GenivNET

Recently we have been getting the All-Paths-Down (ADP) error on our VMware servers.

Jun 10 16:58:54 vmkernel: 5:14:36:03.462 cpu1:4349)WARNING: NMP: nmp_DeviceAttemptFailover: Retry world restore device “naa.600601606d022300aa855779fe51df11″ – no more commands to retry

So far we are still looking for a solution from VMware and EMC.

Here is a link we found that have similar issue, but it didn’t solves our issue:

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1016626

Recently, we have to do some cleanup on our company’s Active Directory.  So we written some dsquery and dsmove scripts to do this and adding it to our daily, weekly, and monthly scheduled tasks.  All of our dsquery, dsmove, dsadd, dsget, dsrm are ran in batch files.  In order to get the batch files to run piped dsquery to dsmove, you will need to use the “FOR” loop method.

e.g.

For /F “delims=” %%a in (‘dsquery computer “CN=computers,DC=drf,DC=corp”‘) DO (dsmove -newparent “OU=Workstations,DC=drf,DC=corp” %%a)

Another things to keep an eye on is that when saving to a batch file, you will need to have the %% variable instead of just %.  Otherwise, the batch file will fail.

e.g. correct way is  “%%a”

wrong way is “%a”

But, to run it stand alone you will need to do the opposite.

e.g. correct way is “%a”

wrong way is “%%a”

To turn off the iPhone is fairly easy. You will just need to following the steps below.

To turn off your iPhone

1. Press and hold down the “Sleep/Wake” button on the top right-hand corner.

2. Wait for a few seconds and it will prompt you to confirm it by moving the slider across the screen.

3. You iPhone should be off now.

To turn on your iPhone

It is the same steps as above

The secure channel between members of a domain and the domain controller can sometimes be broken.  Recently, we have experienced with this where one of our Windows file server loses its secure channel to the DC.  We ran several tests on it, e.g. netdiag, nltest.  And all of them are pointing to the “Secure channel to domain “xyz” is broken error.  We are also seeing event id like 5719 and 1053 in our event logs.  Searching all over the web for solutions, we have finally found one that is helpful.

Event ID 1035:
Windows cannot determine the user or computer name. (Not enough storage is available to complete this operation. ). Group Policy processing aborted.

Event ID 5719:
This computer was not able to set up a secure session with a domain controller in domain XYZ due to the following:
Not enough storage is available to process this command.
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.

Event ID 537:
Logon Failure: Reason:        An error occurred during logon

Below are the steps in fixing our broken secure channel issue.

How to reset a computer secure channel?

1. Start the ADUC snap-in

2. Find the computer object that is having the secure channel issue.

3. Right click and select “Reset Account”

4. Click “Yes” and “Ok”

5. Now rejoin the computer (the one that is having issue) into the domain

There are two ways that you can setup the ILOM feature on your SUN X4100 or X4200 series.

1. Through the serial port
2. Through BIOS

Method 1: Through the serial port

1. Connect a laptop to the serial port and console into the machine.  You can download the putty application for this.

2. The default username and password is root/changeme

3. Once logged in, change to the SP/network folder

e.g. cd /SP/network

4. Then type in the following command to setup the iLOM ip address

e.g.
set pendingipaddress=192.168.2.2
set pendingipnetmask=255.255.255.0
set pendingipgateway=192.168.2.1
set pendingipdiscovery=static
set commitpending=true

The following will set the server ILOM ip address to 192.168.2.2.  You will need to put your ILOM and network information here.

Method 2: Through the BIOS

1. Another way to configure the ILOM ip address, is through the BIOS.  When the server starts, press F2 to enter into the BIOS configuration setup page.

2. Once you are in the BIOS windows, navigate to the “Advance” tab and select the “IPMI 2.0″ option

3. Here in the IPMI section, enter in the ILOM ip information.  Make sure to select “Static” if you are using static IP address.

4. Save your settings and restart server.

5. Test logging to the server’s ILOM ip address using a ssh program (e.g. Putty).

If you have recently installed the VMWare ESXi software, you noticed that you can not ssh into the host.  This is because VMWare has disabled this feature on the ESXi server.  To be able to SSH, you will need to enable this feature on the “INETD.CONF” file.

Below are instructions on how to do this:

To enable SSH access in ESXi:

1. In the ESXi host, press ALT+F1 to login to the console prompt

2.Type in “unsupported” and then the root password to the machine

3.Change the directory to the “etc” folder.

E.g. cd /etc

4. Type in the following command to edit the inetd.conf file.

vi inetd.conf

5. Look for the line that has the “#SSH” in it and remove the “#” from it.

e.g. move your cursor on the ‘#’ symbol and press the “x” key to delete it.

6. Save the file by typing the following command

:wq!

7. Type in the following command to get the running PID of the INETD

cat /var/run/inetd.pid

8. Once you got the PID number, type in the following to kill that process

kill -HUP <pid>

9. Test the SSH connection.  You can download the free putty software to ssh into it.

With all version of VMWare ESXi, you can enter into the console menu by pressing a sudden key combination.  This is also the Tech Support Mode too.

VMWare ESXi Console mode:

1. At the console, press Alt+F1
2. Type in the word “unsupported” and press enter
3. Type in the root password
4. Now you should be inside the console menu.

To exit console mode:  Type “exit”

To go back to the MENU options:   Press Alt+F2

1. Login to a Domain Controller (Writable).  You won’t be able to do this from the Adminstrator tools or any read-only domain controller.  It needs to be done from a writable server.

2. Once in the server, start the Active Directory Users and Computers (ADUC) MMC from the Administrative Tools

3. Go to the Domain Controllers OU and right-click on the server that you want to remove.

4. Select “Delete” and then “Yes” to confirm the object deletion.

5. Check the “This Domain Controller is permanently offline and can no longer be demoted using the Active Directory Domain Services Installation Wizard (DCPROMO).” checkbox. 

6. If the server is a Global Catalog, it will prompt you with another popup for permission to proceed.  Click “Yes” to continue.

7. If all went well and no errors, the Domain Controller is removed along with all the metadata assosicated with it.

If you are trying to use the change password feature from OWA 2007 and is getting the following error

The password supplied does not meet the minimum security requirements. Please contact technical support for your organization if you need help.

First make sure that you have followed the security requirement from Microsoft, e.g. minimum of 7 characters, at least one Capital letter, a number, etc…

Secondly, check your group policy and make sure the “Minimum password age” is set to “0″ days.  Once we changed back the value from 7 days to “0″ days, users were able to change their password using the OWA.

For those that wanted to know if you can move or delete the i386 folder on your C: drive, the answer is YES.   The i386 folder is just a copy of the Windows installation.  You can move and delete this folder and it won’t crash or hang your system.  The i386 folder is useful whenever you install any software that require files from the Windows installation disc.  As long as you have a copy of the systems OS, you can move/delete the i386 folder.