SDK service using domain user trying to set SPN for computer account

I have a SDK service running under a domain user account, but it tries to register the SPN for the computer account of the machine?!
Therefore I get the following alert:
The System Center Data Access service failed to register an SPN. A domain admin needs to add MSOMSdkSvc/WIN-9IAJC0HS9RJ and MSOMSdkSvc/WIN-9IAJC0HS9RJ.domainxx.local to the servicePrincipalName of CN=WIN-9IAJC0HS9RJ,CN=Computers,DC=domainxx,DC=local
Which makes sense because it has not the permissions to do that.
When I make the domain user account member of domain admins it has the concerning permissions and it indeed registers that SPN to the computer account. But why?? The SPN should be registered to the domain user account instead (and therefore I had given the
domain user account the read/write permissions to itself to do that).
I have the following SPN registered now for the computer and domain user account:
setspn -l WIN-9IAJC0HS9RJ
Registered ServicePrincipalNames for CN=WIN-9IAJC0HS9RJ,CN=Computers,DC=domainxx
DC=local:
MSOMSdkSvc/WIN-9IAJC0HS9RJ
MSOMSdkSvc/WIN-9IAJC0HS9RJ.domainxx.local
MSOMHSvc/WIN-9IAJC0HS9RJ
MSOMHSvc/WIN-9IAJC0HS9RJ.domainxx.local
TERMSRV/WIN-9IAJC0HS9RJ
TERMSRV/WIN-9IAJC0HS9RJ.domainxx.local
WSMAN/WIN-9IAJC0HS9RJ
WSMAN/WIN-9IAJC0HS9RJ.domainxx.local
RestrictedKrbHost/WIN-9IAJC0HS9RJ
HOST/WIN-9IAJC0HS9RJ
RestrictedKrbHost/WIN-9IAJC0HS9RJ.domainxx.local
HOST/WIN-9IAJC0HS9RJ.domainxx.local
setspn -l domainxx\omdas
Registered ServicePrincipalNames for CN=OMDAS,CN=Users,DC=domainxx,DC=local:
none for this account
I don't get it. Anyone?
I am using SCOM 2012 R2
Pls help.
Thanx in advance.
Regards
Chris

SCOM SDK service really tries to set its SPN to the computer account (although the SDK service is running using a domain user account). The alert is no bug!
I know this for sure because I gave the SDK service permission to do it - by making the domain user account member of the domain admins security group - and it indeed sets the SPN on the computer account.
The latter is the actual bug I would say! It should try to set the SPN for the domain user account the sdk service is running with.
Then again, nog having the SPN been set correctly to this domain user account, does not seem to bother SCOM at all indeed. Perhaps it uses NTLM instead in this scenario.
Can anyone comfirm?

Similar Messages

User DOMAIN / user has no access authorization for computer IP_address

Dear Forum,
When running a function module FTP_CONNECT with RFC destination SAPFTPA (in SM59). I always get a message "User <DOMAIN>/<user> has no access authorization for computer <IP_address>". Trying it with IE, I have no problem.
There is always an event viewer security failure log when I try it:
===========================================
Logon Failure:
     Reason:          Unknown user name or bad password
     User Name:     <user>
     Domain:          <DOMAIN>
     Logon Type:     8
     Logon Process:     IIS
     Authentication Package:     MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
     Workstation Name:     GDCS009D
     Caller User Name:     GDCS009D$
     Caller Domain:     ERP
     Caller Logon ID:     (0x0,0x3E7)
     Caller Process ID:     968
     Transited Services:     -
     Source Network Address:     -
     Source Port:     -
For more information, see Help and Support Center at
===========================================
Please help....
Regards,
Agoes

Hi ,
Each and every SAP client ( as it is client dependent)
Go to SE16
Table name : SAPFTP_SERVERS
Go to Menu TABLE ---> Create new entries
FTP SERVER NAME *
FTP SERVER PORT 21
Save
Regards
Venkat

R12 using domain user account

Hi All,
Our architecture is R12.1.3 Apps and 11.2.0.3 database.we are trying to clone from PROD to test.
Copyright (c) 1991, 2011, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=ppclone15db.ppgpl.co.tt)
(PORT=1524)))
The command completed successfully
ECHO is off.
Listener DB15 has already been started.
ECHO is off.
addlnctl.cmd exiting with status 0
[SC] OpenService FAILED 1060:
The specified service does not exist as an installed service.
oracleserviceTest is created with path executable /orant/bin oracle.exe instead of ORACLE_HOME/bin oracle.exe.
we are doing rapidclone using Domain user account (with local administrator privilege)
As per metalink note id 406982.1 Note: On Microsoft Windows, Rapid Clone is not currently certified for use from Domain User Accounts
kindly provide us suitable solutions to overcome rapid clone issue in windows machine.
Regards,
Dinesh

