVPN 3005 & 3020 : Remote Access Clients frozen during 60 seconds
Good morning,
I'm encoutering an interesting issue on two different CVPN boxes (Cisco VPN 3005 and 3020).
The thing is, when remote clients connect to the VPN gateway using their Cisco VPN client, then cannot reach any of my LAN hosts for about 60 seconds despite log-in procedure has ran fine.
Then, after about 60 seconds (sometimes less), connectivity to my network works well.
While they continuously ping one of my hosts, on the CVPN WebUI, session statistics show 0 in/out encrypted packets.
TCPDump at the back of the CVPN box shows no packets sent to my network (not even arp or whatever).
Is there any option I missed on my configuration to disable this annoying freeze time?
Thanks for helping if any of you has ever solved this.
Best regards,
GaëtanI'm not aware of any such setting to sort of put a delay() function on the clients :)
Try to put the desired Phase 1 profile on the top of the VPNC IKE proposals (Global). Phase 1 Parameters are always negotiated from the global proposals (Regardless of what you put in the Group >>> Ipsec Tab
Regards
Farrukh -
Hi,
I am doing remote client copy from (Development Server - ECD 140) to
our (Sandbox System - E6S 150) and the client copy keeps failing. I get
the below error message. Please advise what is the solution to this
problem? I am also copying the log file of the remote client copy below
Error Message:
Change documents are not copied
3 Tables cannot be converted
Critical differences: Missing tables: 125
Log file of remote client copy below
Target Client
150
Source RFC Dest.:
ECDCLNT140
System Name:
ECD
Client in Source System
140
Copy Type
Remote copy
Profile
SAP_ALL
Status
Cancelled. See Log
User
SAP*
Start on
08.05.2010 / 17:05:18
Last Entry on
08.05.2010 / 17:13:36
Last Action:
RFC DDIC System Comparison
Statistics for this Run
- No. of Tables
0 of 56508
- Copied Lines
0
Warnings and Errors
Table Name
Component
Package
/SAPTRX/EXT_AOT
Table Def. Missing Locally
/SAPTRX/EXT_EE
Table Def. Missing Locally
/SAPTRX/EXT_ETY
Table Def. Missing Locally
/SAPTRX/EXT_EVT
Table Def. Missing Locally
/SAPTRX/EXT_FLD
Table Def. Missing Locally
/SAPTRX/EXT_FLDS
Table Def. Missing Locally
/SAPTRX/EXT_FLDT
Table Def. Missing Locally
/SAPTRX/EXT_PAR
Table Def. Missing Locally
A850
Table Def. Missing Locally
A851
Table Def. Missing Locally
A852
Table Def. Missing Locally
A900
Table Def. Missing Locally
A901
SD-MD-CM
Different Field Names
A902
Table Def. Missing Locally
A903
Table Def. Missing Locally
A904
Table Def. Missing Locally
A909
Table Def. Missing Locally
A910
Table Def. Missing Locally
A911
Table Def. Missing Locally
A912
Table Def. Missing Locally
A933
Table Def. Missing Locally
A935
Table Def. Missing Locally
A942
Table Def. Missing Locally
A943
Table Def. Missing Locally
A944
Table Def. Missing Locally
A945
Table Def. Missing Locally
A946
Table Def. Missing Locally
A947
Table Def. Missing Locally
A948
Table Def. Missing Locally
A949
Table Def. Missing Locally
A952
Table Def. Missing Locally
A953
Table Def. Missing Locally
A954
Table Def. Missing Locally
A955
Table Def. Missing Locally
A956
Table Def. Missing Locally
A957
Table Def. Missing Locally
A958
Table Def. Missing Locally
A961
Table Def. Missing Locally
A962
Table Def. Missing Locally
A963
Table Def. Missing Locally
A964
Table Def. Missing Locally
A965
Table Def. Missing Locally
A966
Table Def. Missing Locally
A967
Table Def. Missing Locally
A981
Table Def. Missing Locally
A982
Table Def. Missing Locally
