VSC 6.0 and storage system discovery; domain credentials

Hello comrades, We're running vCenter server 5.5 with VSC 6.0, and are attempting to discover/manage filers running cDOT 8.2.3 with a domain service account. If we attempt to discover these filers using a local admin credential, we can drill in just fine and manage the filers. If we try to use a service account that lives on the domain, we get the message Insufficient Privileges. I've confirmed that the domain service account has the same roles and privileges as the local admin account (insofar as possible; can't put service-processor or console on a domain account). The password on this domain service account recently changed ... do we need to re-register this service account with VSC? Is there something else I'm not thinking of? Thanks!

Hi, the SVMs responsible for NFS datastores have 1 LIF.The checkbox "Enable Management Access" is checked. It`s the same for both Datacenters/NetApps. And btw. I added both NetApps with the IP of their cluster_mgmt interface.As written before the Storage SVMs are in a VLAN that only the ESX hosts can see. vCenter can only access them by their cluster_mgmt interface IPs.

Similar Messages

Oracle Databases and Storage Systems like HP EVA

Hi everybody,
are there generel advantages or disadvantages using such storage systems?
I would be happy if somebody could talk about his experience using such systems.
Is there better/less performance with Oracle Databases? Better/less Security for my Data instead of using a local raid 5/1+0 for example? Or anything else I should now before using such a storage system.
What type of storage are you using? What type of disks would be the best (scsi/fata) ?
Please talk with me a little bit about your experience with storage systems and Oracle Databases ;-)
Thank you
scratch

Abhi
Greate to meet another DBA in forum.The big problem we will face is SQL Tune.
Nothing much Diffnt supporting SAP.SAP PRovided some ready made tools to monitor and to solve.Reg tuning still we can follow same methoda but with approval from SAP or by ref SAP notes.Which u can find at service market place.
You can find some PDfs in sap market place and sdn.Which are ex'ly for DBas.
Reg Growth rate you can have a look on sap transactions and there are some notes also.I dont think there is specific Book or Doc which will say Dos and donts.
Performance we used to follow same methoda as a Dbas with ref of sap notes and support for any side effects.
let me know if are in need of any specific info
Regards
Vinod

Stms include system into domain error

dear all
We are created Domain controller (DEV ) and include system QAS in domain controller both have IP XX.XX.120.XX its work fine now we add PRD system into Domain controller ,PRD IP is XX.XX.7.XX
But when I approve and distributed system from Domain controller it give error
RFC system error in system/destination
TMSADM PRD.DOMAIN_DEV
connection to partner 'pearl:sapgw00' broken /
CPIC-CALL: 'ThSAPCMRCV' : cmRc=20 thRc=223#CPIC prog
regards
Shahid

looks like the DEV, QAS and PRD are on different subnet. Have you requested your network team to open the required ports between these systems?
Can you please perform below command level test from prod to dev
telnet <dev server Ip> <port>
where you port for your instance number and gateway ports.

Sun 7210 Storage System - SFTP and Active Directory

Good Afternoon
I have recently acquired a Sun 7210 Storage System which I have joined to my Microsoft Windows Active Directory domain. I have also specified the required LDAP Directory Service details under the Configuration tab. I am fairly sure these are correct as I can add a Directory user to the Users part of the device.
What I am having problems with is having my Windows A/D users connect to their shares via either HTTPS or SFTP. They are able to use the shares fine with CIFS and/or NFS.
The only user that can connect with SFTP and HTTPS it the local "root" user on the appliance.
Do people know if Directory users are able to use SFTP and HTTPS to access shares?
My current O/S on the 7210 is 2009.04.10.1.1,1-1.9.
Thanks in advance for any advice/help.
regards
Stephen Meatheringham
College of Asia & the Pacific
Australian National University
E: [email protected]

Stephen,
I ran into this same issue yesterday with SFTP. Unfortunately the answer is that the storage system does not authenticate to AD for local logins (for which FTP, SFTP, HTTP qualify). I placed a support call yesterday to Sun on this matter and was given this information as well as the fact that there are no current plans to do so.
You have taken the functionality one step further by "tricking" the system into using AD as LDAP. I'm not sure it's truly compatible, but that was my next step as well. I was also going to experiment with creative id maps to see if I could make it work. Unfortunately, I've found that if you take the system too far from it's designed use, strange things can happen. I'm not sure that is a chance I want to take with home directories or other "secure" information.
Let me know how you fare and I'll do likewise.
Eric

What are the best storage systems to archive inactive (but still used) apps and files?

