Service sid XDB is down alert

I constantly receive the alert <SID>XBD is down. We are not using XDB nor DISPATCHERS, or multi-threaded servers.
At database creation time, from dbca, the parameter DISPATCHERS had a value. Afterwards we created a pfile and removed this parameter and restarted the database. It is now NULL.
I have gone to All Metrics and taken the 'Down' out of server status and the alert went away. (I use this technique with Grid sometimes when it's not catching up to an alert that shold be cleared.)
When I up the 'down' back in to this metric, the alert immediately shows up.
Somewhere Grid is thinking it should be looking for an XDB service and is alerting, but as far as the database is concerned, XDB is not configured.
Does anyone have an idea on where this could be lurking?

If I am correct you can edit Key Values for this Metric.
So go to the Database Home Page, select Metric and Policy Settings
Select the Metric "Service Status", press Edit
and add a row for the specific Service and leave both Warning and Critical Threshold empty.
This will automatically introduce a row saying "Others". If you leave the Warning and Critical threshold to it's default value you will endup in the situation where you won't receive an alert for rptwdXDB but you will receive an alert for all other (if the go down)
Regards
Rob
For more information on using OEM GC, you might want to check http://oemgc.wordpress.com

Similar Messages

I can no longer preview my iMessages in the pull down alerts. Any ideas

I Can no longer preview my iMessages in the pull down alerts. Any ideas?

Reset the device:
Press and hold the Sleep/Wake button and the Home button together for at least ten seconds, until the Apple logo appears.
If that doesn't help, tap Settings > General > Reset > Reset All Settings

Per-service SID's are not being granted correct permissions

Hi,
I had posted this here :
https://connect.microsoft.com/SQLServer/feedback/details/770984/per-service-sid-s-are-not-being-granted-correct-permissions, but no response as yet.
When installing SQL 2012 (on a VMWare VM), based on the following article :
http://msdn.microsoft.com/en-us/library/ms143504(v=sql.110), I have noticed that the SQL per service SIDs are not being granted the correct permissions. From the initial install, the following is what was observed (the red x's being permissions that
should have been granted but were not).
When re-installing and changing from specifying a domain account, to the default values, during set-up, the 4 service SIDs that were not added to 'Log on as a Service' initially were then correctly granted permission, but the other 4 in 'Bypass traverse
checking', 'Adjust Memory Quotas for a process' and 'Impersonate a Client after authentication' were still not added.
When running a repair on this install, 'NT Service\MSSQLFDLauncher' was then granted the correct permissions, but 'NT SERVICE\MsDtsServer110' was still missing 'Bypass traverse checking' and 'Impersonate a Client after authentication'.
This also resulted in the installation of Reporting Services - Native failing in the original installation with 'Attempted to perform an unauthorized operation'.
If anyone has recently installed SQL 2012, can you check (via gpedit.msc) that the correct 'User Right Assignment' was granted to the per Service SIDs as per
http://msdn.microsoft.com/en-us/library/ms143504(v=sql.110) ?

Have you resolved this yet? Group policy for the OU with my desktop removes all SQL per-service rights. If group policy is your issue, I'd be interested in how some are retained.
Randy in Marin

Service SID and setup account for DB engine service

SQL supports service isolation of access control through granting permissions to the service SID. However, we also can give the privileges to service account. Which one of the service
SID and service account has higher priority? If we give the conflicting permissions to service SID and service account, which one will work?

