Services servers with CNAME and kerberos

Hello.
My problem:
I have an OD master xserver1.mydomain.com and an other server xserver3.mydomain.com.
My DNS is OK direct and reverse, authentication works fine.
My problem is that I want use CNAME for my services offered by xserver3.mydomain.com. (imap, pop, smtp and others).
So I have some CNAME entries in my DNS as imap.mydomain.com, pop.mydomain.com, smtp.mydomain.com which all point to xserver3.mydomain.com therefore:
host imap.mydomain.com gives 10.1.0.10 and host 10.1.0.10 gives xserver3.mydomain.com (all is regular).
When I connect my mail client, if I set the "incoming mail server" to xserver3.mydomain.com, kerberos authentication is OK (TGT and SGT are brought) and mail works fine.
If I connect my mail client with "incoming mail server" set to imap.mydomain.com (the CNAME), kerberos authentication is not OK (TGT is brought but not SGT) and mail does not work.
If I connect my mail client with "incoming mail server" set to imap (CNAME without domain name), kerberos authentication is nearly OK (TGT and SGT are brought)) but mail is very slow and some mail folder sync does not seem to work!
I have tried to remove imap service principals on my mail server imap/[email protected] and create new imap service principals with CNAME as : imap/[email protected] but it doesn't work.
Any idea to do?

Thanks for reply.
Ok for RFCs but my mail server work very fine for long years with client set with server CNAME. Even certificates are OK if the common name is this one given as CNAME.
Th only problem I have kerberos as explained.
I search for the way to have friendly services name for my mail clients and in the same time keep all functionalities (SSL and kerberos).
Maybe with multiples ip for the same network interface on my mail server and an A entry for each?

Similar Messages

Prinitng a Service Contract with Terms and Contracts

Hi All,
I have a doubt on "Printing Service Contract with terms and conditions".I have searched numerous articles on web and as well as on metalink. But I couldn't find any solution yet.Can someone please suggest on how to print a service contract with terms and conditions on it?
EBusiness Version: Oracle Applications 12.1.3
Any suggestions are highly appreciated.
Thanks in advance!!

Hi,
I'm waiting for your valuable inputs.
I want to add one more thing,
Please go through following pointrs:
1. I have changed billing plan date for 1st line item ,then simultaneously system was adding one more line item in billing pan with -ve value.
2. I have changed the billin plan in rest of the 3 line items then simultaneously system is adding one more line item but WITH POSITIVE VALE.
Can anybody tell me beacuse of why system is creating one line item with -ve value and rest of the line item with positive value?
which functionality or behaviuor of contract with priodic billing plan, is this happening in a system?
Thanks in advance,
Ujjawal

Services created with WSADMIN and SOAMANAGER

Hello gurus!
Ihave a question about the WS created in the transaction SOAMANAGER. we have 5 webservices to operate our system, 4 of them were created with WSADMIN and one with SOAMANAGER. The problem is that in EPP we only can download the WSDL of the WS created in SOAMANAGER, and the other four cannot be found. Do we need to re-create them in SOAMANAGER in order to get them in EPP??
Regards IA

Hello,
For old Web service definitions, if you have created End Points using WSCONFIG, you do not need to recreate it in SOAMANAGER. In WSADMIN, once you place cursor on your service, you can download WSDL using WSDL icon in Application Tool bar.
Thanks,
Venu

Debugging servers with gdb and compiled with gcc

I have trouble debugging my servers on Solaris.
Setup: Solaris 8 (2.8?)
[user@ ~]$ gcc -v
Reading specs from /usr/local/lib/gcc-lib/sparc-sun-solaris2.8/3.2.3/specs
Configured with: ../configure disable-nls with-as=/usr/ccs/bin/as --with-
ld=/usr/ccs/bin/ld
Thread model: posix
gcc version 3.2.3
[ ~]$ gdb -v
GNU gdb 5.0
Copyright 2000 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "sparc-sun-solaris2.8".
I can run the server, debug and step through the code, inspecting variables. But when i
type "cont" to continue and let the server finish, what heppens is:
The server finishes (bec i get my result back to the client)
GDB hangs saying "Continue" and i wont get the GDB-promt back.
I have to kill the gdb from the unixprompt
Question: Has anyone tried to run and debug tuxedo servers using gcc and gdb?
any input is of value even if someone has had success on linux with gcc and gdb.
My guess is that it has to do with the threading of gdb and tuxedo that will not match.
Mats Gårdstad Friberg
Datarutin AB Sweden

options=('debug' 'staticlibs')
these are the options i have set in the PKGBUILD, i might try giving CFLAGS directly, but compiling libc on this old dualcore takes quite a bit of time unfortunately

