System Unable to Check-In

I have two new Solaris 10 6/06 systems here that are not checking in with the Update Connection.
Looking in /var/log/swupas/swupas.log I see this -
Swup Agent run: Monday, 25 September 2006 11:31:29 BST
** DEBUG ON **
Attempt to get exclusive lock: 1
We have the lock!
prepare to register with Transport
Error: unable to register with Transport
com.sun.cc.transport.client.TransportDownException: proxy communication failure
at com.sun.cc.transport.client.TransportAdapter.translateException(TransportAdapter.java:616)
at com.sun.cc.transport.client.TransportAdapter.register(TransportAdapter.java:523)
at com.sun.cc.transport.client.TransportAdapter.<init>(TransportAdapter.java:314)
at com.sun.swup.client.agent.SwupAgent.main(SwupAgent.java:337)
Swup Agent finish: Monday, 25 September 2006 11:33:59 BST
Running /usr/lib/cc-ccr/bin/ccr -k shows this -
22
cns.assetid
cns.ccr.keyGenPath
cns.clientid
cns.component.ccragent.status
cns.component.fwagent.status
cns.component.invagent.status
cns.component.swupagent.status
cns.httpproxy.auth
cns.httpproxy.ipaddr
cns.httpproxy.port
cns.regtoken
cns.security.password
cns.security.privatekey
cns.security.publickey
cns.service.platform.status
cns.service.swupPortalMgmt.status
cns.swup.autoAnalysis.enabled
cns.swup.checkinInterval
cns.swup.lastCheckin
cns.swup.patchbaseline
cns.swup.regRequired
cns.transport.serverurl
Now from what I have read cns.transport.serverurl needs to be set, and im guessing as we go through a http proxy server here that cns.httpproxy.ipaddr and cns.httpproxy.port should also be set.
I have tried using ccr -p cns.transport.serverurl -v https://cns-transport.sun.com but it doesnt seem to make any difference, certainly when I run ccr -k again nothing in the output has changed.
Help, how do I get my servers to check in?
Thanks Adam.

Hello,
Please can you check, which processes are running.
$ ps -ef | grep cc
If there is no cc-transport process, please can you try starting it and
then checking for any errors in the system log.
$ date
$ /etc/init.d/cc-transport start
$ sleep 30
$ grep 'CNS|cc-' /var/adm/messages
If you see errors relating CNS Transport SSL certificate problems
could you please check if patch 122231-01 "SunOS 5.10 Sun Connection
agents, transport certificate update" is installed.
$ showrev -p | grep 122231-01
If the patch is not installed, please install it and retry starting
the cc-transport process.
$ smpatch update -i 122231-01
Only if still unsucessful, please send the following information.
$ showrev -p | egrep -e '121453|121118|120335|121081|121563|122231|119788'
$ /usr/lib/cc-ccr/bin/ccr -g cns.assetid
$ /usr/lib/cc-cfw/platform/transport/bin/cctrunner -p
Regards,

Similar Messages

  • Errors with SharePoint Security Token Service: "The revocation function was unable to check revocation for the certificate"