Hi smileahpu,
In short, for account rights/privileges, there are two general types Allow and Deny. The "Allow" rights/privileges are combined, and the "Deny" rights/privileges are exclused. The DENY(SE_DENY) rights override the corresponding account
rights. In this case, either the service account or the service sid is denied on a right, the service is denied on the right.
To be more detailed, we need to go through the following topics:
How does system validate a process's privileges while accessing securable objects
How does per-service SID work while accessing securable objects
How does Access Control work
How a process accesses securable objects:
The system uses an access token to identify the user when a thread(or a process) interacts with a securable object or tries to perform a system task that requires privileges.
An access token is an object that describes the security context of a process or thread.
Access token contains lots of information. Two of them are:
•The security identifier (SID) for the user's account
•A list of the privileges held by either the user or the user's groups
Please review the following article for more information:
http://msdn.microsoft.com/en-us/library/windows/desktop/aa374909(v=vs.85).aspx
How does per-service SID work while accessing securable objects
For a service without per-Service SID enable, we can image the security context is just from the user(service account). With per-Service SID enabled, we can make a security context that is not just a user, but a user AND a particular process.
Actually, the per-Service SID's SID and privilege are included the access token directly.
By checking with Windbg, we can see the service SID was included.
0:072> !token
Thread is not impersonating. Using process token...
TS Session ID: 0
User: S-1-5-21-3485830563-343820118-176642512-1008
User Groups:
00 S-1-5-21-3485830563-343820118-176642512-513
    Attributes - Mandatory Default Enabled
01 S-1-1-0
    Attributes - Mandatory Default Enabled
02 S-1-5-21-3485830563-343820118-176642512-1009
    Attributes - Mandatory Default Enabled
03 S-1-5-32-545
    Attributes - Mandatory Default Enabled
04 S-1-5-6
    Attributes - Mandatory Default Enabled
05 S-1-2-1
    Attributes - Mandatory Default Enabled
06 S-1-5-11
    Attributes - Mandatory Default Enabled
07 S-1-5-15
    Attributes - Mandatory Default Enabled
08 S-1-5-113
    Attributes - Mandatory Default Enabled
09 S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003 < -- service SID
    Attributes - Default Enabled Owner
10 S-1-5-5-0-274023807
    Attributes - Mandatory Default Enabled Owner LogonId
11 S-1-2-0
    Attributes - Mandatory Default Enabled
12 S-1-5-64-10
    Attributes - Mandatory Default Enabled
13 S-1-16-12288
    Attributes - GroupIntegrity GroupIntegrityEnabled
Primary Group: S-1-5-21-3485830563-343820118-176642512-513
Privs:
00 0x000000003 SeAssignPrimaryTokenPrivilege     Attributes -
01 0x000000005 SeIncreaseQuotaPrivilege          Attributes -
02 0x000000013 SeShutdownPrivilege               Attributes -
03 0x000000017 SeChangeNotifyPrivilege           Attributes - Enabled Default
04 0x000000019 SeUndockPrivilege                 Attributes -
05 0x00000001d SeImpersonatePrivilege            Attributes - Enabled Default
06 0x00000001e SeCreateGlobalPrivilege           Attributes - Enabled Default
07 0x000000021 SeIncreaseWorkingSetPrivilege     Attributes -
08 0x000000022 SeTimeZonePrivilege               Attributes -
Auth ID: 0:105545a6
Impersonation Level: Anonymous
TokenType: Primary
Is restricted token: no.
SandBoxInert: 0
Elevation Type: 1 (Default)
Mandatory Policy: TOKEN_MANDATORY_POLICY_VALID_MASK
Integrity Level: S-1-16-12288
Process Trust Level: (null)
Token Virtualized: Disabled
UIAccess: 0
IsAppContainer: 0
Device Groups:
How does Access Control work
Please check from the following article for more information:
http://technet.microsoft.com/en-us/library/cc740104(v=ws.10).aspx
In addition, the following articles are helpful for understanding the concepts discussed in this reply:
http://msdn.microsoft.com/en-us/library/windows/desktop/bb545671(v=vs.85).aspx
http://msdn.microsoft.com/en-us/library/windows/desktop/ms684880(v=vs.85).aspx
http://technet.microsoft.com/en-us/library/cc781716(v=ws.10).aspx
http://blogs.technet.com/b/voy/archive/2007/03/22/per-service-sid.aspx
Thanks,
Jinchun Chen

Including service-side file

Hi,
According to the lessons in my book, I inserted a service-side file in
my HTML-code.
It seems to work fine in the Design Mode and in the Live-View.
But when starting a browser, no matter which one, the service side
file is not visible.
What can be the problem?
Thanks in advance.
PR.

Sorry, you're right, I'm talking about server-side. And I think I found the answer as well, in my book ("classroom in a book").
At the end of the chapter it says: "You won't be able to see the SSI in a browser without a testing server as long as it's stored
only on your local hard drive."
And I'm not using a test-server yet.
Thanks for your attention anyway!

GPO and Service SID?

