RE: Secondary Site MP to SQL problem

From: Martin O (MartinO_at_discussions.microsoft.com)
Date: 09/21/04 

Date: Tue, 21 Sep 2004 00:57:04 -0700

Hi Keith!

As I got back to work this morning I found that it all started working about
10 minutes after I left work last evening. I guess the 'setspn...' commands
mentioned in Q832109 worked after all, I just didn't give it time enough.

I guess my problem really started when I had to rename the 4 servers I
currently have running SMS. I understood that I couldn't rename the machines
with SMS still installed and expect it to work afterwards, so I uninstalled
SMS before renaming the servers.

But I didn't understand that I should also have reinstalled both IIS and SQL
Server.

Last week I removed all my MP's etc. and reinstalled IIS on all 4 SMS
servers. Before that all my clients got HTTP errors, and I guess the problem
was that IIS was still configured to use 'IUSR_<oldservername>' but the
clients probably used the default name 'IUSR_<newservername>' when
connecting. After reinstalling all IIS and enabling MP's etc. again all
clients communicated with the MP's without errors.

However, SMS still didn't work... Finally I understood that the MP's
couldn't communicate with the SQL Server. The group memberships was all OK
but it still didn't work. Yesterday I used the 'setspn...' command to point
the domain account used as SQLServiceAccount to the new SQL Server machine.
That seems to have made it all working again.

Most of the clients have installed a test-package during the night and all
new clients have got their configurations.

I don't think it matters any more, but here is a sniplet of the
MP_GetAuth.log file you asked for:
---------------------------------------------------
<![LOG[CMPDBConnection::Init(): IDBInitialize::Initialize() failed with
0x80004005]LOG]!><time="17:41:48.805+-120" date="09-20-2004"
component="MP_GetAuth_ISAPI" context="Auth" type="3" thread="3576"
file="mpdbconnection.cpp:829">
<![LOG[CMPDBConnection::Init(): IDBInitialize::Initialize() failed with
0x80004005]LOG]!><time="17:51:48.805+-120" date="09-20-2004"
component="MP_GetAuth_ISAPI" context="Auth" type="3" thread="3940"
file="mpdbconnection.cpp:829">
<![LOG[MP IP Number of MPs in the Site "BRO" =
4]LOG]!><time="18:01:48.821+-120" date="09-20-2004"
component="MP_GetAuth_ISAPI" context="Auth" type="1" thread="436"
file="mpisapiproxy.cpp:498">
<![LOG[MP GA Number of MPs in the Site = 4]LOG]!><time="18:01:48.821+-120"
date="09-20-2004" component="MP_GetAuth_ISAPI" context="Auth" type="1"
thread="2836" file="getauth.cpp:607">
<![LOG[MP IP Number of MPs in the Site "BRO" =
4]LOG]!><time="18:11:48.884+-120" date="09-20-2004"
component="MP_GetAuth_ISAPI" context="Auth" type="1" thread="436"
file="mpisapiproxy.cpp:498">
<![LOG[MP GA Number of MPs in the Site = 4]LOG]!><time="18:11:48.884+-120"
date="09-20-2004" component="MP_GetAuth_ISAPI" context="Auth" type="1"
thread="612" file="getauth.cpp:607">
--------------------------------------------------------

  /Martin

"Keith P. Rutledge [MSFT]" wrote:

> Hello,
>
> If you have the SMS client installed on the server with the MP, goto the
> following location:
>
> c:\winnt\system32\ccm\logs and locate the MP_get_auth.log
>
> Please paste the contents of that log to this thread.
>
> Thanks!
>
> Best Regards,
>
> Keith Rutledge, MCSE NT4/2000
> Microsoft Online Support Engineer
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via
> your newsreader so that others may learn and benefit
> from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
>

Relevant Pages

  • Re: Management Points not working after domain controler demontion on
    ... I have a procedure that works for me; some steps might not be required on all servers but generally I find it better to just follow it and be sure that it comes up again without any issues :-) ... This causes IIS accounts to be recreated in local SAM. ... Use dcomcnfg and check if there are any DCOM objects related to SMS IIS ... This causes SMS accounts to be recreated in local SAM. ...
    (microsoft.public.sms.admin)
  • SMS 2003: MP authentication problems on domain controllers
    ... SMS and IIS on domain controllers? ... servers at remote locations. ...
    (microsoft.public.sms.admin)
  • Re: Management Points not working after domain controler demontion on
    ... Windows Server System MVP - SMS ... trying to access the site and after adding some permissions for the local IIS ... accounts managed to get some progress, still issues though so I'll be trying ... secondary SMS servers running IIS 5.0. ...
    (microsoft.public.sms.admin)
  • Re: multiple servers or multiple clients, not sure if remoting is what I need
    ... Your web app should be a client to multiple servers. ... You may need to set the IIS system as trusted for delegation depending on ... In terms of turning this around and letting the other systems be clients you have more problems. ...
    (microsoft.public.dotnet.framework.remoting)
  • Re: MP, DP or new Site???
    ... My main concern is that I don't have 100 clients pulling a Office2k3 package ... So if I am going to utilize the local servers one option would be to ... Does that add any administrative load in maintaining SMS? ... Are the locations connected by WAN links? ...
    (microsoft.public.sms.admin)
Loading