    I'm getting these errors in the eventlog and ULS, "An operation failed because the following certificate has validation errors:\n\nSubject Name: CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US\nIssuer Name: CN=SharePoint Root
    Authority, OU=SharePoint, O=Microsoft, C=US\nThumbprint: <STS CERTIFICATE THUMBPRINT>\n\nErrors:\n\n RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate."
    The errors point to the SharePoint Security Token Service as the issue ("The revocation function was unable to check revocation for the certificate") reported back by the Topology service.  This is apparent when executing a search, accessing
    the managed metadata service, issuing SPSite commands in Powershell, or anything that needs to run through the "SharePoint Web Services" site.  I've looked at the certificate assigned to that site and everything appears to be in order. 
    It would seem to me to be either an incorrect endpoint configuration (internally cached perhaps?) or related to security access for the configuration database (in order to validate the certificate root).
    What I’ve tried so far:
    I’ve been all over the certificate settings, both in the server store, and within SharePoint Token Service config.  Both appear to be configured correctly such that the root CAs can be validated.
    Re-entered the passwords for the application pool domain accounts to eliminate these as a potential cause.  I’ve also verified the service accounts reporting the error, do have access to the configuration database.
    Re-provisioned the STS service to see if that might clear out any cached issues and validated everything else according to this
    MS Tech note.
    So far nothing has worked.  Is there anything else I could be looking at that I've missed? (Full eventlog detail below)
    Log Name:      Application
    Source:        Microsoft-SharePoint Products-SharePoint Foundation
    Date:          2/20/2015 11:19:41 AM
    Event ID:      8311
    Task Category: Topology
    Level:         Error
    Keywords:      
    User:          <SP SERVICE ACCOUNT>
    Computer:      <SHAREPOINTSERVER>
    Description:
    An operation failed because the following certificate has validation errors:\n\nSubject Name: CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US\nIssuer Name: CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US\nThumbprint: <STS
    CERT THUMBPRINT>\n\nErrors:\n\n RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-SharePoint Products-SharePoint Foundation" Guid="{6FB7E0CD-52E7-47DD-997A-241563931FC2}" />
        <EventID>8311</EventID>
        <Version>14</Version>
        <Level>2</Level>
        <Task>13</Task>
        <Opcode>0</Opcode>
        <Keywords>0x4000000000000000</Keywords>
        <TimeCreated SystemTime="2015-02-20T17:19:41.213852500Z" />
        <EventRecordID>1611121</EventRecordID>
        <Correlation />
        <Execution ProcessID="10212" ThreadID="10328" />
        <Channel>Application</Channel>
        <Computer><SHAREPOINTSERVER></Computer>
        <Security UserID="<SP SERVICE ACCOUNT>" />
      </System>
      <EventData>
        <Data Name="string0">CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US</Data>
        <Data Name="string1">CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US</Data>
        <Data Name="string2"><STS CERT THUMBPRINT></Data>
        <Data Name="string3">RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
    </Data>
      </EventData>
    </Event>

    Hi Darren,
    This problem seems to occur when an administrator deletes the local trust relationship of the farm from the Security section of the Central Administration website
    In order to resolve this problem, the local trust relationship has to be created. This can be done by running the following PowerShell commands
    $rootCert = (Get-SPCertificateAuthority).RootCertificate
    New-SPTrustedRootAuthority -Name "localNew" -Certificate $rootCert
    After running the above commands, perform an IISReset on all servers in the farm.
    More information:
    http://support.microsoft.com/kb/2545744
    Best Regards,
    Wendy
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Wendy Li
    TechNet Community Support

  • Unable to check flight availability in DEMO 3.0

    Anybody,
    I finished configuring the demo but when I execute I get the following error:
    Unable to check flight availability.  
    Error Type:  XI system error 
    Error Details:  An error occurred when determining the business system (LD_ERROR) 
    Looking at the logs I found the following exception (actually more than one)
    Date : 12/01/2004
    Time : 18:04:35:593
    Category :
    Message ID : 00111174DBE8006000000018000010380003EA3440BF0ED4
    Severity : Error
    Location : com.sap.engine.services.rfcengine.RFCJCOServer.handleRequestInternal()
    Source Name : com.sap.engine.services.rfcengine
    Thread : Thread[JCO.ServerThread-16,10,SAPEngine_System_Thread[impl:5]_Group]
    Message : com.sap.mw.jco.JCO$AbapException: (126) SLD_CLIENT_EXCEPTION: AbapSLDRequestHandler.getObjectServer(): User credentials are invalid or user is denied access
    Datasource : 11862050:C:\usr\sap\ABC\DVEBMGS01\j2ee\cluster\server0\log\defaultTrace.trc
    Application :
    Argument Objs :
    Arguments :
    Dsr Component : ABC
    Dsr Transaction : C2AB51A566A64BC2B12F379616CF1EC6
    Dsr User : XISUPER                        
    Indent : 0
    Level : 0
    Message Code :
    Message Type : 0
    Relatives :
    Resource Bundlename :
    Session :
    Source : com.sap.engine.services.rfcengine
    ThreadObject : Thread[JCO.ServerThread-16,10,SAPEngine_System_Thread[impl:5]_Group]
    Transaction :
    User :
    It appears I don't have permission to execute load the bean and execute it.  Can anyone tell me what role or authorizations I need to assign to my XISUPER user in order to do this...
    Thanks
    Diego

    Alessandro, I'm experiencing almost the same kind of error as described before. However, in my case trx SLDCHECK (executed from the XI server and from the SAP application system) also generates errors. The error Im getting is as follows:
    Testing SLD API
    An exception has ocurred
    Description: Exception in SLD Client: AbapaSLDRequestHandler.ping() server connection *** failed ***
    Summary: Connection to SLD does not work
    => Check SLD function and configurations
    I have to say that the SLD home page from Integration Builder works correctly and when SLDCHECK is executed the browser opens the correct url and loads the page.
    I have followed all congiguration steps (maintain SLD details with trx SLDAPICUST, maintain HTTP and TCP/IP destinations, activate XI services, etc..) mentioned in the SAP documentation, however the problem persists.
    Thanks in adavnce for any feedback!
    Thanks, Roberto
    Message was edited by: Roberto Viana

  • N8, Unable to check in or access check in settings...