A983
Table Def. Missing Locally
A984
Table Def. Missing Locally
A985
Table Def. Missing Locally
A986
Table Def. Missing Locally
A987
Table Def. Missing Locally
A999
Table Def. Missing Locally
AFRU
PP-SFC-EXE-CON
Field missing locally
B901
Table Def. Missing Locally
B902
Table Def. Missing Locally
B903
Table Def. Missing Locally
B905
Table Def. Missing Locally
B906
Table Def. Missing Locally
B907
Table Def. Missing Locally
B950
Table Def. Missing Locally
B997
Table Def. Missing Locally
B998
Table Def. Missing Locally
B999
Table Def. Missing Locally
K9RECD1400004
Table Def. Missing Locally
KOTD601
Table Def. Missing Locally
KOTD602
Table Def. Missing Locally
KOTD603
Table Def. Missing Locally
KOTE901
Table Def. Missing Locally
KOTE902
Table Def. Missing Locally
LIKP
LE-SHP
Field missing locally
S001BIW1
LO-LIS-DC
Table has convertible differen
S001BIW2
LO-LIS-DC
Table has convertible differen
Z864DATA
Table Def. Missing Locally
Z864DIRECT
Table Def. Missing Locally
Z864INVOICETYPES
Table Def. Missing Locally
Z864ORDERTYPES
Table Def. Missing Locally
Z864RATES
Table Def. Missing Locally
Z864YENADJUST
Table Def. Missing Locally
ZBJOB_EMAIL
Table Def. Missing Locally
ZCSTMATNRLBL
Table Def. Missing Locally
ZCUSTJULIAN
Table Def. Missing Locally
ZFEDEX_COUNTRY
Table Def. Missing Locally
ZFEDEX_INBOUND
Table Def. Missing Locally
ZFEDEX_OUTBOUND
Table Def. Missing Locally
ZFI_EXCG_CURR
Table Def. Missing Locally
ZGBASE
Table Def. Missing Locally
ZGPRICE
Table Def. Missing Locally
ZHIPVALUES
Table Def. Missing Locally
ZIDOCDSS
Table Def. Missing Locally
ZLABOR_TIME
Table Def. Missing Locally
ZMACH_TIME
Table Def. Missing Locally
ZMM_GIMS_MTART
Table Def. Missing Locally
ZMM_WM_MAP
Table Def. Missing Locally
ZNGK_WORKFLOW
Table Def. Missing Locally
ZPPCRT
Table Def. Missing Locally
ZPPERRORLOG
Table Def. Missing Locally
ZPPEXPIRE
Table Def. Missing Locally
ZPPJOBMAP
Table Def. Missing Locally
ZPPNUM
Table Def. Missing Locally
ZPPWRKMAP
Table Def. Missing Locally
ZPP_COMP
Table Def. Missing Locally
ZPP_EXT_SOP
Table Def. Missing Locally
ZPP_MV_IN
Table Def. Missing Locally
ZPP_MV_OUT
Table Def. Missing Locally
ZPP_OPID_HU
Table Def. Missing Locally
ZPP_SOP_PBCR1
Table Def. Missing Locally
ZPP_SOP_PBCR3
Table Def. Missing Locally
ZPP_SOP_PBCR5
Table Def. Missing Locally
ZQM_CUST_BATCH
Table Def. Missing Locally
ZSD_NAPA
Table Def. Missing Locally
ZSD_PRICE_BLOCK
Table Def. Missing Locally
ZSD_SHPCND
Table Def. Missing Locally
ZSHIPVALUES
Table Def. Missing Locally
ZTABMAINT
Table Def. Missing Locally
ZUPS_COUNTRY
Table Def. Missing Locally
ZUPS_FEDEX_LOG
Table Def. Missing Locally
ZUPS_INBOUND
Table Def. Missing Locally
ZUPS_OUTBOUND
Table Def. Missing Locally
ZWMPACK2LABEL
Table Def. Missing Locally
ZWM_CUST_HU
Table Def. Missing Locally
ZWM_HU_HDR
Table Def. Missing Locally
ZWM_HU_ITEM
Table Def. Missing Locally
ZWM_IB_GR
Table Def. Missing Locally
ZYA1
Table Def. Missing Locally
ZYA2
Table Def. Missing Locally
ZYA3
Table Def. Missing Locally
ZYA5
Table Def. Missing Locally
ZYADDER
Table Def. Missing Locally
ZYATYPES
Table Def. Missing Locally
ZYAVG
Table Def. Missing LocallyI ran the report "RSCLICHK" on the target client and below are the results. There are some table differences. How do i syncronnize the tables so that i can successfully complete the remote client copy? Do i make the table changes on the source system or the target system? I was also told that the table changes will take days to complete. What is the most efficient way to syncronize the tables?