What are the best storage systems to archive inactive (but still used) apps and files of all types? I already have a Time Casule which I back up on and I'm needing to create more space in my flash drive in my Mac Pro, so I need another external storage system I can use to archive all that I don't currently need. I may still wish to edit and use the files, and I am not very techy and am a broke student... so anything grossly expensive is a no-no for me (between $50 and $200 is idyllic). If you could simply post links of different good/useful hard-drives that I can use, I'd be thankful.
Thank you
p.s. I'm australian, so anything within this country would be great. Or I can deal with somewhere that has cheap shipping.

It's been moved and seconded. Any discussion? Yes:
Buy two external drives. Use one for Time Machine. Be sure this drive is at least twice the capacity of your computer's hard drive. Use the second drive as a bootable clone of your computer's hard drive. Should something happen you can immediately get the computer up and running from the clone until your restore from the Time Machine backup. This is what is called redundancy. Should either backup drive fail, there's another to take its place. Backup redundancy is very important. You can never have too many backups.

How to exclude specific PCs or Organization Unit from discovery and All system collection?

We want to exclude some PCs from discovery and All System collection.
1. We want to exclude with out modfing query of All System collection and without modifiing registry.
2. We want to exclude with Organization unit container.
We have also tested Include and exclude option which is avaible in system discovery (Discovery method) but it is not working as per expected.
Please help us.

Jason messaged me offline and said that the method of denying read access does not always work. I was thinking that I had done that back in 2003 but have not tested it in the past 10 years or so. It would be easy to test though if you want to give it a try.
Just browse to the OU on ADUC, right click, properties, security tab. Click Add, change the object type to computers, enter the same of the server that performs discovery, click ok, click deny on all boxes and click OK.
Actually I just did it to write the instructions above. When I see in my adsysdis.log clearly indicates to me that, in my environment, this works.
John Marcum | http://myitforum.com/myitforumwp/author/johnmarcum/

Error in Active Directory System Discovery (0x80005010)

Hi,
I've configured Active Directory System Discovery in a SCCM 2007 R2 SP2 configuration. I see several SCCM clients being populated with OU information, but others do not. I've taken a look in the adsysdis.log. There it states for a very large number of computer accounts:
INFO: discovered object with ADsPath = 'LDAP://<domain controller>/<DN computerobject>'
WARN: Could not get property (domain) for system (0x80005010)
Afterwards there is no entry that states a ddr is written for this computer object and the SCCM client object is not populated with information.
Can someone explain what exactly is the issue, and how to solve it?

I got exactly same issue - SCCM 2007 SP2 two primary sites (one central). AD sctructure got one forest and two domains.
Does anyone solved this issue ?
adsysdis.log :
Starting the data discovery. SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
INFO: Processing search path: 'LDAP://CN=COMPUTERS,DC=MY,DC=DOMAIN'. SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
INFO: Full synchronization requested SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
INFO: DC DNS name = 'dc01.my.domain' SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
INFO: search filter = '(&(objectClass=user)(objectCategory=computer))' SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
INFO: ads path = 'LDAP://dc01.my.domain/CN=COMPUTERS,DC=MY,DC=DOMAIN' SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
INFO: Bound to 'LDAP://dc01.my.domain/CN=COMPUTERS,DC=MY,DC=DOMAIN' SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
INFO: discovered object with ADsPath = 'LDAP://dc01.my.domain/CN=TEST1,CN=Computers,DC=MY,DC=DOMAIN' SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
WARN: Could not get property (domain) for system (0x80005010) SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
INFO: discovered object with ADsPath = 'LDAP://dc01.my.domain/CN=COMP2,CN=Computers,DC=MY,DC=DOMAIN' SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
WARN: Could not get property (domain) for system (0x80005010) SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
INFO: discovered object with ADsPath = 'LDAP://dc01.my.domain/CN=SRV2,CN=Computers,DC=MY,DC=DOMAIN' SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
WARN: Could not get property (domain) for system (0x80005010) SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
INFO: discovered object with ADsPath = 'LDAP://dc01.my.domain/CN=SRV3,CN=Computers,DC=MY,DC=DOMAIN' SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
WARN: Could not get property (operatingSystem) for system (0x80005010) SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
WARN: Could not get property (operatingSystemVersion) for system (0x80005010) SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
WARN: Could not get property (domain) for system (0x80005010) SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
WARN: Could not get property (dNSHostName) for system (0x80005010) SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
ERROR: System SRV3 is a unsupported operating system, unsupported version, or malformed AD entry. Reported system type is: (). SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)
WARN: CADSource::ProcessSystemInfo: Failed to get IP Address for the system. SMS_AD_SYSTEM_DISCOVERY_AGENT 19.11.2009 17:11:15 5360 (0x14F0)

