tisdagen den 22:e april 2014

dpmdsacl.exe has stopped working - When enabling End-user Recovery

So easter is over and thank god for that! Too much food and whatnot!

Anyway, Im back in the sadle as they say, or back to behind the bench at Santas Workshop.

Today I hit a strange problem when enabling End-User Recovery on the DPM server. (Note: I have had an old DPM Server in this domain that I uninstalled, and that DPM server had EUR activated in the current labdomain)
When clicking on "Configure Active Directory" and filling in the credentials I was prompted with the following error message:
"dpmdsacl.exe has stopped working" 
With the problem details:
"Problem signature:
  Problem Event Name: APPCRASH
  Application Name: dpmdsacl.exe
  Application Version: 4.2.1205.0
  Application Timestamp: 5226e06b
  Fault Module Name: KERNELBASE.dll
  Fault Module Version: 6.3.9600.16496
  Fault Module Timestamp: 52b3f283
  Exception Code: e0434352
  Exception Offset: 0000000000005a88
  OS Version: 6.3.9600.
  Locale ID: 1033
  Additional Information 1: 7644
  Additional Information 2: 7644cee486badc818e8a96bb7aba3bfd
  Additional Information 3: 323f
  Additional Information 4: 323fd7577665c71a733ee3b0c137aa0d"

It seems that when you run the dpmdsacl.exe it creates and tries to set the rights for the container in Active Directory called CN=MS-ShareMapConfiguration,CN=System,DC=SantasWorkshop,DC=north,DC=pole
and the ACLs List Content and Create/Delete ms-ShareMapConfiguraiton.

I added the access rights for the new DPM server and now it works!

måndagen den 31:e mars 2014

CBA Protected Servers

I'm configuring Certificate Based Authentication between the DPM Server and a few ProductionServers and I noticed that if you miss out on a really important step, at least myself got stuck with my head banging against a wall. 

When running the command Attach-ProductionServerWithCertificate.ps1 -DPMServername DPMServer -PSCredential <pathToBinFile> I got this error message

WARNING: Connecting to DPM server: DPMServer
There is failure while attaching production server with certificates
C:\Program Files\Microsoft System Center 2012\DPM\DPM\bin\Attach-ProductionServerWithCertificate.ps1 : DPM CPWrapper Service on the ProductionServer computer has encountered a failure and may
 be in an unusable state. Exception Message = The socket connection was aborted. This could be caused by an error processing your message or a receive timeout being exceeded by th
e remote host, or an underlying network resource issue. Local socket timeout was '00:00:59.9680000'..
At line:1 char:1
+ .\Attach-ProductionServerWithCertificate.ps1 -DPMServerName DPMServer -PSCredential  ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Attach-ProductionServerWithCertificate.ps1
- Check that the relevant firewall exceptions are configured correctly.
- Check if the certificate used by the DPM CPWrapper service on the ProductionServer computer is trusted by the peer server.
- Try to restart the DPM CPWrapper service on the ProductionServer computer.
And it turns out that the problem behind all this is the lack of the root certificate. Just install the root certificate in the Trusted Root Certification Authorities (and any intermediate certificates in the Intermediate Certification Authorites) you should be good to go!


fredagen den 28:e mars 2014

Update on Re: Hardware - Hardware - Hardware

I sat down with Santa and had a discussion about what to do with the hardware and if we should invest in a new Raid Card, and after a quick glance on the blogpost to see the performance numbers we looked at each other and nodded intensely. So after asking Santas Wife for OK to order we did, and it is here!

It's been installed in the server and I was exited when I started up the server for the first time with the new card installed. But after running the CrystalMark program I felt my heart drop, take a look at these numbers!

These are the numbers, and just look at them! 49MB/s compared to 31MB/s with the PERC H310 card. So after thinking for a few minutes I realized that I might have to configure something. Said and done I installed the Server Administrator software from Dell in order to reconfigure the write settings.

After changing the setting I did another test with CrystalMark and here are the results!

That is some improvement! Time to work some more!