Multihomed servers with IPv4 and IPv6

We have a set up where we have virtual servers with two NIC's. One NIC is connected to our corporate network and the other NIC is connected (via layer 2 over MPLS) to the customer network. The NIC on our network is only assigned an IPv6 address
and the NIC on the customer network is only assigned an IPv4 address from the customer DHCP server. The problem we are running into is when the server does an NSLOOKUP for a URL that is associated with a server located on our network (the server has
an IPv6 and IPv4 address and is publicly accessable to the internet) the traffic goes out the customer NIC then out their internet connection and back to our public facing load balancer. Our application that runs on the server needs to communicate with
a server at the customer site and then send that data to a server on our side. We believe this behavior is happening because the customer server is responding as an "Authoritative" DNS server. We are trying to avoid using the HOSTS file
if possible (when we use the HOSTS file and specify the FQDN with the IPv6 address our application works fine and goes out our NIC).
Any help would be appreciated
Thanks,

Thanks for the idea Bruno, however we did try this already. I moved the adapter with IPv6 to the top of the binding order and rebooted the VM. However when I run NSLOOKUP it still goes out the adapter with IPv4 which is now second in the binding
order.
Side question. When I do an IPCONFIG /all what determines the order of listed adapters? I have changed the adapter names (so it isn't alphabetical), I have looked at the adapters in device manager and it isn't based on which one is #1 next to
it. And now I have changed the binding order and it still hasn't changed. The adapter with IPv4 is always listed first. Not sure if that means anything but just an observation.
Any other ideas?
Thanks,
Adam

List all servers with OS and service pack

Is there an easy way using any script or software to list all servers joined to your domain including operating system (i.e. server 2008) and service pack level, without having to check each manually?

Hi Cf090,
The limit is used to Specify the number of objects to return that matches the criteria that you specify. If you specify a value of
0 for <NumberOfObjects>, this parameter returns all matching objects. If you do not specify this parameter,
dsquery displays the first 100 results by default.
For more detailed information to use dsquery, please refer to this article:
http://technet.microsoft.com/en-us/library/cc754232.aspx
If you have any other questions, please feel free to let me know.
Best Regards,
Anna

Wirless Print Servers with Mac and Windows

I am very new to mac..macbook purchased just this week..facing some challenges but learning at the same time..I have my macbook running thru my wireless network on a Motorola SB4100 Cable modem, D-Link DI 614+ Wirless Broadband router and a d-link DPR-1260 Wirless Print Server..previously I have been using a Windows Laptop..I guess it seems that D-Link print servers are only for Windows systems??? I looked at the manual and it doesn't mention Mac..haven't been able to figure out how to add a prt to the mac and I guess that is why?...you need a seperate print for the mac with it's own wirless prt server? or can you replace the cable modem and router with some apple base station that does everything but then can windows laptop work on the network and wireless prt??
scott

I doubt you need any additional equipment. It should be a matter of setting up using PrinterBut posting your question in the Tiger- Printing & Faxing forum area may get you a faster answer.
http://discussions.apple.com/forum.jspa?forumID=756
It should be a matter of setting up in Printer Setup Utility using the ip address of the server.

Multicast clustering IBM servers with N7K and 2k

     i have two severs IBM are working as a cluster and connected to Fiber fabric extender 2K using VPC as per attached diagram
     two IBM server are woriking fine for network connectivity with N2k but the servers have a multicast named ( power HA 7.1) to work as acluster
      but i tried to configue multicat in N7K and N2k to server working as acluster but the servers are not working
     please advice me about the configuration in N7K and N2k to working IBM servers as a cluster .

One option is the IGMP querier:
config t
ip igmp snooping
vlan 2
switch(config-vlan-config)# ip igmp snooping querier 10.0.10.253
          (or a good source address of the interface)
The other option is run PIM on the VLAN interface:
feature pim
vlan 2
ip pim sparse-mode
Both has the same purpose: combined with IGMP snooping, the L3 interface will flood the VLAN with IGMP queries that traverse the inter-switch links. As a result, the inter-switch links will be included in the snooping port list. In turn,
packets destined to 228.5.10.5 will be sent out the inter-switch link and reach the other server.
Without the IGMP queries, 228.5.10.5 packets will not be sent from one switch to the other as it is not in the 224.0.0.0/24 range.