LDOM 1.1 and split I/O domains

Anyone tried out LDOMs 1.1 yet? Looks like it went GA on December 23th or there about...
We're setting up a test platform for it. We particularly interested in running it in split PCI switch mode and the disk fail-over between I/O domains that it should permit. We're also glad to see it finally adds dynamic add/removes of disk (VIODR). I'd love to hear others experiences with it, especially in relationship to EMC Clariion storage.
I must say that I'm just a bit frustrated at the architecture of the current crop of T5x40 systems -- it seems there was little or no thought given to using the split PCI switch configuration to permit I/O domain redundancy. All the local disks reside on one switch and all the built-in network resides on the other. To get two functional I/O domains we'll need to boot one (or both) off the SAN and add a network card (burning up one of the PCI slots which are at a premium in the smaller form factor T5140). And with an add-on card we cannot get the Hybrid I/O for both network ports (only works with the built in Neptune chip).
What we're hoping to achieve is a system that can take down the Control/IO domain and the secondary IO domain indepedently for patching (required by policy to be pretty frequent) without having to take an outage on all the guests...maybe it's just a pipe dream.
Cheers!

LDoms has been released, see http://blogs.sun.com/achartre/ for more info. You will also find
information about virtual disk multipathing through multiple I/O domains.

SCCM 2012 Active Directory System Discovery - How does it find systems?

I have setup System Discovery for the forest and have not limited the view of the forest in any way. Also I have it to setup to discover everything, no limits on the number of days since last check-in. But I have some objects that haven't checked
into the domain in years that are enabled (yes i want to delete them) and others are disabled that don't show up. If there is a discovered object that I disable in AD, I run a full discovery and it still found.
My question is for this discovery, what criteria does SCCM look for? I assume that it authenticates to the domain with the supplied user account and reads Active Directory and pulls objects. From there, does it pull Disabled objects or leave
them be? If a client hasn't checked in in over 90 (or any number) days, does it discard that automatically? I'm just trying to understand the discovery process.
Jason Apt, Microsoft Certified Master | Exchange 2010
My Blog

it should look for objects that are in AD and also in DNS. When you use the 90 days rules, those objects will not be deleted from the ConfigMgr database (that's a site maintenance rule), the discovery process will just not discover the object.
Kent Agerlund | My blogs: blog.coretech.dk/kea and
SCUG.dk/ | Twitter:
@Agerlund | Linkedin: Kent Agerlund

After Active Directory System Discovery, some computers have Operating_System_Name_and0 as only the version number