Hi,
As a workaround, always keep a copy of your configuration files like (XML files, .ora files etc) from the TEST environment before removing all the files for cloning.
Original files can be copied over from backup copies and can be reused after running the autoconfig.
You can take a backup of your existing Oracle services running on windows for TEST environment before removing it for Clone.
To view the oracle services running and their location on windows OS you can view the services by:
go to Run --> services.msc to get to the services page.
Regards
Neeraj Sharma
Edited by: NeSharma on Jul 9, 2012 2:13 AM

HT201320 I am trying to set up an email account on my new ipad. I use ntl. so it is a pop account not imap. When I enter the description as pop3 it will not verify, if I leave it on the default of ntlworld it will not verify. Can anyone tell me what I am

I am trying to set up my email account on my new ipad. I use ntl. so it is a pop3 account but whatever I put in it will not verify. any help please

Have a look here > http://www.apple.com/support/ipad/mail/

Unable to install the GEAR driver set at this time.The GEARAspiWDM service used bz the GEAR driver set is scheduled to be deleted during the next system reboot.Please reboot the system and run iTunes again.help me..I understand this problem..thanks

Unable to install the GEAR driver set at this time.The GEARAspiWDM service used bz the GEAR driver set is scheduled to be deleted during the next system reboot.Please reboot the system and run iTunes again.help me..I understand this problem..thanks

Hi there, i had the exact same problem and posted a thread a few above yours, and these forums wasnt much help nobody replied, so i did a bit of research and followed all the intructions on this site: http://www.gearsoftware.com/cfknowledgebase/articledisplay.cfm?articleid=296
If you follow the steps very carefully and do as each says, this will solve your problem.. Now i am very happy i can actually install iTunes and use it for my iPod.
Remember to be carefully with the steps as the things you will be deleting are very important to your comp.
Hope this helps.
Windows XP

Unable to Sync emails to car's HU over bluetooth. I am using iphone 5 and have set up a gmail account on it. Also, the basis notification settings mentioned on some site have been done.Can someone answer it?

Unable to Sync emails to car's HU over bluetooth. I am using iphone 5 and have set up a gmail account on it. Also, the basis notification settings mentioned on some site have been done.I tried doing the following still the email sync is not working.?
Here's the step by step:
1. Go to Settings --> Notifications --> Mail --> Select any of your email accounts
2. Notification Center: ON
3. Alert Style: Banners or Alerts (I've only tested it to work with Banners...)
4. Show Preview: ON
5. View in Lock Screen: ON

Hi uneleashurself and thanks for your answer.
Forgive my language but getting to talk to the Safaricom customer service is a real pain in the **bleep** - if you ever get to talk to them, that is.
I've never got an answer to my phone calls in three years and their customer assistans in the shops usually have no clue about whatever it is you're asking them.
I talked to a few of them in a couple of different Safaricom shops and they didn't know what I was talking about.
Still, I believe Safaricom is not the problem as other people I know who have a BlackBerry on Safaricom haven't experienced this problem.

Getting error while trying to set text for form value field in oaf

Hi ALL,
When i am trying to set text for a form value type field it is giving null pointer exception, please help me out.
I tried below way.
OAFormValueBean containlineid=(OAFormValueBean)webBean.findChildRecursive("item11");
            containlineid.setText(pageContext,"test");
Thanks