Hi, I'm a DBA installing SQL Server 2012. SQL Server setup is creating service SIDs (e.g., NT SERVICE\MSSQLSERVER, NT SERVICE\MsDtsServer110, etc.) and granting them rights (e.g., SeServiceLogonRight,
SeAssignPrimaryTokenPrivilege, etc.).
Our GPO is removing rights from the service SIDs created by SQL setup. We have been unable to add a service SID to GPO. I think there is an error that the account does not exist.
We can add just the name (e.g., MSSQLSERVER, MsDtsServer110, etc.), but this does not seem to work as rights on the service SID are still removed.
We did add NT SERVICE\ALL SERVICES (no error) and grant it SeServiceLogonRight. I think this covers all service SIDs. This appears to be working; however, I’m reluctant to grant
some of the other rights to all services using service SIDs.
Are only “well known” service SID values valid in GPO? Is there any way to add a service SID such as "NT SERVICE\MsDtsServer110" into GPO? Is there a best practice for
handling service SIDs and group policy?
Thanks.
Randy in Marin

It's a service SID and local by nature.
http://support.microsoft.com/kb/2620201
http://msdn.microsoft.com/en-us/library/ms143504(v=sql.110).aspx
Below is from the "Virtual Accounts" item in the above link.
Virtual accounts in Windows Server 2008 R2 and Windows 7 are
managed local accounts that provide the following features to simplify service administration. The virtual account is auto-managed, and the virtual account can access the network in a domain environment. If the default value is
used for the service accounts during SQL Server setup on Windows Server 2008 R2 or Windows 7, a virtual account using the instance name as the service name is used, in the format
NT SERVICE\<SERVICENAME>. Services that run as virtual accounts access network resources by using the credentials of the computer account in the format
<domain_name>\<computer_name>$. When specifying a virtual account to start SQL Server, leave the password blank. If the virtual account fails
to register the Service Principal Name (SPN), register the SPN manually. For more information on registering a SPN manually, see
Register a Service Principal Name for Kerberos Connections.
Virtual accounts cannot be used for SQL Server Failover Cluster Instance, because the virtual account would not have the same SID on each node of the cluster.
Randy in Marin

Unidentified traps and interface down alerts LMS 4.2

Hi all,
Sometimes we have unidentified traps in our log, we don't know where they come from.
In high severity faults we see an active alert with device name “Unidentified” event name unresponsive but with a certain ip address.
What are these alerts about? Can I filter them?
A second issue I have is that I get interface down alerts. But when we log on to the device, there is no interface down at all. We can also ping the device from the lms server at that time. I have been told that the admin state and operational state has to be up.
Thanks,
Best Regards,
Joris

Hi Joris,
Generic trap support is a new feature introduced in LMS 4.2 release. look at the below
document also.
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.2/user/guide/lms_monitor/TrapFwd.html#wpxref13049
LMS 4.2 release onwards DFM will display any unprocessed traps comming from device in
fault monitor screen as unidentified trap under Inform alarm.
For the other issue , it could be a DFM database issue , try to REDISCOVER those devices in
DFM and see how it works
Thanks
Afroz

Service sids

Hi,
What are Service SIDs? Why do we need or what is the use of Service SIDs? Are they replacement for domain groups or service accounts?
How does SQL Server make use these SIDS? What kind of benefits do we get if we choose service sids?
Thanks in advance.

Hi Samantha v,
About the first question: What are Service SIDs? Why do we need or what is the use of Service SIDs? Are they replacement for domain groups or service accounts?
Service SIDs are a feature of service isolation, a security feature introduced in Windows Vista and Windows Server 2008. Any service with the "unrestricted" SID-type property will have a service-specific SID added to the access token of the service
host process.
The purpose of Service SIDs is to allow permissions for a single service to be managed without necessitating the creation of service accounts, an administrative overhead.
A Security Identifier (commonly abbreviated SID) is a unique, immutable identifier of a user, user group, or other security principal.
About the second question: How does SQL Server make use these SIDs? What kind of benefits do we get if we choose service SIDs?
SQL Server uses a service SID to provide service isolation. Service isolation enables access to specific objects without the need to run a high-privilege account or weaken the security protection of the object. By using an access control entry that contains
a service SID, a SQL Server service can restrict access to its resources. For information about how SQL Server uses a service SID to provide service isolation, please refer to the following article:
https://support2.microsoft.com/kb/2620201?wa=wsignin1.0
If you have any question, please feel free to let me know.
Regards,
Donghui Li

My iPod wont detect if I turn it. If I am playing a game where I need to turn it from side to side. Up down does work. Is it broken. If so, how much for a fix?? Please help

My iPod wont detect if I turn it. If I am playing a game where I need to turn it from side to side. Up down does work. Is it broken. If so, how much for a fix?? Please help