    Hi, Have been unable to check in via ovi maps. I can not even access the check in settings as it just flashes a box with "system error!" and OK. Have tried factory reset, installed social again and nothing seems to help. Maps does not show in the installed apps so can't delete and reinstall? And if I try just by the icon in the menu it states uninstallation failed
    Device version 011.012
    ovi maps Version v3.06 10wk46b01 map version 0.2.41.123.
    Solved!
    Go to Solution.

    when ya do finally check in,lots of the time,the link it produces just looks like a big mess and doent actually say where youve checked in.when i get home and look on facebook,i delete my check in with embarrassment.

  • Vendors Unable to Check-In Contract Documents (e-Sourcing 5.1 Patch 06)

    Vendors Unable to Check-In Contract Documents (e-Sourcing 5.1 Patch 06)
    When moving to patch 06 for e-Sourcing we found that Vendors were no longer able to check-in contract documents, even though they checked them out successfully.
    On Patch 05 this was not an issue with the exact same configuration.
    Has anyone had any encounters with this? 
    - Is there a permission that needs to be set to something specific?   I tried create/read/edit but that doesn't seem to work.
    Thanks.

    When working with a Master Agreement or Sub Agreement within e-Sourcing you can attach Contract Documents (Word files) that you and the vendor can collaboratively work on. 
    Just like a source control system you can check out a document to make edits to ensure that no one else makes edits at the same time.  You then must check back in the document to remove the 'lock'. 
    On patch level 06 we found that although Vendors could perform the Check-out procedure (On a Contract Document click Actions -> Check-Out) they are not permitted to then check-in the document (Actions -> Check-In).
    Buyside users do not experience any issues with check-out/in.
    Hope that helps clear up the issue.
    Thanks,
    Greg

  • Unable to check available dowloads. The network connection was lost.

    I get this all the time in iTunes 12.1: "unable to check available dowloads. The network connection was lost."
    Sometimes it does what it's supposed to do anyway, sometimes it doesn't. I also get the: "We could nor complete your iTunes Store request. The network connection was lost". If I sign out and back in that goes way, but item #1 is still showing up all the time. Even when nothing is apparently happening?
    Mac Mini (late 2012) System OS X (10.10) iTunes 12.1 (16GB RAM)

    Hi,
    You may like to read this thread OSX Yosemite Wifi issues
    Jim

  • Unable to check certificate with root CA

    Dear All, I have an applet need to talk to a FoxPro table on the local system. Created the jar file, signed and verified, try to run in the browser (IE5.5, Win2K, JDK 1.3.1) gives me the Unable to check certificate with root CA message. What it means? Can you help me out?
    Thanks

    Solution found! export and install the cert. Sorry guys!

  • Unable to check large model into SQL Server repository via Proxy

    I have a model that has over 1000 changes (probably) and I am unable to check the model into a repository on SQL Server 2008R2.  We have a proxy service running, and in general the check-in process is much better via the proxy than direct connect.  But for a model with "a lot" of changes, the check-in process never completes.  I have let it run overnight and it still does not complete.  The SQL Server DBA also reports a large "blocking" query running from the PROXY service to the database server when this process seems to "hang".
    Has anyone else encountered this behavior?  I have had a support ticket open for over a year on this one, with no solution, so I was curious if anyone else found a way to resolve it. (other than avoid "making a lot of changes".