AFRU Field Missing Local PP-SFC-EXE-CON CORU SAP TRANSP Order Confirmations SAPK-603DDINSAPAPPL
S001BIW1 Convertable LO-LIS-DC MCS SAP TRANSP S001BIW1 * SIS: Customer Statistics
S001BIW2 Convertable LO-LIS-DC MCS SAP TRANSP S001BIW2 * SIS: Customer statistics
A901 Fields Missing <-> SD-MD-CM VKOK VLOVELACE TRANSP Sales org./Distr. Chl/Division/Cust.group/PH2/Price grp/Pric
LIKP Field Missing Local LE-SHP VL SAP TRANSP SD Document: Delivery Header Data SAPK-603DDINSAPAPPL
/SAPTRX/EXT_AOT Table Missing Local SCM-EM /SAPTRX/ATIF TRANSP
/SAPTRX/EXT_EE Table Missing Local SCM-EM /SAPTRX/ATIF TRANSP
/SAPTRX/EXT_ETY Table Missing Local SCM-EM /SAPTRX/ATIF TRANSP
/SAPTRX/EXT_EVT Table Missing Local SCM-EM /SAPTRX/ATIF TRANSP
/SAPTRX/EXT_FLD Table Missing Local SCM-EM /SAPTRX/ATIF TRANSP
/SAPTRX/EXT_FLDS Table Missing Local SCM-EM /SAPTRX/ATIF TRANSP
/SAPTRX/EXT_FLDT Table Missing Local SCM-EM /SAPTRX/ATIF TRANSP
/SAPTRX/EXT_PAR Table Missing Local SCM-EM /SAPTRX/ATIF TRANSP
A850 Table Missing Local SD-MD-CM VKOK TRANSP
A851 Table Missing Local SD-MD-CM VKOK TRANSP
A852 Table Missing Local SD-MD-CM VKOK TRANSP
A900 Table Missing Local SD-MD-CM VKOK TRANSP
A902 Table Missing Local SD-MD-CM VKOK TRANSP
A903 Table Missing Local SD-MD-CM VKOK TRANSP
A904 Table Missing Local SD-MD-CM VKOK TRANSP
A909 Table Missing Local SD-MD-CM VKOK TRANSP
A910 Table Missing Local SD-MD-CM VKOK TRANSP
A911 Table Missing Local SD-MD-CM VKOK TRANSP
A912 Table Missing Local SD-MD-CM VKOK TRANSP
A933 Table Missing Local SD-MD-CM VKOK TRANSP
A935 Table Missing Local SD-MD-CM VKOK TRANSP
A942 Table Missing Local SD-MD-CM VKOK TRANSP
A943 Table Missing Local SD-MD-CM VKOK TRANSP
A944 Table Missing Local SD-MD-CM VKOK TRANSP
A945 Table Missing Local SD-MD-CM VKOK TRANSP
A946 Table Missing Local SD-MD-CM VKOK TRANSP
A947 Table Missing Local SD-MD-CM VKOK TRANSP
A948 Table Missing Local SD-MD-CM VKOK TRANSP
A949 Table Missing Local SD-MD-CM VKOK TRANSP
A952 Table Missing Local SD-MD-CM VKOK TRANSP
A953 Table Missing Local SD-MD-CM VKOK TRANSP
A954 Table Missing Local SD-MD-CM VKOK TRANSP
A955 Table Missing Local SD-MD-CM VKOK TRANSP
A956 Table Missing Local SD-MD-CM VKOK TRANSP
A957 Table Missing Local SD-MD-CM VKOK TRANSP
A958 Table Missing Local SD-MD-CM VKOK TRANSP
A961 Table Missing Local SD-MD-CM VKOK TRANSP
A962 Table Missing Local SD-MD-CM VKOK TRANSP
A963 Table Missing Local SD-MD-CM VKOK TRANSP
A964 Table Missing Local SD-MD-CM VKOK TRANSP
A965 Table Missing Local SD-MD-CM VKOK TRANSP
A966 Table Missing Local SD-MD-CM VKOK TRANSP
A967 Table Missing Local SD-MD-CM VKOK TRANSP
A981 Table Missing Local SD-MD-CM VKOK TRANSP
A982 Table Missing Local SD-MD-CM VKOK TRANSP
A983 Table Missing Local SD-MD-CM VKOK TRANSP
A984 Table Missing Local SD-MD-CM VKOK TRANSP