Try:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Reset all settings
Go to Settings > General > Reset and tap Reset All Settings.
All your preferences and settings are reset. Information (such as contacts and calendars) and media (such as songs and videos) aren’t affected.
- Restore from backup. See:
iOS: How to back up
- Restore to factory settings/new iOS device.
If still problem, make an appointment at the Genius Bar of an Apple store since it appears you have a hardware problem.
Apple Retail Store - Genius Bar
Apple will exchange your iPod for a refurbished one for $199 for 64 GB 4G and $99 for the other 4Gs. They do not fix yours.
Apple - iPod Repair price

My iPhone4 is showing no service so i power down but when i power back up it says to plug into itunes and restore, i had this same issue with another iPhone and apple replaced it but its doing the same thing on this phone any help would be apprecaited

my iPhone4 is showing no service so i power down but when i power back up it says to plug into itunes and restore, i had this same issue with another iPhone and apple replaced it but its doing the same thing on this phone any help would be apprecaited

AAAAAANNNNNNDDDDDDD go figure no one can help!!!!! i just dont know what to do, i guess no-one else does either lol!!!! thanks anyway!!!!!

Binding web service to multiple drop-down fields.

I am getting alogn quite well using Web Services with Adobe XFA Forms. I was able to bind very complex web services results to dynamic PDF Forms.
I was also able to bind Drop-Down Items to a web service.
I still need little help though.
I have 2 Drop-Down Fields:
Hijri Year
Hijri Month
They are retrieved by Web Service developed over SAP Systems.
The web service will return a nested XML Structure of Hijri Year Array of Items, where each Year Item, will have nested array of months item.
When I click on the button to execute the Web Service, the Year Drop Down is populated. So now how to populate the Month Drop-Down Items ?
It is a bit tricky, and I cannot figure out what to do.
Please help.
Tarek.

Well, I was almost about to do that with very little coding, but looks like it is not possible. I seems that I have to bind the XML to the dorp-down manually.
I am using Stefan Web Service Per-Processor model. I am capturing the web service reulst, and loading the node I want to xfd.datasets.data.
I am doing something like this:
Sample XML:
<?xml version="1.0" encoding="UTF-8"?>
<root>
<AttendancePeriod>
   <item>
      <Year>1430</Year>
      <Periods>
         <item>01</item>
         <item>02</item>
         <item>03</item>
         <item>04</item>
         <item>05</item>
         <item>06</item>
         <item>07</item>
         <item>08</item>
         <item>09</item>
         <item>10</item>
         <item>11</item>
         <item>12</item>
      </Periods>
   </item>
   <item>
      <Year>1431</Year>
      <Periods>
         <item>01</item>
         <item>02</item>
         <item>03</item>
         <item>04</item>
         <item>05</item>
         <item>06</item>
         <item>07</item>
         <item>08</item>
         <item>09</item>
      </Periods>
   </item>
</AttendancePeriod>
</root>
DataConnection Post Execute Event:
var rootXml = null;
var soapFault = null;
if (xfa.event.soapFaultCode)
soapFault = {code:xfa.event.soapFaultCode, message:xfa.event.soapFaultString};
else
rootXml = xfa.datasets.connectionData.DataConnection.Body;
preProcessor.processResponse(rootXml, soapFault);
The Response Processor function:
* Called after the web service response has been received.
* @param rootXml XML node which is the root of the web service response XML data. Null if a fault occurred.
* @param soapFault Object with 'code' and 'message' properties if a fault occurred; null otherwise.
function processResponse(rootXml, soapFault)
console.clear();
if (rootXml)
var AttendPeriod = rootXml.GetAttendancePeriodsResponse.AttendancePeriod;
xfa.datasets.data.root.nodes.append(AttendPeriod);
xfa.form.remerge();
console.println(AttendPeriod.saveXML());
else if (soapFault)
console.println("Error = ");
console.println("Fault code: " + soapFault.code);
console.println("Fault message: " + soapFault.message);
console.show();
Then, I will bind the drop-down list to the XML.
The above code is working fine, but the only problem is xfa.form.remerge(), which will clear all other fields, I am not sure why ?
Seems I have to use a loop to bind the list items one by one, right ?!!
Tarek.

SQL Server 2008 Service SIDs

Hello,
I've recently installed SQL Server 2008 and when I look at the groups created, the Windows Domain accounts I specified for each service do not appear. Instead the service SID has been placed into that group, however when I run cmd>>sc showsid [servicename]
the SIDs do not match.
How can I confirm the SID of the SQL services?
Thanks in advance.