    Hi,
    First if you want good performance you must use the Proxy. When you use the Proxy PowerDesigner sending large packet of data to the Proxy under a proprietary format (more efficient) and the Proxy run long transactions - many atomic SQL transactions - to the DBMS (SQL Server).
    In "PowerDesigner World" the primary use of a direct connection to the DBMS is to create the repository.
    For adequate performance the Proxy and the repository (RDBMS) must be installed on the same server. (Also the PD Portal). Thus the thousands of transactions are executed in memory and not over the network (latency problem)
    Because you use the SQL Server DBMS you must set ''max server memory'' variable to an appropriate value, by example for 40 users you must set to 8 MB minimum.
    You must also activate these two settings - See the PowerDesigner installation Guide
    • ALLOW_SNAPSHOT_ISOLATION
    • READ_COMMITTED_SNAPSHOT
    Physical Server memory usage
    a) OS Operating System has need minimum 2 Gb
    b) SQL Server runtime 1 Gb
    c) SQL Server memory space for PowerAMC 8Gb
    d) Proxy memory 6-8Gb
    e) I/O memory space 1 Gb minimum
    Total 20Gb
    Also : Under 'C:\Program Files\Sybase\PowerDesigner 16\ you have "readme.html" file. In this document SAP give information to optimize the referential. Aka modify attribute length TDAT of table PMTEXT
    Good luck
    Note : SAP know well this problem. SAP would have reduced the number of atomic transactions to the DBMS. Programming techniques exist on this subject. To see.

  • XI-DemoExample: Unable to check flight availability

    Hello,
    I'm trying the demo example.
    After configuration of the proxy to proxy example (Clnt105 - Clnt106)
    - I got this error text on the bsp-page:
    Unable to check flight availability.  
    Error Type:  XI system error 
    Error Details:  In der HTTP-Antwort liegt der Status-Code 401 mit der Beschreibung Unauthorized vor 
    (Translation:   http-response with status code 401 description Unauthorized   )
    Thanx

    Hi,
    can you take a look at my previous response:
    Re: Http 401 error
    (it refers to a few steps from Configuration guide:
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/uuid/ac6de690-0201-0010-54ac-8923089dcc97
    Regards,
    michal

  • Unable to check for available downloads. The network connection timed out.

    I downloaded iTunes 10.1.2 last week, and attempted to upgrade some music to iTunes Plus. I'm showing 35 items in my download queue, but when I attempt to download I get a message "Unable to check for available downloads. Network connection timed out."
    I e-mailed Apple Tech Support multiple times, and received their standard list of links for things to try. So far I have reinstalled iTunes, turned off my Norton Firewall, checked the program rules settings, flushed the dns cache, and unchecked the "allow simultaneous downloads" box. Still no luck.
    Apple's last e-mail requested I send them my account info so they could reset my password, and check my system. I'm still waiting for that to happen.
    I'd appreciate any user suggestions for this problem.

    Fundamentally it is an apple itunes server issue - if you have a lot of downloads the "check for downloads" request can take longer than the default windows internet connection timeout setting - which is 30 seconds on more recent versions of windows.
    You can work around it though - without requiring apple to "segment" your download list, by adding a windows registry setting.
    Apple re-enabled my downloads after I was burgled and then I was stuck - my "check for downloads" was always timing out - and the support guy had no clue - so I went digging, and found a a microsoft article here http://support.microsoft.com/kb/181050 which tells you how to change change that default timout value by adding a registry setting. Besides adding the ReceiveTimeout setting detailed on that page - I also changed the KeepAliveTimeout - just in case.
    HKEYCURRENTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ReceiveTimeout
    which I set to 180000 milliseconds (3 mins)
    HKEYCURRENTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\KeepAliveTimeout
    which I set to 181000 milliseconds (3 mins and 1 second)
    Use regedit to make the change - both settings are DWORDS with decimal values. You'll need to restart your PC to apply the change.
    After the change and restart and one initial failed attempt the request for downloads worked - when the apple itunes server responded after 2 minutes !!

  • Configurator error unable to check iOS

    Using Apple Configurator 1.6 on an iMac running OS 10.9.5. Have 6 iPads connected via USB hub. I am running in unsupervised mode and am simply trying to update iOS to latest version. iPads are recognized but on all but one I get an error stating "Unable to check iOS." I checked the option to erase the device before installing, but the only one that successfully completed is the one I manually erased all content and settings prior to connecting to Configurator. Is there a way to avoid having to reset all the iPads first? I have already removed the passcode lock and the iPads do not have Find My iPad enabled.

    It's been a while, but I think I had to finally completely reset all of them to factory settings, and run them through the entire system again.
    It could be the cart (and configurator) having a problem applying settings to multiple OS installs. I'd put my money on this being the issue.