A985 Table Missing Local SD-MD-CM VKOK TRANSP
A986 Table Missing Local SD-MD-CM VKOK TRANSP
A987 Table Missing Local SD-MD-CM VKOK TRANSP
A999 Table Missing Local SD-MD-CM VKOK TRANSP
B901 Table Missing Local SD-MD-CM VKOK TRANSP
B902 Table Missing Local SD-MD-CM VKOK TRANSP
B903 Table Missing Local SD-MD-CM VKOK TRANSP
B905 Table Missing Local SD-MD-CM VKOK TRANSP
B906 Table Missing Local SD-MD-CM VKOK TRANSP
B907 Table Missing Local SD-MD-CM VKOK TRANSP
B950 Table Missing Local SD-MD-CM VKOK TRANSP
B997 Table Missing Local SD-MD-CM VKOK TRANSP
B998 Table Missing Local SD-MD-CM VKOK TRANSP
B999 Table Missing Local SD-MD-CM VKOK TRANSP
K9RECD1400004 Table Missing Local CO-PA KEG0 TRANSP
KOTD601 Table Missing Local SD-MD-CM VKOK TRANSP
KOTD602 Table Missing Local SD-MD-CM VKOK TRANSP
KOTD603 Table Missing Local SD-MD-CM VKOK TRANSP
KOTE901 Table Missing Local SD-MD-CM VKOK TRANSP
KOTE902 Table Missing Local SD-MD-CM VKOK TRANSP
Z864DATA Table Missing Local ZDEV TRANSP
Z864DIRECT Table Missing Local ZDEV TRANSP
Z864INVOICETYPES Table Missing Local ZDEV TRANSP
Z864ORDERTYPES Table Missing Local ZDEV TRANSP
Z864RATES Table Missing Local ZDEV TRANSP
Z864YENADJUST Table Missing Local ZDEV TRANSP
ZBJOB_EMAIL Table Missing Local ZDEV TRANSP
ZCSTMATNRLBL Table Missing Local ZDEV TRANSP
ZCUSTJULIAN Table Missing Local ZDEV TRANSP
ZFEDEX_COUNTRY Table Missing Local ZDEV TRANSP -
Leopard Clients take a Long Time to Login (roughly 1~2 minutes)
Hello all,
I've spent the last few weeks scouring these groups and then net and searching and searching for someone with a similar problem to my own, but have come up pretty much empty handed and so now turn to here to see if any else has had this issue or can at least point me where to look to resolve the problem.
I've got a clean install of a XServe running Leopard server 10.5.2 with OD, AFP services and User home folders configured and fully working.
The problem:
Clean install of Tiger client logs into the server (OD binded) perfectly. Takes maybe 15 seconds tops to for the client to log in and show the all the AFP mounts and client settings and user's desktop and files, etc.
However, a fresh Leopard client install (OD binded) takes roughly 1~2 minutes to do the exact same thing.
I've gone through any log file I can find on server and client side, checked my DNS running on this xserve, created new users without "home" folders, and searched just about everywhere for an answer to this issue and am still empty handed.
This is not a show stopper issue, but there is something definitely not normal about what is happening with Leopard client logins.
I'm trying to explain this as best as I can without making a wall of text, but I'm sure I'll forget something, so please ask questions if you have them.