Good morning,
We've been experiencing some odd behavior with discovery. After Active Directory System Discovery, some computers have Operating_System_Name_and0 as only the version number; for example, " 6.1" (note the space before the 6) vs.
"Microsoft Windows NT Workstation 6.1" (although, not limited to Windows 7 workstations).
Here are two seemingly identical machine records in Active Directory WCBWIN7VDI10 and WCBWIN7VDI11.
After discovery
select Name0, Operating_System_Name_and0 from v_r_system where Name0 LIKE 'WCBWIN7VDI1[0,1]'
yields
Name0 Operating_System_Name_and0
WCBWIN7VDI10 6.1
WCBWIN7VDI11 Microsoft Windows NT Workstation 6.1
For discovery on a new domain yesterday we have the following distribution:
select count (*) as [count], convert (nvarchar, Creation_Date0, 110) as [creation date], Operating_System_Name_and0
from v_r_system where Full_Domain_Name0 like 'aaa.bbb.ccc'
group by Operating_System_Name_and0, convert (nvarchar, Creation_Date0, 110)
order by Operating_System_Name_and0
count
creation date
Operating_System_Name_and0
274
12-01-2014
3
12-01-2014
5.0
23
12-01-2014
5.1
124
12-01-2014
5.2
20
12-01-2014
6.0
5109
12-01-2014
6.1
6
12-01-2014
6.2
4
12-01-2014
6.3
1
12-01-2014
CentOS 6.0
13
12-01-2014
Microsoft Windows NT Server
54
12-01-2014
Microsoft Windows NT Server 5.2
9
12-01-2014
Microsoft Windows NT Server 6.0
120
12-01-2014
Microsoft Windows NT Server 6.1
2
12-01-2014
Microsoft Windows NT Server 6.2
7
12-01-2014
Microsoft Windows NT Server 6.3
6
12-01-2014
Microsoft Windows NT Workstation 5.1
3501
12-01-2014
Microsoft Windows NT Workstation 6.1
1
12-02-2014
Microsoft Windows NT Workstation 6.1
5
12-01-2014
Microsoft Windows NT Workstation 6.2
1
12-01-2014
Microsoft Windows NT Workstation 6.3
2
12-01-2014
SLES 11
6
12-01-2014
Windows Embedded Standard 6.1
Anybody know why this occurs? We typically build our server vs. workstation collections with this.
Thanks,
Terence Durning

Hi Terence,
What is the value in Active Directory for the computer account?
Do you have the same behavior if you run this query?
SELECT DISTINCT Operating_System_Name_and0 FROM v_R_System ORDER BY 1
You are talking about a space before 6.1. Do I see also a space for all Microsoft Windows like "Microsoft Windows NT Workstation 6.3" ?
Nick Pilon - Blog: System Center Dudes

Doing Active Directory System Discovery security roles

Hi Experts
I am assigning users who have specific roles in SCCM2012 (Reporting, application management etc) , they are not assigned with permissions which is the same as Full Administrator or Operation Manager.
The team would like to run Active Directory System Discovery on the Primary Site server to detect the computer objects found in the AD once they have joined the new computers to the domain, they are unable to perform RUN on the Active Directory System Discovery
as the option is not available to them. Possible to advise, which additional security roles should I assign to them so that the RUN command can appear?? They are unable to do this with the current permission as listed below, RUN is not listed when they right
click on Active Directory System Discovery, unlike the Full Administrator:
Application Administrator
Application Author
Application Deployment Manager
Operating System Deployment Manager
Read-only Analyst
Remote Tools Operator
Software Update Manager

Hi,
You could create a Custom role and modify the rights.
Administration workspace >Security >Security Roles >Select a Built-in role >Click Copy on the ribbon.
Otherwise, Role-based Administration Modeling and Auditing Tool helps administrators to model and audit RBA configurations.
http://www.microsoft.com/en-us/download/details.aspx?id=36213
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Active Directory System Discovery Properties Error

Hi,
I'm getting a strange error within SCCM 2012 System Discovery Properties. The error occurs every time I open the properties for the discover method. I can close it OK, and Systems still seem to be getting discovered. It appears even when the discovery properties
is completely empty.
Does anyone know what could be the problem? The error message is below. Thanks in advance
System.DirectoryServices.ActiveDirectory.ActiveDirectoryObjectNotFoundException
The Specified directory object cannot be found.
Stack Trace:
at System.DirectoryServices.ActiveDirectory.ActiveDirectorySchemaProperty.GetPropertiesFromSchemaContainer(DirectoryContext context, DirectoryEntry schemaEntry, String name, Boolean isDefunctOnServer)
at System.DirectoryServices.ActiveDirectory.ActiveDirectorySchemaProperty.InitializePropertiesFromSchemaContainer()
at System.DirectoryServices.ActiveDirectory.ActiveDirectorySchemaProperty.GetValueFromCache(String propertyName, Boolean mustExist)
at System.DirectoryServices.ActiveDirectory.ActiveDirectorySchemaProperty.get_Syntax()
at Microsoft.ConfigurationManagement.AdminConsole.ActiveDirectory.AttibutesPageControl.IsAttributeAvailabe(ActiveDirectorySchemaProperty schemaProperty)
at Microsoft.ConfigurationManagement.AdminConsole.ActiveDirectory.AttibutesPageControl.AddAvailableAttributes(ActiveDirectorySchemaPropertyCollection properties)
at Microsoft.ConfigurationManagement.AdminConsole.ActiveDirectory.AttibutesPageControl.worker_DoWork(Object sender, DoWorkEventArgs e)
at System.ComponentModel.BackgroundWorker.OnDoWork(DoWorkEventArgs e)
at System.ComponentModel.BackgroundWorker.WorkerThreadStart(Object argument)

