|
slee -> Cannot read status of new DP in trusting domain (8/8/2006 9:58:51 AM)
|
Found some similar threads, but not quite the same situation...
I've been trying to recreate a distribution point in a trusting domain, without success. We had a DP in this domain previously, but took it out some time ago. Now, trying to recreate the role on another box, the site server cannot push package source to the intended DP, nor can it see the status of the DP. In the admin console's Site System Status list, the Total, Free, and % Free disk space all appear as "Unknown", with a "Down Since" value equal to the time I tried to copy a package to it.
The givens:
-Our DMZ domain trusts the Corp domain.
-DMZ01 is in the DMZ domain, SMS01 site server is in Corp domain.
-SMS Advanced Clients in the DMZ domain install successfully and report inventory, status, etc. back to the site server in Corp domain.
-Site server computer account SMS01$ is a local admin on file server DMZ01; SMS site is Advanced Security, so no service account. Site server account is currently also a member of Corp domain's Domain Admins, which is a member of the DMZ domain's Administrators group.
-I can connect to and map a drive to the DMZ01 DP share \\DMZ01\SMSPACKAGE$ from the site server using a Corp domain administrator account, and create/delete files and folders.
-Firewall is open between DMZ devices and SMS01 (ANY<->ANY) until we get things set up and running.
-DNS resolution of each server name from the other works fine.
Here's the relevant part of distmgr.log (NAL logging is enabled):
-----------------------
Start adding package to server ["Display=\\DMZ01\SMSPKG$\"]MSWNET:["SMS_SITE=NA1"]\\DMZ01\SMSPKG$\... SMS_DISTRIBUTION_MANAGER 8/8/2006 08:29:43 6336 (0x18C0)
Attempting to add or update a package on a distribution point. SMS_DISTRIBUTION_MANAGER 8/8/2006 08:29:43 12756 (0x31D4)
STATMSG: ID=2342 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=SMS01 SITE=NA1 PID=3340 TID=12756 GMTDATE=Tue Aug 08 13:29:43.728 2006 ISTR0="Microsoft Updates Tool" ISTR1="["Display=\\DMZ01\SMSPKG$\"]MSWNET:["SMS_SITE=NA1"]\\DMZ01\SMSPKG$\" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=2 AID0=400 AVAL0="NA1000B7" AID1=404 AVAL1="["Display=\\DMZ01\SMSPKG$\"]MSWNET:["SMS_SITE=NA1"]\\DMZ01\SMSPKG$\" SMS_DISTRIBUTION_MANAGER 8/8/2006 08:29:43 12756 (0x31D4)
NAL[1] - ERROR: failed to get connection status. This network connection does not exist. SMS_DISTRIBUTION_MANAGER 8/8/2006 08:29:43 12756 (0x31D4)
NAL[1] - ERROR: failed to make the network connection. Access is denied. SMS_DISTRIBUTION_MANAGER 8/8/2006 08:29:43 12756 (0x31D4)
NAL[1] - ERROR: failed to obtain access. Access is denied. SMS_DISTRIBUTION_MANAGER 8/8/2006 08:29:43 12756 (0x31D4)
NAL[1] - The server is inaccessible. Access is denied. SMS_DISTRIBUTION_MANAGER 8/8/2006 08:29:43 12756 (0x31D4)
Cannot establish connection to ["Display=\\DMZ01\SMSPKG$\"]MSWNET:["SMS_SITE=NA1"]\\DMZ01\SMSPKG$\ SMS_DISTRIBUTION_MANAGER 8/8/2006 08:29:43 12756 (0x31D4)
Error occurred, performing error cleanup prior to returning. SMS_DISTRIBUTION_MANAGER 8/8/2006 08:29:43 12756 (0x31D4)
------------------------
Is there any way to draw more information out of those NAL errors beyond "Access is denied"? I've tried turning up security logging on DMZ01, but only see Anonymous logons from SMS01 to DMZ01 that appear out of the ordinary.
|
|
|
|