Things I'm seeing in the logs during the time of the login happening are:
Server-side Logs:
- Kerberos Server Log -
Apr 14 11:27:39 ns1.mydomain.com krb5kdc[167](info): TGS_REQ (7 etypes {18 17 16 23 1 3 2}) 172.16.9.14: ISSUE: authtime 1208190459, etypes {rep=16 tkt=16 ses=16}, [email protected] for ldap/ns1.mydomain.com@NS1. MYDOMAIN.COM
Apr 14 11:28:46 ns1.mydomain.com krb5kdc[167](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 172.16.1.205: NEEDED_PREAUTH: CRC0002$@NS1. MYDOMAIN.COM for krbtgt/NS1. MYDOMAIN.COM@NS1. MYDOMAIN.COM, Additional pre-authentication required
- Password Service Server Log -
Apr 14 2008 11:43:03 KERBEROS-LOGIN-CHECK: user {0x47f3ab5903c4b01c0000002a0000002a, CRC0005$} is in good standing.
Apr 14 2008 11:43:03 KERBEROS-LOGIN-CHECK: user {0x47f3ab5903c4b01c0000002a0000002a, CRC0005$} authentication succeeded.
Apr 14 2008 11:43:04 RSAVALIDATE: success.
Apr 14 2008 11:43:04 AUTH2: {0x47c721234c9608250000000700000007, myusername} DIGEST-MD5 authentication succeeded.
Apr 14 2008 11:43:04 RSAVALIDATE: success.
Apr 14 2008 11:43:04 AUTH2: {0x47c721234c9608250000000700000007, myusername} DHX authentication succeeded.
Apr 14 2008 11:43:04 KERBEROS-LOGIN-CHECK: user {0x47c721234c9608250000000700000007, myusername} is in good standing.
Apr 14 2008 11:43:04 KERBEROS-LOGIN-CHECK: user {0x47c721234c9608250000000700000007, myusername} authentication succeeded.
Apr 14 2008 11:43:05 RSAVALIDATE: success.
Apr 14 2008 11:43:05 AUTH2: {0x47c721234c9608250000000700000007, myusername} DHX authentication succeeded.
Apr 14 2008 11:43:06 KERBEROS-LOGIN-CHECK: user {0x47f3ab5903c4b01c0000002a0000002a, CRC0005$} is in good standing.
Apr 14 2008 11:43:06 KERBEROS-LOGIN-CHECK: user {0x47f3ab5903c4b01c0000002a0000002a, CRC0005$} authentication succeeded.
Apr 14 2008 11:43:06 KERBEROS-LOGIN-CHECK: user {0x47c721234c9608250000000700000007, myusername} is in good standing.
Apr 14 2008 11:43:06 KERBEROS-LOGIN-CHECK: user {0x47c721234c9608250000000700000007, myusername} authentication succeeded.
Apr 14 2008 11:45:26 KERBEROS-LOGIN-CHECK: user {0x47f3ab5903c4b01c0000002a0000002a, CRC0005$} is in good standing.
Apr 14 2008 11:45:26 KERBEROS-LOGIN-CHECK: user {0x47f3ab5903c4b01c0000002a0000002a, CRC0005$} authentication succeeded.
Client Side Logs:
- All Messages -
4/14/08 10:09:12 AM loginwindow[9868] Login Window Started Security Agent
4/14/08 10:15:01 AM loginwindow[9868] Login Window - Returned from Security Agent
- Console Messages -
4/14/08 10:15:03 AM com.apple.launchd[1] (com.apple.UserEventAgent-LoginWindow[9880]) Exited: Terminated
- SingleSignOnTools.log -
kdcmond cannot retreive the computer's local Hostname , retrying ..
Kerberos configuration is up to date
Kerberos configuration is up to date
Kerberos configuration is up to date
Kerberos configuration is up to date
.. and so on
All other logs don't appear to show anything of importance in between the time frame of Login window started and login window exited.
