SCCM, Database Server in Different Domain

Hi, I have this scenario in SCCM
2012, I am installing a CAS and two
primary sites and are in a domain
A, and database servers
are in a domain B, A and
B domains have trust relationship,
when installed showed no
problems, but replication between
data bases between Primarys and
CAS are generating replication problems, generating
errors that SSB can not create
certificates, which I do,
thanks for your help
Leonardo Ramirez MCTS System Center Configuration Manager

Hi,
Is, SQL Server 2008 R2,  Service Pack 1, CU 6, the ports is fixed assigned in SQL and SSB, i did test with telnet, from cas.A.com to sqlcluster.B.com ports 445, 135 and ports fixed assigned SQL, SSB, the connection is successful, using custom SQL Instance.
thank you for your help
Leonardo Ramirez MCTS System Center Configuration Manager

Similar Messages

  • Lync 2013 FE server certificate - different domain name

    Hi,
    I am implementing a small Lync infrastructure with the following components in a Resource Forest - Account Forest type implementation with a bi-directional Trust between the two forests:
      1 x Lync 2013 FE Standard,   1 x Mediation server  and  1 x Office Web App server
    Both AD forests have their PKI CAs, the certificate on the FE server is signed by the CA from the Account domain. All servers and workstations have both Root certificates implemented.
    User’s SIP domain name (account forest) is different from the FE server (resource forest) domain name.
    Question: When internal users sign-in to Lync they get a warning prompt as follows:
    “Lync cannot verify that the server is trusted for your sign-in address. Connect anyway?”
    Users can select to connect and everything functions correctly, however, I would like to get rid of the warning message at the beginning.
    Any idea what may be wrong, is something missing on the certificate ?
    Thanks for your help,
    Luca

    You can try to edit the internal web services FQDN and ensure your other populated DNS records point to a FQDN that matches the sip domain, or use the TrustModelData workaround here:http://support.microsoft.com/kb/2833618
    Here are a couple extra articles that dive in to what's happening: http://terenceluk.blogspot.com/2013/04/signing-into-lync-2013-client-presents.html?m=1
    http://blogs.technet.com/b/jenstr/archive/2011/02/10/lync-cannot-verify-that-the-server-is-trusted-for-your-sign-in-address.aspx
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
    SWC Unified Communications
    This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • EJB lookup on Remote Server or different domain fails

    Hi,
    I am having two different domain (domain1,domain2) respectvely. My ABC.ear j2eee application is deployed on domain2 and its iiop port is 33703.In domain1 i have xyz.war (web application) and it's IIOP port is 3700 .In xyz.war i am having CallEJB.jsp file.In this Jsp file i want to lookup an EJB Service called PaymentEJB(JNDI Name is ejb/PaymentEJB).
    The code is below
    InitialContext context=new InitialContext();
    Object objRef=context.lookup("corbaname:iiop:andaman:33703#ejb/PaymentEJB");
    I am getting the following error.
    [#|2005-12-14T16:42:03.422+0530|SEVERE|sun-appserver-pe8.1_02|javax.enterprise.resource.corba._DEFAULT_.rpc.transport|_ThreadID=11;|"IOP00410216: (COMM_FAILURE) Unable to create IIOP listener on the specified host/port: all interfaces/3700"
    org.omg.CORBA.COMM_FAILURE: vmcid: SUN minor code: 216 completed: No
    at com.sun.corba.ee.impl.logging.ORBUtilSystemException.createListenerFailed(ORBUtilSystemException.java:2661)
    My doubt is
    1.While starting domain1 and domain2 iiop listeners are started on the port 3700 and 33703.in that case why EJB lookup tries to create listener on one more time.
    2.I am looking the 33703 port only.but it tries to create port on 3700 why?
    3.It was working till JES2005Q1.Is there any patch i need to install? or i need to change anything in my code.
    I am frustrated with this error for past one week.I will be happy if some body will give me the peace of mind(thru some solution).