Problem with proxy and DNS

Hello,
in our company we use Internet Explorer 8... (i know...) We also have a proxy and 4 DNS servers. Last weekend we suddenly had an issue where internet pages could not be loaded. When we did some testing with Wireshark we saw that it took a long time to query
www.google.com or www.microsoft.com. The query went from the first DNS server to the second and so on. This behaviour was shown on Windows 2008 R2 servers with Citrix and also the workstations and laptops with Windows 7.
When we deleted the DNS servers from the network settings and set the proxy ip-adres in the browser the problem was solved. So the problem had to be in DNS.
After that we deleted the list of Root Hints and the problem seemed to be solved. However, when we look in wireshark we still see that external addresses are queried againts our local DNS servers. In internet explorer we have a policy active where the proxy
is set. We have two proxies and the problem exists with both of them.
So the question is, why does IE8 still query all four DNS servers even when we have a proxy? Why is there a lot of delay there?
Thanks!

Hi,
Generally, if you configure IE with an explicit proxy:
1.User types an address
2.The address is checked for string matches against the IE proxy exceptions list
a. If matching a bypassed entry, DNS is used to resolve the name, and the client connects directly to the target IP address on port 80 (assumed), then sends a request like:
GET /something.htm HTTP/1.1
Host: fulldomainame.example.com
b. If non matching, continue
3.The client connects to its configured proxy and sends a request of the form:
GET http://fulldomainname.example.com/something.htm HTTP/1.1
(this use of the FQDN in the URL is one way you can tell that a client thinks it's talking to a proxy instead of a real web server)
4.The proxy resolves the name, connects to the target site, etc, etc
So what’s your configuration of proxy?
Alex Zhao
TechNet Community Support

[solved]partially working network, problems with ssl and irc

Hi,
for a weird reason I can't access any websites with https anymore nor can i connect to any irc servers with irssi and connection attempts with ssh time out. The system is up2date and I am using kdemod as DE.
My rc.conf looks like this:
# /etc/rc.conf - Main Configuration for Arch Linux
# LOCALIZATION
# LOCALE: available languages can be listed with the 'locale -a' command
# HARDWARECLOCK: set to "UTC" or "localtime", any other value will result
# in the hardware clock being left untouched (useful for virtualization)
# TIMEZONE: timezones are found in /usr/share/zoneinfo
# KEYMAP: keymaps are found in /usr/share/kbd/keymaps
# CONSOLEFONT: found in /usr/share/kbd/consolefonts (only needed for non-US)
# CONSOLEMAP: found in /usr/share/kbd/consoletrans
# USECOLOR: use ANSI color sequences in startup messages
LOCALE="de_DE.utf8"
HARDWARECLOCK="localtime"
TIMEZONE="Europe/Berlin"
KEYMAP="de"
CONSOLEFONT=
CONSOLEMAP=
USECOLOR="yes"
# HARDWARE
# MOD_AUTOLOAD: Allow autoloading of modules at boot and when needed
# MOD_BLACKLIST: Prevent udev from loading these modules
# MODULES: Modules to load at boot-up. Prefix with a ! to blacklist.
# NOTE: Use of 'MOD_BLACKLIST' is deprecated. Please use ! in the MODULES array.
MOD_AUTOLOAD="yes"
#MOD_BLACKLIST=() #deprecated
MODULES=(!b44 !mii !ipw2200 !libipw !ac97_bus !snd-mixer-oss !snd-pcm-oss !snd-page-alloc !snd-pcm !snd-timer !snd !snd-ac97-codec !snd-intel8x0 !snd-intel8x0m !soundcore b44 mii ipw2200 libipw ac97_bus snd-mixer-oss snd-pcm-oss snd-page-alloc snd-pcm snd-timer snd snd-ac97-codec snd-intel8x0 snd-intel8x0m soundcore)
# Scan for LVM volume groups at startup, required if you use LVM
USELVM="no"
# NETWORKING
# HOSTNAME: Hostname of machine. Should also be put in /etc/hosts
HOSTNAME="horst-lp"
# Use 'ifconfig -a' or 'ls /sys/class/net/' to see all available interfaces.
# Interfaces to start at boot-up (in this order)
# Declare each interface then list in INTERFACES
# - prefix an entry in INTERFACES with a ! to disable it
# - no hyphens in your interface names - Bash doesn't like it
eth0="dhcp"
# Wireless: See network profiles below
#Static IP example
#eth0="dhcp"
eth0="dhcp"
INTERFACES=(!eth0 !eth1 !wlan0)
# Routes to start at boot-up (in this order)
# Declare each route then list in ROUTES
# - prefix an entry in ROUTES with a ! to disable it
gateway="default gw 192.168.0.1"
ROUTES=(!gateway)
# Enable these network profiles at boot-up. These are only useful
# if you happen to need multiple network configurations (ie, laptop users)
# - set to 'menu' to present a menu during boot-up (dialog package required)
# - prefix an entry with a ! to disable it
# Network profiles are found in /etc/network.d
# This now requires the netcfg package
#NETWORKS=(main)
# DAEMONS
# Daemons to start at boot-up (in this order)
# - prefix a daemon with a ! to disable it
# - prefix a daemon with a @ to start it up in the background
DAEMONS=(syslog-ng hal !network networkmanager avahi-daemon avahi-dnsconfd alsa cdemud kdm samba mpd lighttpd)
Earlier I had some problems with not resolving addresses, which I somehow got rid of. At the time I blamed my isp.
Perhaps something broke when I had a program running in wine to play with a car too and I had to switch the laptop off bc it didn't want to react anymore.
thx for reading
e: I don't know why, but it worked when I started Arch this morning.. while it didn't yesterday although everything worked correctly on my other PCs.
Last edited by dt (2009-11-07 09:02:46)