I'd like to know what exactly the client workstation is doing during this time with the server, but it looks like it just hangs and does nothing since nothing shows up in the logs that I can find during this time period where the client hangs. Maybe I can try an Ethereal trace to see what traffic is being sent back and forth during this timeframe. I don't know if this is a configuration issue on my part or a OD / AFP bug on Apple's part since Tiger clients connect perfectly.
Logouts happen immediately, so no problems there on that end. And everything else with the system is working flawlessly (besides the OD Crashing issue which I'm sure everyone is well aware of right now with 10.5.2).
Thank you to anyone that can assist in shedding some light on this issue and I apologize if I didn't provide enough information.
-JesseeFOUND IT!!! Well for our install anyway. The culprit was AUTH2.
In our case computers would (randomly) have the same ..SLOW.. symptoms as your original post described, and the 'Apple Password Server log' on our server showed the same log entries.
It turned out that Single-Sign-On was being screwed up by two Authentication Authorities as applied in the LDAP (Computer and User) Attributes,
and showed up in the log as competing authentications from KERBEROS-LOGIN-CHECK and AUTH2. as follows:
Apr 30 2008 16:22:17 RSAVALIDATE: success.
Apr 30 2008 16:22:17 AUTH2: {0x4818c423083a8ddd0000000a0000000a, user} DIGEST-MD5 authentication succeeded.
Apr 30 2008 16:22:17 RSAVALIDATE: success.
Apr 30 2008 16:22:17 AUTH2: {0x4818c423083a8ddd0000000a0000000a, user} DHX authentication succeeded.
Apr 30 2008 16:22:17 KERBEROS-LOGIN-CHECK: user {0x4818c423083a8ddd0000000a0000000a, user} is in good standing.
Apr 30 2008 16:22:17 KERBEROS-LOGIN-CHECK: user {0x4818c423083a8ddd0000000a0000000a, user} authentication succeeded.
Apr 30 2008 16:22:18 RSAVALIDATE: success.
Apr 30 2008 16:22:18 AUTH2: {0x4818c423083a8ddd0000000a0000000a, user} DHX authentication succeeded.
Now, all the entries in our log (for remote logins) show:
May 2 2008 10:35:39 KERBEROS-LOGIN-CHECK: user {0x4818c423083a8ddd0000000a0000000a, user} is in good standing.
May 2 2008 10:35:39 KERBEROS-LOGIN-CHECK: user {0x4818c423083a8ddd0000000a0000000a, user} authentication succeeded.
May 2 2008 10:35:39 KERBEROS-LOGIN-CHECK: user {0x4818c423083a8ddd0000000a0000000a, user} is in good standing.
May 2 2008 10:35:39 KERBEROS-LOGIN-CHECK: user {0x4818c423083a8ddd0000000a0000000a, user} authentication succeeded.
May 2 2008 10:35:39 KERBEROS-LOGIN-CHECK: user {0x4818c423083a8ddd0000000a0000000a, user} is in good standing.
May 2 2008 10:35:39 KERBEROS-LOGIN-CHECK: user {0x4818c423083a8ddd0000000a0000000a, user} authentication succeeded.
i.e...Single-Sign-On and they're FAST.
no more AUTH2 entries overlapping with KERBEROS.
(local Authentications still show AUTH2 when using WGM)
The solution was pretty straight forward, But only applies if the system is using Single-Sign-On with AFP shared home folders and the Authentication for AFP is set to Kerberos.
Delete ;ApplePasswordServer entries from all user/computer combinations that are having problems.
I actually deleted it from all users and Computers. (Except the Server Computer and Directory Administrator that uses WGM. When I tested these, WGM would not authenticate Diradmin)
It can be done in the GUI from the inspector tab in WGM
find the attibute
dsAttrTypeStandard:AuthenticationAuthority
click to open
If there are two entries: ApplePasswordServer and Kerberosv5 then:
Edit the ApplePasswordServer entry (You can copy the text into an editor and save it for future use if needed, all entries are the same for all computers and users, so you only need 1 copy, and you can paste it back into new entry to put it back,...If needed....maybe for older systems, mine are all Leopard.
Now delete, OK, and Save the changes
After its done, check the logs again to make sure that all remote logons now show
KERBEROS-LOGIN-CHECK:
and they should be FAST.