    Hi
    I found the solution for this issue.
    To lookup the EJB applications in web component,we should not set any thing in the Initial Context.i.e the lookup should be
    InitialContext initContext=new InitialContext();
    Object objref = initContext.lookup("java:comp/env/ejb/"+ejbName_);
    This will get you the Home object of the EJB you are looking.
    In your web.xml you should have the entry like below.(Just replace the ejbname which you are looking for)
    <ejb-ref>
    <ejb-ref-name>ejb/GetAssertionEJB</ejb-ref-name>
    <ejb-ref-type>Session</ejb-ref-type>
    <home>com.ssertion.GetAssertionHome</home>
    <remote>com.assertion.GetAssertionRemote</remote>
    </ejb-ref>
    In your sun-wb.xml,you should have the entry like below(Just replace the ejbname which you are looking for)
    <ejb-ref>
    <ejb-ref-name>ejb/GetAssertionEJB</ejb-ref-name>
    <jndi-name>corbaname:iiop:<hostname>:<iiopport>#ejb/GetAssertionEJB</jndi-name>
    </ejb-ref>
    Hope this works.

  • 817 / 9i windows client against 9i Unix Database server

    Does it cause any problem like core-dump if I have both 8.1.7 and 9i windows clients connect to 9i Unix Database server to different account(sid) ? Thanks

    Any combination of 8i and 9i clients and servers should work. You only start running into problems when you have 7.3.4 clients and 9.2 servers (or vice versa) or older 8.0 clients and 9.2 servers (or vice versa).
    There is a certification matrix available on the OTN main page (under Get Support I believe) that will list all the permissible combinations.
    Justin
    Distributed Database Consulting, Inc.
    http://www.ddbcinc.com/askDDBC

  • Run as different domain user.

    Hi, 
    Need to test a new Windows login in SSMS.  
    I setup a shortcut as below but I seem access SSMS using the domain account I specified in the shortcut, even though I have been prompted for the password. 
    C:\Windows\System32\runas.exe /netonly /user:rkh\sqlmonitor "C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\ManagementStudio\Ssms.exe" 
    Any ideas? 

    Are you trying to connect the SQL server from machine(SSMS) in different domain ?
    Try below link , it really works for me, i using this to connect to SQL server in different Domain
    1) Create generic Credential in Credential Manager(control panel) with sql server(with port) and username/password
    2)Run as with the username which is specified in the generic Credential(may be you can create short cut if you frequently access the SQL Server)
    C:\Windows\System32\runas.exe /netonly /user:[domain]\[username] “C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\Ssms.exe”
    Note: in SSMS it will display the local userid(domain id) in object explorer, you can verify tin by running(suser_name())
    Refer
    http://www.mssqltips.com/sqlservertip/3250/connect-to-sql-servers-in-another-domain-using-windows-authentication/
    Thanks
    Saravana Kumar C

  • Can we assign 2 IPs for a SCCM 2012 primary site server and use 1 IP for communicating with its 2 DPs and 2nd one for communicating with its upper hierarchy CAS which is in a different .Domain

    Hi,
    Can we assign 2 IPs for a SCCM 2012 primary site server and use 1 Ip for communicating with its 2 DPs and 2nd one for communicating with its upper hierarchy CAS . ?
    Scenario: We are building 1 SCCM 2012 primary site and 2 DPs in one domain . In future this will attach to a CAS server which is in different domain. Can we assign  2 IPs in Primary site server , one IP will use to communicate with its 2 DPs and second
    IP for communicating with the CAS server which is in a different domain.? 
    Details: 
    1)Server : Windows 2012 R2 Std , VM environment .2) SCCM : SCCM 2012 R2 .3)SQL: SQL 2012 Std
    Thanks
    Rajesh Vasudevan

    First, it's not possible. You cannot attach a primary site to an existing CAS.
    Primary sites in 2012 are *not* the same as primary sites in 2007 and a CAS is 2012 is completely different from a central primary site in 2007.
    CASes cannot manage clients. Also, primary sites are *not* used for delegation in 2012. As Torsten points out, multiple primary sites are used for scale-out (in terms of client count) only. Placing primary sites for different organizational units provides
    no functional differences but does add complexity, latency, and additional failure points.
    Thus, as the others have pointed out, your premise for doing this is completely incorrect. What are your actual business goals?
    As for the IP Addressing, that depends upon your networking infrastructure. There is no way to configure ConfigMgr to use different interfaces for different types of traffic. You could potentially manipulate the routing tables in Windows but that's asking
    for trouble IMO.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • Why is it not possible to move a SCCM 2012 Server to a new Domain?

    Hello everybody,
    I know it is not supported to move a SCCM 2012 Server to a new Domain. But I am still missing why it is not supported or possible....
    I could not find anything that explained it in detail on the forums/internet. So when the question comes up in front of a customer it is always better to have a good argumentation...Can somebody describe the reasons why??
    Thank you very much in advance!