  • Subordinate certification authority can't start ADCS service: The revocation function was unable to check revocation because the revocation server was offline. 0x80092013 (-2146885613 CRYPT_E_REVOCATION_OFFLINE).

    Hi
    I have 1 rootCA and 1 subordinate CA. I removed one of the locations to publish CRL and after that the ADCS service can't start. I get the warning first:
    Revocation status for a certificate in the chain for CA certificate 2 for siu-SRVDC01-CA could not be verified because a server is currently unavailable.  The revocation function was unable to check revocation because the revocation server was offline.
    0x80092013 (-2146885613 CRYPT_E_REVOCATION_OFFLINE).
    And then the error:
    Active Directory Certificate Services did not start: Could not load or verify the current CA certificate.  siu-SRVDC01-CA The revocation function was unable to check revocation because the revocation server was offline. 0x80092013 (-2146885613 CRYPT_E_REVOCATION_OFFLINE).
    I've read many threads with similar problems but I can't find the solution. The CDP is online. I've run "certutil -url cert.cer" to verify the CDP and AIA and everything is fine. But the service is still not starting.
    See this command too:
    C:\>certutil -verify -urlfetch subCADC01.cer
    Issuer:
        CN=siu-SRVDC02-CA
        DC=siu
        DC=domain
      Name Hash(sha1): 152a7c43f186d9179c1c3256d3a1a0af4a9df892
      Name Hash(md5): b409e417a38bbe04b5800512bd94efac
    Subject:
        CN=siu-SRVDC01-CA
        DC=siu
        DC=domain
      Name Hash(sha1): 5ee421b84c3b18ff134cf2e42226853d78d3409b
      Name Hash(md5): e1a454692361733e45dad374dc14cae3
    Cert Serial Number: 1e0000022c707c76c0a27b315700000000022c
    dwFlags = CA_VERIFY_FLAGS_CONSOLE_TRACE (0x20000000)
    dwFlags = CA_VERIFY_FLAGS_DUMP_CHAIN (0x40000000)
    ChainFlags = CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT (0x40000000)
    HCCE_LOCAL_MACHINE
    CERT_CHAIN_POLICY_BASE
    -------- CERT_CHAIN_CONTEXT --------
    ChainContext.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
    ChainContext.dwRevocationFreshnessTime: 1 Hours, 2 Minutes, 16 Seconds
    SimpleChain.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
    SimpleChain.dwRevocationFreshnessTime: 1 Hours, 2 Minutes, 16 Seconds
    CertContext[0][0]: dwInfoStatus=102 dwErrorStatus=0
      Issuer: CN=siu-SRVDC02-CA, DC=siu, DC=domain
      NotBefore: 19.03.2015 11:18
      NotAfter: 19.03.2017 11:28
      Subject: CN=siu-SRVDC01-CA, DC=siu, DC=domain
      Serial: 1e0000022c707c76c0a27b315700000000022c
      Template: SubCA
      a1a8a95464c5b586da6e9b304142d59fc5a22ae0
      Element.dwInfoStatus = CERT_TRUST_HAS_KEY_MATCH_ISSUER (0x2)
      Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
      ----------------  Certificate AIA  ----------------
      Verified "Certificate (0)" Time: 0
        [0.0] http://wwwca/CertEnroll/srvdc02.siu.domain_siu-SRVDC02-CA.crt
      ----------------  Certificate CDP  ----------------
      Verified "Base CRL (26)" Time: 0
        [0.0] http://sharepoint.siu.no:8088/siu-SRVDC02-CA.crl
      ----------------  Base CRL CDP  ----------------
      No URLs "None" Time: 0
      ----------------  Certificate OCSP  ----------------
      No URLs "None" Time: 0
        CRL 26:
        Issuer: CN=siu-SRVDC02-CA, DC=siu, DC=domain
        ThisUpdate: 19.03.2015 11:10
        NextUpdate: 15.09.2015 23:30
        e2ee543a68214f9b99dda2e9f58b1ddfc34429d1
    CertContext[0][1]: dwInfoStatus=10c dwErrorStatus=0
      Issuer: CN=siu-SRVDC02-CA, DC=siu, DC=domain
      NotBefore: 23.09.2011 13:00
      NotAfter: 23.09.2021 13:10
      Subject: CN=siu-SRVDC02-CA, DC=siu, DC=domain
      Serial: 60fc459ebdefa5b646a081b0c21c259d
      4ea8bb95b0038c69a83c939e8a54f892cd0b5056
      Element.dwInfoStatus = CERT_TRUST_HAS_NAME_MATCH_ISSUER (0x4)
      Element.dwInfoStatus = CERT_TRUST_IS_SELF_SIGNED (0x8)
      Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
      ----------------  Certificate AIA  ----------------
      No URLs "None" Time: 0
      ----------------  Certificate CDP  ----------------
      No URLs "None" Time: 0
      ----------------  Certificate OCSP  ----------------
      No URLs "None" Time: 0
    Exclude leaf cert:
      691f7e42f5c4a86d03b7225bf7303369ef6dcc7e
    Full chain:
      17e5b9477a1736c33dc0ff245e7b06de5b958c4c
    Verified Issuance Policies: None
    Verified Application Policies: All
    Cert is a CA certificate
    Leaf certificate revocation check passed
    CertUtil: -verify command completed successfully.
    Any clue?