Hi Mike,
Not exactly, however when the console is logged into as a user who is a domain admin - the error doesn't appear. To make things more complex - the way AD is set up here is quite/very messed up and domain admins is actually nested in schema admins (yep..you
read that correctly). This nesting is due to be removed, but until then i can only assume the following:
Not being a schema admin, or domain admin restricts the attributes that you are able to read in the SCCM console system and user discovery properties. I know it shouldn't be like this. Its also interesting that when you open these discovery properties -
it appears it must read based on the user operating the console, rather than the site server, which I assumed it would be read based on the rights that has.
Why this is happening, I dont know yet. Its been parked because it isn't actually having an detrimental effect that I can see. I know this probably doesn't help you much, but maybe it will point you in a direction to start looking in..

System Discovery changed locations from root

I have initially set System Discovery to root of the domain but now I changed to specific OUs to control what should get populated however since SCCM has already discovered all Systems how does SCCM handle this or what I need to do to get this to limited
systems to those part of specific OUs?
Thanks

Handle what?
Discovery is just that, finding new resources (and potentially updating attributes on previously discovered resources). Discovery does not delete resources -- that, by
definition of the word and process in ConfigMgr, is not what discovery does. So, it doesn't do anything to handle changing the scope of discovery, it simply continues discovering in the scope specified and only the scope specified. Resources no longer
in scope are simply not subject to discovery anymore.
Jason | http://blog.configmgrftw.com | @jasonsandys

Questions on photos and storage

I have a few questions about photos and storage... If you can just answer one of these, that's fine and thanks for the help!
How do I see how much space my iPhoto photos are taking on my hardrive?
I have Time machine which backs up, but concerned that I'm getting too many pictures. When I do "Get Info" on the hardrive it says 640GB Capacity with 254GB used. I'm assuming that includes all my photos, and that Time machine only backs up and is not the active storage for those photos?
What is advisable for available GB space on this size computer?
I have my photos on the hardrive and the time machine, is it also advised to have in a cloud-based storage system to be safe? Or some other place. Just checking what others do with this.

1 - it is a really good idea to start new threads with new questions - threadjacking a year old solved thread on a totally different subject will not provide the best coverage and the best answers
2 - Do NOT uncheck the option to copy imported items to the iPhoto library - it is a really, really bad idea that will create many problems for yo and has no advantages of any sort - see the user tip on file management in iPhoto for more details - iPhoto and File Management
3 - take the time to learn how to use iPhoto and the concept of using a database for management photos rather than a file based system like you are used to - it is much different and much more powerful - but there is a learning curve and a different thought process
4 - yes you can always export anything or everything from iPhoto for use on any other system - see the user tip on exporting for details - Exporting From iPhoto
5 - always remember that you never access your photos directly - iPhoto totally replaces the finder for managing your photos - see the user tip on accessing photos for more details - How to Access Files in iPhoto
LN

Can i use my time capsule to wirelessly backup my macbook and its external hard drive, which up until now was it's time machine and storage? How?

Can i use my time capsule to wirelessly backup my macbook and its external hard drive, which up until now was it's time machine and storage? How?

The external drive must be connected to the Mac using either USB or FireWire
You must remove the external hard drive from the list of items that are "excluded" from backups in Time Machine Preferences.
Here's how:
Open System Preferences (gear icon on the dock)
Open Time Machine
Click Options
Look for the name of the hard drive in the list of "excluded" items and click on it to highlight it
Click the -- (minus) button at the bottom of the list to remove the hard drive from the list of "excluded" items....so it will now be backed up
Strongly recommend that you do the first backup using Ethenret from your computer to the Time Capsule since the entire contents of the external drive will be copied on the first pass. Ethernet will be 3-5 faster than wireless.
Once you have the first backup done, you can use wireless for subsequent backups since they will nornally be much smaller....unless you add large files to the external drive.

VSC 6.0 and storage system discovery; domain credentials

Similar Messages

Maybe you are looking for