    Have them call CSS then.
    It's ultimately the result of the design of the product but not an explicit decision. To my knowledge, it relies on the domain name for certain things and this is explicitly embedded with no defined way to change this. Could it be changed? Probably.
    But, that would take a lot of work and effort and is not something Microsoft has ever invested any time in.
    The grass is green and the sky is blue. Knowing why doesn't change these.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • How to move SCCM service from one logical drive to another logical drive on site database server?

    Hi All,
    We are ussing SCCM 2012 RTM in our environment. We have one central site on
    Server1 and one primary site on server2. SCCM database of both sites are on remote servers
    we have one cluster (Name: Cluster1) in that we have four running SQL servers (ServerdDB1,  ServerDB2,
    ServerDB3, and ServerDB4 ). There is one sql instance named
    Application on all four sql servers. Central site database
    CM_CAS hosted Application instance on ServerDB3.
    ServerDB2 is the failover of ServerDB3
    Now I have few queries on which I need your assistance.
    1. The SMS_SITE_SQL_BACKUP_SERVER1 service is running on all sql servers in the cluster. The SMS_SITE_SQL_BACKUP_SERVER1 service on ServerDB4 is running on L drive. I want to move this service from L drive to system drive C permanently.
    How can I do this?
    2. I tried to move SMS_site_sql_Backup_server1 service from L drive to C drive by following changes
    Change the service path in registry on ServerDB4
    Reset the SCCM central site without any modification.
    The above service moved to C drive time beaing but I do'nt know why this service came again in L drive. and running from L drive on same server. Do I need to unistall SCCM and reinstall again?
    3. Why did SCCM site database install on all sql servers ? As I ServerDB2 is the failover of ServerDB3 so it should be only ServerDB2 and ServerDB3.
    4. Why SMS_SITE_SQL_BACKUP_SERVER1 service is running on all SQL server in cluster?
    Your assistance on above qureies will be very appreciated..
    Thanks
    Rinku

    Hi,
    The server will be installed on the each of the clustered nodes. I think you may use the following to do the change.
    1. Stop the SMS_Site_SQLBackup_%SERVERNAME% on the node
    2. Remove the following Registry Keys on the node:
    HKEY_LOCAL_MACHINE\Software\Microsoft\SMS\Components
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SMS_SITE_SQLBACKUP_%SERVERNAME%
    3. On the site server, browse to the fllowing registry key:
    HKLM\Software\Microsoft\SMS\Components\SMS_SITE_Component_Manager\Multisite Component Servers\%SERVERNAME%
    4. Change the install directory to the appropriate drive
    5. Restart the SiteComp service on the Site server
    Note: Please do a backup before doing this change, which is very important for unexpected failure.
    Juke Chou
    TechNet Community Support

  • Use same report with same database structure to different database server.

    Hi,
    I have standard crystal reports which needs to be copied to another database server.
    The origin database has exactly same database structure with the data base in other server.
    My only question is how to change the connection of the crystal report file from old database server to new one without affecting the linked tables in the report. Would it be possible?
    Note: origin database and new database has same structure, tables and columns but differ in data on it. and both has different server. (MS SQL)
    Thanks,

    Hi Mark,
    Open the report in the CR Designer > select Database option on the top > select Set Datasource location.
    The pane on the top shows the current connection. Go ahead and create a new connection to the target database from the pane at the bottom. Once created, highlight one table from the top, highlight the corresponding table from the bottom pane and click Update. Do this for each table.
    -Abhilash

  • SQL Server two database at two different locations

    Hi Guys,
    We are having same database at two different locations (Database A with Sqlserver 2008/Express, database B with Sqlserver 2012).
    Our requirement is when ever a row is inserted in a table of Database A from location 1. Same value should also be added in Server 2 at different location.
    So that at any point of time both the database base values should be same.
    Which is the best method to do it ?
    Regards,
    Raghu.G
    raghu

    Could you please give more information about the editions of SQL Server? Is SQL 2012 express as well?
    Do you also need udpates/deletes to be moved to another server? Also do you want changes in SQL 2012 to be moved to 2008 as well?
    With Express edition you have very limited options.
    Regards, Ashwin Menon My Blog - http:\\sqllearnings.com

  • CDSSO Issue in Web Server 6.1 SP 5. Agent and AM in different domain.