    It looks like it is trying to get the CRL using LDAP. It is quite strange since no ldap entry is on the subordinate CA,
    only an HTTP address:
              <CertificateRevocationList location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?certificateRevocationList?base?objectClass=cRLDistributionPoint"
    fileRef="DEEB557897A9FEA217DF83D95BF24CA54051B1CF.crl" issuerName="siu-SRVDC02-CA" />
                <CertificateRevocationList deltaCRL="true" location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?deltaRevocationList?base?objectClass=cRLDistributionPoint" 
    I have checked that object using adsi Edit and the permissions seem ok. Also there is a value on both attributes: certificateRevocationList and deltaRevocationList.
    This problem happened after I removed the LDAP entry for the "CRL Distribution point" from the sub CA properties. Should I add back the LDAP entry?
    Log Name:      Microsoft-Windows-CAPI2/Operational
    Source:        Microsoft-Windows-CAPI2
    Date:          19.03.2015 14:42:07
    Event ID:      11
    Task Category: Build Chain
    Level:         Error
    Keywords:      Path Discovery,Path Validation
    User:          SYSTEM
    Computer:      srvdc01.siu.domain
    Description:
    For more details for this event, please refer to the "Details" section
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" />
        <EventID>11</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>11</Task>
        <Opcode>2</Opcode>
        <Keywords>0x4000000000000003</Keywords>
        <TimeCreated SystemTime="2015-03-19T13:42:07.481533500Z" />
        <EventRecordID>131</EventRecordID>
        <Correlation />
        <Execution ProcessID="6288" ThreadID="5472" />
        <Channel>Microsoft-Windows-CAPI2/Operational</Channel>
        <Computer>srvdc01.siu.domain</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <UserData>
        <CertGetCertificateChain>
          <Certificate fileRef="E02AA2C59FD54241309B6EDA86B5C56454A9A8A1.cer" subjectName="siu-SRVDC01-CA" />
          <ExtendedKeyUsage />
          <Flags value="40000000" CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT="true" />
          <ChainEngineInfo context="machine" />
          <CertificateChain chainRef="{60B61582-1C3C-4B58-AE8C-70278ADEE402}" revocationFreshnessTime="P2DT21H13M20S">
            <TrustStatus>
              <ErrorStatus value="1000040" CERT_TRUST_REVOCATION_STATUS_UNKNOWN="true" CERT_TRUST_IS_OFFLINE_REVOCATION="true" />
              <InfoStatus value="100" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
            </TrustStatus>
            <ChainElement>
              <Certificate fileRef="E02AA2C59FD54241309B6EDA86B5C56454A9A8A1.cer" subjectName="siu-SRVDC01-CA" />
              <SignatureAlgorithm oid="1.2.840.113549.1.1.5" hashName="SHA1" publicKeyName="RSA" />
              <PublicKeyAlgorithm oid="1.2.840.113549.1.1.1" publicKeyName="RSA" publicKeyLength="2048" />
              <TrustStatus>
                <ErrorStatus value="1000040" CERT_TRUST_REVOCATION_STATUS_UNKNOWN="true" CERT_TRUST_IS_OFFLINE_REVOCATION="true" />
                <InfoStatus value="102" CERT_TRUST_HAS_KEY_MATCH_ISSUER="true" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
              </TrustStatus>
              <ApplicationUsage any="true" />
              <IssuanceUsage />
              <RevocationInfo freshnessTime="P2DT21H13M20S">
                <RevocationResult value="80092013">The revocation function was unable to check revocation because the revocation server was offline.</RevocationResult>
                <StrongSignProperties signHash="RSA/SHA1" issuerPublicKeyLength="2048" />
                <DeltaStrongSignProperties signHash="RSA/SHA1" issuerPublicKeyLength="2048" />
                <CertificateRevocationList location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?certificateRevocationList?base?objectClass=cRLDistributionPoint"
    fileRef="DEEB557897A9FEA217DF83D95BF24CA54051B1CF.crl" issuerName="siu-SRVDC02-CA" />
                <CertificateRevocationList deltaCRL="true" location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?deltaRevocationList?base?objectClass=cRLDistributionPoint"
    fileRef="58A2CDBC7A238DDD76EEFEDE354A04596F5AED71.crl" issuerName="siu-SRVDC02-CA" />
              </RevocationInfo>
            </ChainElement>
            <ChainElement>
              <Certificate fileRef="56500BCD92F8548A9E933CA8698C03B095BBA84E.cer" subjectName="siu-SRVDC02-CA" />
              <SignatureAlgorithm oid="1.2.840.113549.1.1.5" hashName="SHA1" publicKeyName="RSA" />
              <PublicKeyAlgorithm oid="1.2.840.113549.1.1.1" publicKeyName="RSA" publicKeyLength="2048" />
              <TrustStatus>
                <ErrorStatus value="0" />
                <InfoStatus value="10C" CERT_TRUST_HAS_NAME_MATCH_ISSUER="true" CERT_TRUST_IS_SELF_SIGNED="true" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
              </TrustStatus>
              <ApplicationUsage any="true" />
              <IssuanceUsage any="true" />
            </ChainElement>
          </CertificateChain>
          <EventAuxInfo ProcessName="certsrv.exe" />
          <CorrelationAuxInfo TaskId="{54E4FCD3-E70A-4024-BB81-6A053EAACE21}" SeqNumber="9" />
          <Result value="80092013">The revocation function was unable to check revocation because the revocation server was offline.</Result>
        </CertGetCertificateChain>
      </UserData>
    </Event>