Hi,
for a weird reason I can't access any websites with https anymore nor can i connect to any irc servers with irssi and connection attempts with ssh time out. The system is up2date and I am using kdemod as DE.
My rc.conf looks like this:
# /etc/rc.conf - Main Configuration for Arch Linux
# LOCALIZATION
# LOCALE: available languages can be listed with the 'locale -a' command
# HARDWARECLOCK: set to "UTC" or "localtime", any other value will result
# in the hardware clock being left untouched (useful for virtualization)
# TIMEZONE: timezones are found in /usr/share/zoneinfo
# KEYMAP: keymaps are found in /usr/share/kbd/keymaps
# CONSOLEFONT: found in /usr/share/kbd/consolefonts (only needed for non-US)
# CONSOLEMAP: found in /usr/share/kbd/consoletrans
# USECOLOR: use ANSI color sequences in startup messages
LOCALE="de_DE.utf8"
HARDWARECLOCK="localtime"
TIMEZONE="Europe/Berlin"
KEYMAP="de"
CONSOLEFONT=
CONSOLEMAP=
USECOLOR="yes"
# HARDWARE
# MOD_AUTOLOAD: Allow autoloading of modules at boot and when needed
# MOD_BLACKLIST: Prevent udev from loading these modules
# MODULES: Modules to load at boot-up. Prefix with a ! to blacklist.
# NOTE: Use of 'MOD_BLACKLIST' is deprecated. Please use ! in the MODULES array.
MOD_AUTOLOAD="yes"
#MOD_BLACKLIST=() #deprecated
MODULES=(!b44 !mii !ipw2200 !libipw !ac97_bus !snd-mixer-oss !snd-pcm-oss !snd-page-alloc !snd-pcm !snd-timer !snd !snd-ac97-codec !snd-intel8x0 !snd-intel8x0m !soundcore b44 mii ipw2200 libipw ac97_bus snd-mixer-oss snd-pcm-oss snd-page-alloc snd-pcm snd-timer snd snd-ac97-codec snd-intel8x0 snd-intel8x0m soundcore)
# Scan for LVM volume groups at startup, required if you use LVM
USELVM="no"
# NETWORKING
# HOSTNAME: Hostname of machine. Should also be put in /etc/hosts
HOSTNAME="horst-lp"
# Use 'ifconfig -a' or 'ls /sys/class/net/' to see all available interfaces.
# Interfaces to start at boot-up (in this order)
# Declare each interface then list in INTERFACES
# - prefix an entry in INTERFACES with a ! to disable it
# - no hyphens in your interface names - Bash doesn't like it
eth0="dhcp"
# Wireless: See network profiles below
#Static IP example
#eth0="dhcp"
eth0="dhcp"
INTERFACES=(!eth0 !eth1 !wlan0)
# Routes to start at boot-up (in this order)
# Declare each route then list in ROUTES
# - prefix an entry in ROUTES with a ! to disable it
gateway="default gw 192.168.0.1"
ROUTES=(!gateway)
# Enable these network profiles at boot-up. These are only useful
# if you happen to need multiple network configurations (ie, laptop users)
# - set to 'menu' to present a menu during boot-up (dialog package required)
# - prefix an entry with a ! to disable it
# Network profiles are found in /etc/network.d
# This now requires the netcfg package
#NETWORKS=(main)
# DAEMONS
# Daemons to start at boot-up (in this order)
# - prefix a daemon with a ! to disable it
# - prefix a daemon with a @ to start it up in the background
DAEMONS=(syslog-ng hal !network networkmanager avahi-daemon avahi-dnsconfd alsa cdemud kdm samba mpd lighttpd)
Earlier I had some problems with not resolving addresses, which I somehow got rid of. At the time I blamed my isp.
Perhaps something broke when I had a program running in wine to play with a car too and I had to switch the laptop off bc it didn't want to react anymore.
thx for reading
e: I don't know why, but it worked when I started Arch this morning.. while it didn't yesterday although everything worked correctly on my other PCs.
Last edited by dt (2009-11-07 09:02:46)