HI Keerthi,
I am able to set and get the value now, i am able to see the data in my log window, but in my page it is erroring out, giving null pointer exception.
after commenting the two lines setting and getting value page is running fine, so any clue on this, please check the below code.
public class XXDPECONTAINLINESCO extends OAControllerImpl
public static final String RCS_ID="$Header$";
public static final boolean RCS_ID_RECORDED =
        VersionInfo.recordClassVersion(RCS_ID, "%packagename%");
   * Layout and page setup logic for a region.
   * @param pageContext the current OA page context
   * @param webBean the web bean corresponding to the region
public void processRequest(OAPageContext pageContext, OAWebBean webBean)
    super.processRequest(pageContext, webBean);
    OAApplicationModule am = (OAApplicationModule) pageContext.getApplicationModule(webBean);
      OARawTextBean startDIVTagRawBean =
      (OARawTextBean) webBean.findChildRecursive("DivStart");
      System.out.println("debhorizontal"+ startDIVTagRawBean);
// addScrollBarsToTable(pageContext, webBean,"DivStart", "DivEnd", true , "400",true,"400");
   * Procedure to handle form submissions for form elements in
   * a region.
   * @param pageContext the current OA page context
   * @param webBean the web bean corresponding to the region
public void processFormRequest(OAPageContext pageContext, OAWebBean webBean)
    super.processFormRequest(pageContext, webBean);
     String preplenish = pageContext.getParameter("item1");
      String pworkorder = pageContext.getParameter("item2");
      String pdmr = pageContext.getParameter("item4");
      String punloading = pageContext.getParameter("item6");
      String prrnum=pageContext.getParameter("item16");
      String pworknum=pageContext.getParameter("item14");
      String pdtr=pageContext.getParameter("item13");
      Serializable param[] = {preplenish,pworkorder,pdmr,punloading,prrnum,pworknum,pdtr};
      OAApplicationModule am = (OAApplicationModule) pageContext.getApplicationModule(webBean);
      if(pageContext.getParameter("item11")!=null)
        if(am !=null)
          am.invokeMethod("getSearchData",param);
      if (pageContext.getParameter("item30") != null) {
        String recout = (String)am.invokeMethod("getSelectedData");
           System.out.println("deb multi select test"+recout);
            System.out.println("1111test1"+pageContext.getParameter("item32"));
            OAFormValueBean containlineid=(OAFormValueBean)webBean.findChildRecursive("item32");
            System.out.println("1111test2"+pageContext.getParameter("item32"));
            //containlineid.setValue(pageContext,recout);
            System.out.println("1111"+pageContext.getParameter("item32"));
          /// System.out.println("22222"+containlineid.getValue(pageContext));
        containlineid.setValue(pageContext,recout);
        containlineid.getValue(pageContext);
           System.out.println("1111test3"+pageContext.getParameter("item32"));
--------------Error it is giving in the page as----------------
Exception Details.
oracle.apps.fnd.framework.OAException: java.lang.NullPointerException at oracle.apps.fnd.framework.OAException.wrapperException(Unknown Source) at oracle.apps.fnd.framework.webui.OAPageErrorHandler.prepareException(Unknown Source) at oracle.apps.fnd.framework.webui.OAPageErrorHandler.processErrors(Unknown Source) at oracle.apps.fnd.framework.webui.OAPageBean.processFormRequest(Unknown Source) at oracle.apps.fnd.framework.webui.OAPageBean.preparePage(Unknown Source) at oracle.apps.fnd.framework.webui.OAPageBean.preparePage(Unknown Source) at oracle.apps.fnd.framework.webui.OAPageBean.preparePage(Unknown Source) at _OA._jspService(_OA.java:71) at com.orionserver.http.OrionHttpJspPage.service(OrionHttpJspPage.java:59) at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:462) at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:594) at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:518) at javax.servlet.http.HttpServlet.service(HttpServlet.java:856) at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:713) at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:370) at com.evermind.server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:871) at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:453) at com.evermind.server.http.HttpRequestHandler.serveOneRequest(HttpRequestHandler.java:221) at com.evermind.server.http.HttpRequestHandler.run(HttpRequestHandler.java:122) at com.evermind.server.http.HttpRequestHandler.run(HttpRequestHandler.java:111) at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260) at oracle.oc4j.network.ServerSocketAcceptHandler.procClientSocket(ServerSocketAcceptHandler.java:239) at oracle.oc4j.network.ServerSocketAcceptHandler.access$700(ServerSocketAcceptHandler.java:34) at oracle.oc4j.network.ServerSocketAcceptHandler$AcceptHandlerHorse.run(ServerSocketAcceptHandler.java:880) at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303) at java.lang.Thread.run(Thread.java:595) ## Detail 0 ## java.lang.NullPointerException at xxdpe.oracle.apps.ak.xxdpecontain.webui.XXDPECONTAINLINESCO.processFormRequest(XXDPECONTAINLINESCO.java:123) at oracle.apps.fnd.framework.webui.OAWebBeanHelper.processFormRequest(Unknown Source) at oracle.apps.fnd.framework.webui.OAWebBeanContainerHelper.processFormRequest(Unknown Source) at oracle.apps.fnd.framework.webui.beans.layout.OAMessageComponentLayoutBean.processFormRequest(Unknown Source
Thnaks

I need to back up my imac running Tiger (no time machine) so that we can upgrade OS. It is set up for multiple accounts. How do I capture all files in each account using newly purchased USB external hard drive?

I need to back up my imac running Tiger (no time machine) so that we can upgrade OS. It is set up for multiple accounts. How do I capture all files in each account using newly purchased USB external hard drive? Thanks!

Backup Software Recommendations
Carbon Copy Cloner
Data Backup
Deja Vu
SuperDuper!
Synk Pro
Tri-Backup
Others may be found at VersionTracker or MacUpdate.
Visit The XLab FAQs and read the FAQ on backup and restore. Also read How to Back Up and Restore Your Files.
Or you can simply use the Restore option of Disk Utility to clone the drive to the backup:
Clone using Restore Option of Disk Utility
Open Disk Utility from the Utilities folder.
Select the destination volume from the left side list.
Click on the Restore tab in the DU main window.
Check the box labeled Erase destination.
Select the destination volume from the left side list and drag it to the Destination entry field.
Select the source volume from the left side list and drag it to the Source entry field.
Double-check you got it right, then click on the Restore button.
Destination means the external backup drive. Source means the internal startup drive.