  • Error at install NSP - FSL-01001  Unable to check existence of account

    Hi all, 
    I need very urgent help. 
    I installed the NSP system one time and uninstalled it again.
    Now I tried to reinstall it again and allways get the error FSL-01001  Unable to check existence of account localhostSAP_LocalAdmin. Any hints or ideas.
    It is a local installation, all admin rights are available. Same environment like at the first installation, which was OK. Also the change of the system name did not help.
    Any hints? 
    Here ist the logfile:
    Handling account  
    TRACE      syxxsyshlp.cpp:75
               syslib::traceOSError(const iastring &, int, DWORD, const iastring &)  
    System call failed. Error 2453 (Domänencontroller für diese Domäne konnte nicht gefunden werden. 
    ) in execution of system call 'NetGetDCName' with parameter (NULL, localhost), line (1075) in file (synxcaccmg.cpp). 
    TRACE      synxcaccmg.cpp:766
               CSyADsPath::fromString(localhostSAP_LocalAdmin)
    Account localhost/SAP_LocalAdmin has ADS path 'WinNT://localhost/SAP_LocalAdmin' 
    INFO[E]    2005-11-19 14:07:50 synxcgroup.cpp:684
               CSyGroupImpl::isExistingOnOS()
    Unable to check existence of account localhostSAP_LocalAdmin. Verbindung wurde nicht hergestellt, weil ein identischer Name bereits im Netzwerk vorhanden ist. Wählen Sie "System" in der Systemsteuerung, um den Computernamen zu ändern, und versuchen Sie es erneut. 
    TRACE      iaxxejsexp.cpp:208
               EJS_Installer::writeTraceToLogBook()
    AccountMgt.createGroup(localhostSAP_LocalAdmin, ) 
    TRACE      syxxsyshlp.cpp:75
               syslib::traceOSError(const iastring &, int, DWORD, const iastring &)  
    System call failed. Error 2453 (Domänencontroller für diese Domäne konnte nicht gefunden werden. 
    ) in execution of system call 'NetGetDCName' with parameter (NULL, localhost), line (1075) in file (synxcaccmg.cpp). 
    TRACE      synxcaccmg.cpp:766
               CSyADsPath::fromString(localhostSAP_LocalAdmin)
    Account localhost/SAP_LocalAdmin has ADS path 'WinNT://localhost/SAP_LocalAdmin' 
    ERROR      2005-11-19 14:07:55 synxcgroup.cpp:684
               CSyGroupImpl::isExistingOnOS()
    FSL-01001  Unable to check existence of account localhostSAP_LocalAdmin. Verbindung wurde nicht hergestellt, weil ein identischer Name bereits im Netzwerk vorhanden ist. Wählen Sie "System" in der Systemsteuerung, um den Computernamen zu ändern, und versuchen Sie es erneut. 
    TRACE      iaxxejsbas.hpp:270
               EJS_Base::dispatchFunctionCall()
    JS Callback has thrown std::ESyException: ESAPinstException: error text undefined 
    TRACE      iaxxcwalker.cpp:301
               CDomWalker::processStep()  
    An error occurred while processing service SAP NetWeaver '04 Support Release 1> ABAP System> MaxDB> Non-Unicode> Central Instance Installation. You may now
    press the 'View Log' button to get more information about the error.
    stop the task and continue with it later.
    reset your input for the current task. In this case, SAPinst will permanently remove all installation files from the installation directory. This gives you the opportunity to restart from scratch.
    Log files are written to C:Programmesapinst_instdirNW04SR1WEBAS_ABAP_ADA_NUCCI.
    TRACE      iaxxgenimp.cpp:845
               showDialog()
    waiting for an answer from gui 
    TRACE      iaxxcnclhd.cpp:92
               doHandleDoc()
    ACTION_STOP requested 
    WARNING    2005-11-19 14:07:57 sapinst.cpp:1302
               CSapInst::cancel()
    Installation canceled by user request.