Service PO with material

HI MM Gurus,
I have a requirement where i need to create the service PO with material. I want to know the full cycle for service procurement with material number??? what are the settings required for this? and what are the steps require to complete this cycle.
Also tell me the accounting entries for this.
Please advice me for the same.
Points will be awarded.

1) Instead of material number you create Service master record( AC03)(you create Service condition record for the service master record ML45)
2) Service PO with K and D (ME21N)(here you do not enter Material number instead you enter Short text and in item level in Service tab you enter the service recird number and you can also maintain limits for the service..in Limit tab
3) Service entry sheet (ML81N),it should be released and than saved
4) MIRO
FI document created during ML81N once it is released,saved and Mat Doc created.
Regards,
eswarmanu...
Edited by: eswarmanu on Nov 4, 2008 7:18 AM
Edited by: eswarmanu on Nov 4, 2008 7:20 AM

Configure CRS2008 to using AD and Kerberos with Java application servers.

Hi All,
I have configure CRS2008 to using AD and Kerberos with Java application servers. Domain Controller is installed on W2K3 Server. In addition, CRS2008 is installed on another W2k3 Server.
I have create service account in domain controller: CMSACC
I have create two user account: CRuser1 and CRuser2
I have create domain group: CRSGroup
After I had run the setspn in domain controller,I got the message at below:
Registered ServicePrincipalNames for CN=CMSACC, OU=TEST, DC=BD, DC=com:
    BOBJCentralMS/BDMGTSRV.BD.com
CMC Setting:
AD Administration Name: BD\administrator
Default AD Domain: BD.com
Add AD Group(Domain\Group): secWinAD:CN=CRSGroup,OU=TEST,D=BD,DC=com
Service principal name:BOBJCentralMS/CMSACCatBD.com
I have create a WINNT folder in root directory.Moreover and save bcsLognin.conf and Krb5.ini at here.
bscLogin.conf:
com.businessobjects.security.jgss.initiate {
com.sun.security.auth.module.Krb5LoginModule required;
krb5.ini:
[libdefaults]
default_realm = BD.com
dns_lookup_kdc = true
dns_lookup_realm = true
[realms]
forwardable = true
BD.com = {
default_domain = BD.com
kdc = BDMGTSRV.BD.com
I have tested the Kerberos,using kinit CMSACCatBD.com password, and got error message at below:
Exception: krb_error 41 Message stream modified (41) Message stream modified
KrbException: Message stream modified (41)
        at sun.security.krb5.KrbKdcRep.check(KrbKdcRep.java:53)
        at sun.security.krb5.KrbAsRep.<init>(KrbAsRep.java:96)
        at sun.security.krb5.KrbAsRep.getReply(KrbAsRep.java:486)
     at sun.security.krb5.KrbAsRep.getReply(KrbAsRep.java:444)
     at sun.security.krb5.internal.tools.Kinit.sendASRequest(Kinit.java:310)
     at sun.security.krb5.internal.tools.Kinit.<init>(Kinit.java:259)
     at sun.security.krb5.internal.tools.Kinit.main(Kinit.java:106)
My problem is failed to logon CMC and infoview and got error message at below:
Account Information Not Recognized: Active Directory Authentication failed to log you on. Please contact your system administrator to make sure you are a member of a valid mapped group and try again. If you are not a member of the default domain, enter your user name as UserNameatDNS_DomainName, and then try again.
Actually, I am sucessful to logon Business View manager with CRuser1. However, I fail to logon CMC and infoview and got the above error. Have you any suggestion to solve this problem?
Ken.