    I have Sun ONE Web Server 6.1SP5 and installed Policy Agent 2.2.
    URL: http://sjws6-dev-10.team.xtra.co.nz:10080
    I have Access Manager 7.0 in Application Server.
    URl : http://sjapp9-dev.uname.tech.co.nz:8080/amserver
    So Agent and Access Manager is in different domain.
    I have enabled CDSSO.
    # Cross-Domain Single Sign On URL
    # Is CDSSO enabled.
    com.sun.am.policy.agents.config.cdsso.enable=true
    # This is the URL the user will be redirected to for authentication
    # in a CDSSO Scenario.
    com.sun.am.policy.agents.config.cdcservlet.url = http://sjapp9-dev.uname.tech.co.nz:8080/amserver/cdcservlet
    Now problem what i am facing is :-
    When i try accessing a protected resource then it searches the Parent Realm Data Store.
    It should search the LDAP Data store which i configured for the Realm.
    com.sun.am.policy.am.login.url = http://ajapp9-dev.uname.tech.co.nz:8080/amserver/UI/Login?realm=YTel
    amAuthLDAP Log.
    08/25/2008 12:13:02:459 PM NZST: Thread[service-j2ee,5,main]
    LDAP resbundle locale=en_US
    08/25/2008 12:13:02:459 PM NZST: Thread[service-j2ee,5,main]
    Host: sjapp9-dev
    PORT : 38389
    08/25/2008 12:13:21:153 PM NZST: Thread[service-j2ee,5,main]
    LDAP initialize()
    08/25/2008 12:13:21:153 PM NZST: Thread[service-j2ee,5,main]
    attrs is : []
    08/25/2008 12:13:21:166 PM NZST: Thread[service-j2ee,5,main]
    bindDN-> cn=amldapuser,ou=DSAME Users,dc=uname,dc=tech,dc=co,dc=nz
    baseDN-> dc=uname,dc=tech,dc=co,dc=nz
    userNamingAttr-> uid
    userSearchAttr(s)-> [uid]
    userCreationAttrs-> []
    searchFilter->
    searchScope-> 2
    ssl-> false
    authLevel: 0
    Host: sjapp9-dev
    PORT : 38389
    Pattern : *|(|)|&|!
    08/25/2008 12:13:21:171 PM NZST: Thread[service-j2ee,5,main]
    Connecting to sjapp9--dev:38389
    Searching dc=uname,dc=tech,dc=co,dc=nz for (uid=johndoe)
    scope = 2
    08/25/2008 12:13:21:171 PM NZST: Thread[service-j2ee,5,main]
    Create LDAPConnectionPool: sjapp9--dev:38389
    08/25/2008 12:13:21:171 PM NZST: Thread[service-j2ee,5,main]
    LDAPAuthUtils.LDAPAuthUtils: min=1, max=5
    08/25/2008 12:13:21:183 PM NZST: Thread[service-j2ee,5,main]
    userAttrSize is : 2
    08/25/2008 12:13:21:184 PM NZST: Thread[service-j2ee,5,main]
    Cannot find entries for (uid=johndoe)
    But it should seach in the User LDAP Data store.
    Not sure what is the problem.
    Regards,
    Edited by: IDM1312 on Aug 25, 2008 2:10 AM

    I presume that by now you have tried changeing your cdcservlet.url to read:
    com.sun.am.policy.agents.config.cdcservlet.url = http://sjapp9-dev.uname.tech.co.nz:8080/amserver/cdcservlet?realm=YTel

  • How to configure SCSM exchange connector when exchange server is in different domain.

    We installed/configured SCSM in ABC domain and now need to use exchange connector for incident alert mail.
    But exchange server is in different domain, say XYZ.
    How do we configure?
    Thanks,
    Abhilash

    Cannot configure trust at AD level. But in the config article, following points are given.. but not clear on first 2 steps. Also, we did not find option to "navigate to certificate template and right click certificate templates".
    sorry, i dont have much exp with certificates. If steps are described little more clear, would be helpful.
    a.     If your Service Manager management server does not have a trusted relationship with the Exchange Server, open Certificate Services and create a duplicate copy of the Web Server Certificate Template. Ensure that Private Key Export and Publish
    in AD are selected, and then add Read and Enroll permission to Authenticated Users.
    b.     In Certificate Services, navigate to Certificate Template and right-click Certificate Templates. Click New and then click Certificate Template to Issue. Select the template that you created in the previous step.
    c.     In Exchange Server, open the Microsoft Management Console and add the Certificates snap-in for the local computer. Right-click the Personal logical store, and then hover over All Tasks.
    d.     Select Request for New certificate and in the Certificate Enrollment wizard, select Active Directory Enrollment Policy and select the template that you created previously. When you select the certificate, you can click More Information to type
    the Exchange Server’s FQDN name as the common name in the Subject tab. You can also type the FQDN name as the Friendly Name in the General tab.
    Thanks,
    Abhilash