I am trying to set up a child account where websites are restricted unless they are on the approved list, however youtube is still allowed. How do I block youtube?

I am trying to set up a child account where websites are restricted unless they are on the approved list, however youtube is still allowed. How do I block youtube?

Hello jmkibert,
Thank you for using Apple Support Communities.
For more information, take a look at:
OS X Mavericks: Set up parental controls
http://support.apple.com/kb/PH14414
Web > try to limit access to adult websites > customize > never allow these websites.
Have a nice day,
Mario

I am trying to set up a mail account but I get a warning that my password cannot be sent securely to the server. how do I correct the problem?

I am trying to set up a mail account but I get a warning that my password cannot be sent securely to the server. How do I correct this so that I can set up my email account?

1. If you haven't tried this already, just delete the user account entirely, and then try setting it up again.
2. To find the permissions file:
     a. hold down the option key
     b. go to the Go menu in the finder
     c. scroll down to Library and open it
     d. in Library, go to Containers/com.apple.mail/Data/Library/Preferences
     e. drag it to the trash and restart.
3. if that doesn't work, go to Applications/Utilities/Keychain Access. In the Keychain Access menu, do Keychain First Aid, and repair.
This should keep you busy for a while.

When trying to set up my eprint account. I get an error message my email

When trying to set up my eprint account. The error message is my email address is on file and I need to sign in, then when using my password, I am told I need to set up an account for the eprint center.

The issue you're experiencing is most likely due to an old Snapfish account registered under your email address. ePrintCenter and Snapfish account information is stored in the same place and I've seen this conflict before. You will need to go to http://www.snapfish.com/snapfish/welcome, click the "Sign In" in the top right hand corner of the page and then click the "forgot password" link and enter the email address that is causing your problems, you should receive an email from Snapfish that will let you create a new password there. Once you've created a new password for Snapfish, try to Sign In on ePrintCenter (http://www.eprintcenter.com/) using your email address and the new password you created for Snapfish.
If I have SOLVED your issue, please feel free to provide KUDOS and make sure you mark this thread as SOLUTION PROVIDED!
Although I work for HP, my posts and replies are my own opinion and not those of HP.

HT201359 I'm trying to set up my purchase account, but it keeps asking me about an iTunes code I have to feel in but I don't know what is that code and where do I get it?

I'm trying to set up my purchase account, but it keeps asking me about an iTunes code I have to feel in but I don't know what is that code and where do I get it?

THe iTunes gift code is an optional field, you don't have to fill it in - gift cards are an alternative method of paying for iTunes content, but as they are not available inall countries (and they are country-specific, they can only be used in the country in which they were issued), you may not be able to fill it in anyway. If they are available in your country then you might be able to buy cards from Apple, supermarkets, electrical stores etc
If you have a credit card then you can use that as your payment method instead. Otherwise there are instrutions on this page for how to create a new account without giving a credit card number (it won't with existing, or partially created, accounts) : http://support.apple.com/kb/HT2534

When trying to set up an email account I keep receiving ssl errror message. Any advice please.

When trying to set up an email account I keep receiving ssl errror message. Any advice please.

Error is: Cannot connect using SSL. Do you want to try setting up the account without SSL?
Answer: Yes
Then "Verifying" appears at top of screen but nothing happens.
Tiscali/Talk Talk is the provider.

HT2731 have tried to set up an itunes account for my sons ipad but tells me he doent meet min age requirement what the !!!!!!

have tried to set up an itunes account for my sons ipad but tells me he doent meet min age requirement what the !!!!!

Welcome to the Apple community.
If your son is under 13, then you will need to set up an account for yourself and allow him to use it.

Trying to set up a yahoo account in leopard, need help.

i am trying to set up a yahoo account but it wont let me. what are the incoming and outgoing servers for yahoo mail? what settings should i apply? does anybody know how to set up a yahoo account in mail? it says things like "trying to log into pop.mail.yahoo.com failed" and " smtp.yahoo.com failed"

Unless you're a paying member of Yahoo! Mail Plus, you can't use Mail to send and receive email. You can probably send, but definitely not receive. If you're too cheap to pay, then go with a Gmail POP account; it's free.
You can find all the information you need to setup Mail to send and receive email through Gmail here: http://mail.google.com/support/bin/answer.py?answer=13275
Mulder

SDK service using domain user trying to set SPN for computer account

Similar Messages

Maybe you are looking for