Hope this helps
Steve -
Minimal requirements for remote client app to call a EJB 3 session bean
I'm just starting to get into EJBs, trying to learn the EJB 3 APIs. I kind of understand the setup on the server side to create a session bean. What I don't understand is what I would have to deploy for each of the remote client app (Swing-based GUI or something like that) installations. Of course, the client app code would have to be deployed to each client desktop, but what stuff related to the session bean? Just the session bean interface class?
For ease of discussion, let's say my bean is CalculatorBean, having two interfaces, CalculatorRemoteIface and CalculatorLocalIface. Let's also say my client app, CalculatorUI, is a simple Swing-based GUI that grabs a reference to a CalculatorBean.
Other than just the Swing-based classes and the JRE, what JARs/classes will I want to deploy to each desktop?
(Please assume the latest Sun Java System App Server 9 and Java EE 5, if you are familiar with them.)Personally- I would deploy your backend
in EJB 3.0, but then expose it as a web service. It
is MUCH easier for your clients to connect to a web
service (and mantain that code), then to have them
connect via RMI/JNDI.Oh, I would say it's quite the opposite. RMI/JNDI is MUCH easier from a client point of view than web services. To make web services work easy from the client side you have to generate code and the tools that generate code from a web services wsdl file doesn't do a great job today. But that was not the question. But take some time reading this article about webservices...it's quite funny and spot on: http://wanderingbarque.com/nonintersecting/2006/11/15/the-s-stands-for-simple
Now to your question, yes you will need the remote interface on the client side.
/klejs -
Sleep blocked by "active remote client"
Using powercfg -requests I get:
[DRIVER] Filesystem\srvnet
An active remote client has recently sent requests to this machine
This blocks sleep mode (a "feature" of sleep mode).
I have tried disabling wake for sleep on adaptors. Disabling home group. disabling media center, unistalling windows media, disable auto update, no media sharing....
Because there is a long timeout of maybe 15 minutes or longer on this it so it is hard to diagnose if it is coming from the local machine or the other Win 7 on the network. The problem seemed to start when I upgrade the second machine from Vista though not 100% sure.
Seems like each machine keeps the other awake? I have also suspected the Dlink router and turned all of its "added value" features off. Where is this "remote client" and how to diagnose?
Is there a setting to at least turn the time out to a minute or less?
One machine runnning Win 7 7600 64 before and after this problem started. The other was Vista and now Win 7 7600 32 since the problem began in BOTH machines.Try creating and then leaving a Homegroup between the machine having the sleep problem and the other(s) keeping it awake.
I developed the same insomnia problem described here on one of my networked group of Windows 7 machines after enabling media streaming but declining to create a Homegroup (when the option to create one was presented during the media streaming setup process).
I struggled with various solutions, all to no avail, except disconnecting the problematic machine from the others on the network (not a solution). Ultimately I determined that certain other machines on the network would keep the problematic machine awake.
I was able to identify the affected machines by disconnecting various combinations of machines from the network until the problematic machine slept normally.
Ultimately, the problem disappeared after I created a Homegroup, joined all the affected machines, and then left the Homegroup from all machines. After a forced sleep using the shutdown menu on all the affected machines, and subsequent manual wake,
they now all sleep and wake normally, as expected, according to the power plan settings.
I suspect that by declining to create the Homegroup when prompted, it leaves some inchoate remnant of Homegroup creation lingering around on one or more machines, which in turn results in repeated requests being sent from one machine to the other, keeping
the other awake. -
Phonefactor with RRAS(Windows Server 2003) - VPN client timeout after 20 seconds -- too fast!
[Note that I have previously posted this question on Experts Exchange... but have not found a solution yet].
We are a small business and would like to switch to two-factor authentication for VPN connections. We spent nearly a year helping Barracuda debug their small business VPN appliance and finally they took their boxes back and gave us back our money - they
just couldn't get file sharing to work consistently with some new firmware they had to install due to a patent case.
So... now we are trying Phonefactor.
Our VPN setup is RRAS on a Windows Server 2003 domain controller.