  • Lync 2010 server and UM role on different domains in different forests

    Hello 
    I have a Lync 2010 environment running on domain A, with exchange 2010 UM also running in Domain A.  We are in the process of migrating users and mailboxes from domain A to domain B.  Once we reach our enterprise voice users with exchange UM enabled
    we will need to install the exchange UM role on the exchange server in Domain B.  
    There is a 2-way trust relationship between domain A and domain B.
    All the users from are running Lync on a PC located in Domain B, using Lync credentials from Domain A.
    Are there any issues running Lync 2010 and Exchange UM from different domains in different forests?  Is it as simple as creating a new UM DialPlan and UM IP Gateway to the domain A Lync FQDN?
    Thanks

    Hi,
    Each UM forest must be configured to trust the forest in which Lync Server is deployed, and the forest in which Lync Server 2013 is deployed must be configured to trust each UM forest. If Exchange UM is installed in multiple forests, the Exchange
    Server integration steps must be performed for each UM forest or you’ll have to specify the Lync Server domain.
    Here is a link about for UM of Lync server 2013 but similar for Lync server 2010:
    http://technet.microsoft.com/en-us/library/jj966276(v=exchg.150).aspx
    Best Regards,
    Eason Huang
    Eason Huang
    TechNet Community Support

  • Multiple oracle database instances with different characterset on  the same server

    Hello,
    Is it possible to have 2 database instances running with different charactersets,one with AL32UTF8 and the other with WE8MSWIN1252.?
    Are there any setup requirements to be performed prior to setting up the database instances?
    The 3rd party utility that we want to use does not support AL32UTF8 and insists on using a database with character set WE8MSWIN1252.
    Kindly help.
    Thanks,
    Ram.

    Hello Zhe,
    I guess I posted my question in a wrong forum.  I tried my best to find a suitable forum and thought this was the best and closest I found.  Apparently not.  Can you please let me know the right forum for my question?
    The below is the breif of what we are currently facing:
    We are in the process of finalizing plans to install Automic for our Retail applications to schedule jobs.  In the process came to know that Automic does not support AL32UTF8.
    Right now we have RMS and UC4 (now called Automic) run on the database server as UC4 supports AL32UTF8 and schema for UC4 is inside the RMS database.
    Going forward it is recommended to have a separate database instance on the same server as that of RMS database and with a different characterset which is WE8MSWIN1252.
    Please let me know what forum to post in, I will repost the question.
    Thanks,
    Ram.

  • One Essbase Server to Different shared services Database

    I need to know if it is possible to point one essbase server to different shared services database and then have both of them working?

    Hi Vasvya,
    So, correct me if I am wrong, the way to do this is,
    Go to the computer where essbase server is installed and run the configurator and then where it asks for set up shared services and registry database connection, we give the schema we gave for the new shared services.
    Is that it? Do I have to change the instance home or something?
    Thanks. Would really appreciate it if you could helpme more.

Maybe you are looking for

  • In Mavericks iPhoto slide shows, why do the last pics come first, some pics are upside down, and some vertical pics are horizontal?  How can I fix this?

    On my iMac OSX, 10.9.4, Mavericks, I have been trying to view an album as a slide show.  The slide show starts at the end (bottom row picture) instead of the beginning (top 1st picture).  I have gone to View>Sort Photos>Manual.  But the order of Asce

  • Order settellement

    When i am creating pm order after confirmation i will get the status settelment rule created after settelement when i nam going to close the order i will get message save only and log but in log order is not zero. any body can give solution.

  • Schema Privilages in Portal

    when i am trying to do new application i found this. The database schemas that you can choose are those in which you have been granted privileges by the Oracle Portal DBA. and the only seen accessed by user portal30 is scott. when i am opening the DB

  • Iphoto11 transfer to HD issues

    I just bought my macbook pro last night and have been trying to transfer my pictures from iphoto 11 to my external hard drive (seagate 500 gig usb). ive researched online and have gone through the steps:                 1. close iphoto11             

  • Sudden shutdowns

    This week my iPhone 3.0 has been shutting down in the middle of an email, text, or phone call. It comes back on when turned on, and can be used a little while with nothing lost--so far--before it shuts down again, but is mighty annoying because it ha