if you can logon with client tools then that should be an indication that the service account running the CMS IS working! Good news.
So the problem is likely with the java portion (krb5/bsclogin or java options)
If the files are in c:\winnt\ (if not copy them there) and perform c:\program files\business objects\javasdk\bin\kinit username
then enter and password/enter again
Probably get the same message. To note in your krb5.ini all domain info must be in CAPS (the .com appears to be in lower case)
kinit works with just the krb5.ini, java SDK and AD (removing BO config and the service account from the picture). Once that works if your java options are specified properly you should be able to login to CMC/infoview.
also 1 last point. Add udp_preference_limit = 1 to the krb5 lib defaults section
libdefaults
default_realm = BD.com
dns_lookup_kdc = true
dns_lookup_realm = true
udp_preference_limit = 1
Regards,
Tim

Setting mail with Cox (or other services with different servers for pop and smtp)

My Cox mail account uses different servers for pop and smtp (my personal ISP 1&1 does too).
The mail applet on my Blackberry Curve 8330 with Verizon does not allow to define different servers for pop and smtp, and further, for SSL smtp mail, the port is fixed at 995 and cannot be changed, while Cox (and 1&1) want to use 587 or something like that.
As a result, I can only receive mail with these services.
I also have yahoo mail, which works fine, so I can send mail with it and it is not a life-and-death situation, but I would like to be able to just reply to email sent to my Cox address.
I called Verizon and they said BlackBerry provides the mail access through their servers and the applet, so there is nothing they can do.
Is there a way to set it such that I can not only receive but also send mail through either of these services?
Thanks in advance,
Didier
PS: Other than that, the Curve on Verizon rocks!!! so much better down here than AT&T it's not even funny.

OK, thank you for the input.
The problem I have with this solution is like the one I have now using yahoo.
There are 2 problems:
1) mailing lists want the mail to come from the account that is subscribed, so if the cox account is subscribed, I can't contribute from the blackberry, and if the blackberry account is subscribed, I don't get my mail in Outlook. Neither is good for me.
2) people who send me mail to the Cox account and get replies from me from the blackberry continue responding to the account that can send from the blackberry (not Cox), and from that point on I do not have that mail on the computer.
The issue of having two copies is no big deal, I just delete the mail I do not need. I would rather have two than none.
Really, Blackberry should modify the email service so that they directly support mail systems like those of Cox and 1&1. I am sure there are others. They should also allow the use of another port for SSL than 995. I have not seen anyone using 995 for SSL.
Until recently, I had a BB provided by my employer, and we had a BES, and that worked really well. I would like to emulate as much of that functionality as possible without having to pay somebody another $10 or $20 a month just for the priviledge of having an account on a private BES server.
Anyway, thanks for the exchange and suggestions.
Didier

TFS and Build Server 2013 with CNAME

Hello Team
As we have TFS 2013 with Update 3 on windows server 2012 and another windows server 2012 machine have build server installed. It is working well with machine name and build is running properly.
Once i tried to change the machine with CNAME its not started and throwing error like below:
Team Foundation Build Configuration
Build Service endpoint cannot be configured with a host machine other than
MACHINENAME.
OK
I tried to disable loop-back, firewall rule already applied, DNS pointed to correct IP address, DNS Flush already done and also i tried to un-register and register to new one but getting same error. Unable to register with CNAME ?
BotheTFS 2013 and Build Server have version
TFS Build- 12.0.30723.0 (Tfs2013.Update3)
TFS Server- 12.0.30723.0 (Tfs2013.Update3)
Any help ... thanks in advance!!!
Thanks Ranveer Katiyar

Can someone assist me on this ? I am stuck and unable to configure CNAME to Build Server and getting error
Team Foundation Build Configuration
Build Service endpoint cannot be configured with a host machine other than MACHINENAME.
OK
Thanks Ranveer Katiyar

10.6.6 Server Combo Update Crashes LDAP and Kerberos Services

Just updated apple server from 10.6.4 to 10.6.6 with combo server overnight.
Everything was working fine under 10.6.4
All users can no longer authenticate to server via mail or ldap logins
LDAP and Kerberos Services stopped.
Will downgrade from an open directory master to standalone then back to master again and post status...

I think there is something with LDAP on 10.6.6
I was forced to make clean install in combo from 10.6.0 to 10.6.6 and today LDAP crashed.
It seems to be an issue on ldap ACL.
Message was edited by: Xalio

Services servers with CNAME and kerberos

Similar Messages

Maybe you are looking for