We have installed Phonefactor, enabled it as a Radius server, and configured RRAS to point to Phonefactor for Radius authentication. We configured phonefactor to send text messages for authentication, as we figured that would be less disruptive than a phone
call.
It all works except... the timeout for VPN clients is only 20 seconds! By the time we receive the text message on a cell phone, sometimes there is only 5 or 6 seconds to get the six digit code typed into a reply on the cell phone... and unless we are really
nimble, that is frequently not enough time!
When the VPN client times out, it gives an Error 718 "The connection was terminated because the remote computer did not respond in a timely manner."
How can we increase the timeout on the VPN clients, so we can more reliably enter the authentication code in a reply back to phonefactor?
Things we have tried:
1) Connecting (PPTP) from different Windows clients to see if we get different timeout limits. So far we have tried several Windows 7 boxes and a Windows Server 2003 as the client, but in all cases the timeout is 20 seconds.
2) On the windows clients: Searching through the PPTP client settings to see if there is one labeled "connection timeout". So far we have found nothing.
3) On the windows 2003 server: Modifying the RRAS Radius Server time-out to be 30 seconds, 60 seconds, 300 seconds. We've tried restarting RRAS after these changes, but the client connection timeout is still 20 seconds.
4) In the phonefactor configuration: Searching through the radius server settings to see if there is one labeled "connection timeout". So far we have found nothing.
5) Using NTRadPing to connect directly to the phonefactor radius server. With NTRadPing we were able to wait more than 60 seconds without a timeout from phonefactor. So we don't *think* at this point that the issue is within phonefactor.
6) We have asked phonefactor support, but their response is "hmmm... good question, we don't know, that sounds like a problem with your vpn client". And they could well be correct.
7) Search the web for how to increase either the stock windows VPN client timeout, or the RRAS radius authentication timeout. No luck so far.
8) Try this registry hack:
http://windowsitpro.com/networking/solving-ras-718-error. Didn't help.
Any ideas?
thanks!Hi fdc2005,
Thanks for the post.
However, generally, we first type User Name, Password, then click connect to establish the VPN connection. Such as:
Therefore, I have a little confusion about the timeout you mentioned. Would you please provide us more details.
Regarding error 718, please check if the following could help:
If you have a third-party VPN server which does not support MS-CHAPv2 as an authentication method and supports only MS-CHAPv1, you will need to use either CHAP or PAP to connect from the Windows Vista VPN client until the server you use starts supporting MS-CHAPv2.
Steps to follow for resolution:
(1) Check if the Routing and Remote Access Server (RRAS) is configured to allow connections with MS-CHAPv2
(2) Check if the RADIUS server policy supports MSCHAPv2 (This step is needed if you control access to clients using Remote Access Policies on the IAS/NPS server)
Quote from:
Troubleshooting Vista VPN problems.
Hope this helps.
Jeremy Wu
TechNet Community Support
Maybe you are looking for
-
How to call function in included dll file through java application.
Hi All, i am trying to create an java application which call c# functions using JNI. i am completed with the code and it is running fine when i tried to run from netbeans IDE. But when i tried from Calculator.jar file, first time it throws this error
-
Because I use parts numbers. How do I get my listing and ads to show up in google?
EBay's management had a fight with Google some time ago.They lost. Basically all you can do is list with as many words in your title as possible (you have 80 free keystrokes). Don't use unsearched words like L@@K , or punctuation !?, and be careful o
-
Power Macintosh 7200 to Mac Mini back up and secure wipe question
Hi all, nearly figured this on my own but hope that someone here can fill in the gaps. I have a clunky old 7200/75/16 (no upgrade card, bog standard machine) I want to sell/give/dump. Before that, I need to back up the 500 MB HDD (hard to believe tha
-
I have updated my Macbook Pro to OSX 10.8. I use Pages for my word processing. I noted that the "save as" option has been removed. I do a lot of repeat minutes for organizations and I use a prior copy as the template. What is the "work around" to
-
InfoSpoke as Data Source in the same system
Hello Expert, I try to include the result of infospoke as transparent table (the source of infospoke is a basic cube), this table I need to include as DataSource for using into other cube into the same system. The transparent table is generated succe