Hi Vijay, thank you for your response,
The server build is Windows 2008 R2 with SQL Server 2008 installed.
I can see that in the groups (under computer management) created by SQL Server the service for the database engine is NT SERVICE\MSSQLSERVER with a SID. What I am trying to work out is, compared to SQL Server 2005, where the account for the service was dropped
into the corresponding group, a service SID is now in the group.
However when I use the cmd>>sc showsid [MSSQLSERVER] the SID displayed does not match the SID assigned to the NT SERVICE\MSSQLSERVER account in the group.
I'm pretty sure I am missing something, I would just like to understand how the correct permissions are assigned to the SQL Server services,
Regards,
Andrew

Two sided printing, the second side prints upside down, what have it done

I know that a setting has been changed, I just can't remember what I did.
When using the two sided printing the orientiation of the back side is upside down. What have I done? and how can I fix it? Help?
This question was solved.
View Solution.

Hi,
From the application used to print open the printer dialog, then click on ettings or Preferences to access to Printig Preferences dialog.
Within the Layout tab change the Print on both sides option.
For a portrait oriented document select Flip on Long Edge, for a Landscape one select Flip on Short Edge, then it will print as expected.
Shlomi
Say thanks by clicking the Kudos thumb up in the post.
If my post resolve your problem please mark it as an Accepted Solution

CISCO Prime Infrastructure 2.0 Link UP DOWN ALERT

Hi,
I want to monitor core switch link up down status and ignore all the access switch link up down. How do I do that? My core switch is nexus 7009 and my access switch is 2960s.
I have tried configuring port group for core switch and access switch and only deploy interface health template to my core switch port group but I still receiving link down alert from my access switchport even without deploying the template to my access switch.
Am I doing it the right way? Help please. Thank you.

Hi Rafael,
Here is the config:
snmp-server community cxxx_ro RO SNMP_ACL
snmp-server community cxxx_rw RW SNMP_ACL
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps transceiver all
snmp-server enable traps tty
snmp-server enable traps cluster
snmp-server enable traps entity
snmp-server enable traps cpu threshold
snmp-server enable traps rep
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps flash insertion removal
snmp-server enable traps port-security
snmp-server enable traps auth-framework sec-violation
snmp-server enable traps dot1x auth-fail-vlan guest-vlan no-auth-fail-vlan no-guest-vlan
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps power-ethernet group 1
snmp-server enable traps power-ethernet police
snmp-server enable traps fru-ctrl
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps config-ctid
snmp-server enable traps energywise
snmp-server enable traps rtr
snmp-server enable traps vstack
snmp-server enable traps bridge newroot topologychange
snmp-server enable traps stpx inconsistency root-inconsistency loop-inconsistency
snmp-server enable traps syslog
snmp-server enable traps mac-notification change move threshold
snmp-server enable traps vlan-membership
snmp-server enable traps errdisable
snmp-server host 10.189.x.x version 2c cxxx_ro
snmp-server host 10.189.x.x version 2c cxxx_ro
and this is the switch interface
interface FastEthernet0/1
switchport access vlan 28
switchport mode access
srr-queue bandwidth share 1 30 35 5
priority-queue out
mls qos trust cos
no snmp trap link-status
auto qos trust
spanning-tree portfast
and yes I configured that on all access port in all switches.
Regards,
Syafiq

Server Goes Down Alert

Hello,
I am running SCOM 2012 R2 and I am trying to setup an alert to let me know when a server goes down. I tried creating a rule that monitored the Management Server's "Operations Manager" Event Log for ID 20022. I also configured
the rule that parameter #2 must have my servers name. I also tried EventDescription conatains my servers name. None of them worked. But I looked in the Event Log of my Management Server and as I looked at all of the 20022 entries, I noticed
the computer I was on was listed as not heartbeating. Two of my other servers that are currently on were listed as not heartbeating. So obviously monitoring this 20022 entry is not reliable. I do not want to setup a monitor for something
like Ping Status. I want to try to avoid using monitors because they could be taxing on the servers, my management server, and my network.

Hi
yes event id 20022 is not reliable and never go for windows event id monitor for server shutdown or unavailability on agent , as scom health service will be stopped or connection closed with MS at the time of shutdown on agent.
you need to go for ICMP port monitoring for server availability, as port monitoring run from remote server(watcher node) and can capture server unavailability and ping test.
refer below link for port monitoring
http://technet.microsoft.com/en-us/library/hh457544.aspx
http://www.systemcentercentral.com/custom-tcp-port-monitoring-management-pack-for-scom-2012/
regards
sridhar v

Service sid XDB is down alert

Similar Messages

Maybe you are looking for