    Hi,
    I got same problem. I tried all above replies, still I got same error.
    Error
    FSL-01001   unable to check existence of account saptranshost\SAP_localAdmin. Access is denied
    ERROR 2020-04-28 09:08:56
    MOS-01131  Unable to create account ACCOUNTNAME=saptranshost\SAP_LocalAdmin ACCOUNTTYPE=GROUP DESCRIPTION=SAP Local Administration Group MEMBERSHIPSEPARATOR=, OPMODE=CREATE . SOLUTION: Check whether you have permissions to create accounts.
    I logged in as local Administrator with Administration permissions. This user created by OS while installation.
    Urgent. Thanks in advance.
    Regards,
    Krishna

  • Feild name : null. unknown error / Unable to check..... Store is temp...

    Ok I bought a movie a few days ago and couldn't download it, System told me to try later. Ok no biggy. I log on the next morning and try again to get the message Unable to check purchases Itunes store is temporarily unavailable. Its been almost a week same message but the store works fine I have bought 2 albums and they downloaded fine. I get the bill for the movie today try to use the "report problem" link and im told Feild name: null. unknown error. Same thing when i try to log into view my account.
    I call apple support to be told that all support for the store is online only. Here is where i get a bit mad. If your online support wont let you login how can you get support?
    I have restarted, turned off and back one, deleted itunes and reinstalled. I've deleted the keychain and had it rebuilt. For a product thats advertised to "just work" it isn't working as intended.
    < Edited by Host for language >

    Hey, I feel your pain...I've been going through this all evening long...I keep resetting my password and then 2 minutes later it doesn't recognize my password and I get the same weird message that you get....Ive sent a message to their "support" lets see how quick they get back to me.....
    If anyone has gotten a reply from Apple letting us know the problem ,please let us know.

  • Unable to check hostname

    I am running an JAVA Applet which uses JDBC to connect to Oracle. When I open the page which has the applet I get the following JAVA error "com.ms.security.SecurityExceptionEx[oracle/net/nt/TcpNTAdapter.connect]: Unable to check hostname "server_bob.domain_d4". I'm not sure what is going on but I just changed to a new domain server. This was working fine prior to the conversion. I set my new server up just like the old one. Any ideas?

    Did you set the security settings in you applet?
    As a test try this:
    try
    if(Class.forName("com.ms.security.PolicyEngine") != null)
    PolicyEngine.assertPermission(PermissionID.SYSTEM);
    catch(Throwable t)
    // do something
    This should give your app fully access to everything (which is NOT a good idea for anything running in the real world) but it should at least allow you to see if you can connect. If you do then you'll need to hone down the PermissionID to the proper setting for your applet. (Of course this implies you have the MS classes in the classpath).
    You should also check the security.policy for you java installation to see if it is even allowed.
    null

Maybe you are looking for