Update: I posted this in the wrong forum in error, moved to ServerFault.
Domino server 8.5.3 Windows 2008 R2
Notes Client 8.5.1
As part of policy documents, new registered users have their ID uploaded to an ID Vault. I have enabled some ID vault debug settings.
The problem I have is: on installing Notes client on PC for first time, user receives "Wrong Password" prompt. I believe the user record is being found correctly in the vault:
01/08/2013 07:21:29 IDVAULT: idsync.c nwall; FileChunkSize 16384; WantDnLoad 1; WantUpLoad 0; WantCerts 0; WantChallengeC 0; UpFileHasPW: 0; TE0 0; TE1 0; TE2 1; TE3 1
But I see this, which looks like a certificate failure of some sort.
01/08/2013 07:21:29 IDVAULT: idsync.c FetchArtifacts: IDVGetVOCertChain: Note item not found
01/08/2013 07:21:29 IDVAULT: idsync.c IDVSrvDlgSync: FetchArtifacts: Note item not found
If I then extract the ID from the vault, copy to the PC, set up continues as normal, so there would not appear to be anything wrong with the ID...?
The only references I can find online for above server messages, I have found here:
http://www-01.ibm.com/support/docview.wss?uid=swg27037703&aid=1
http://lotusnotus.com/lotusnotus_en.nsf/dx/a-little-story-about-an-error-with-id-vault....htm
...but I am fairly certain they do not apply to my situation.
Anyone with any pointers or comments would be greatly received.
Here's a larger chunk of server output when running Notes Client setup for user: nwall
01/08/2013 07:21:05 IDVAULT: idvdb.c IDVFindIDInVault: Exiting: No error
01/08/2013 07:21:05 IDVAULT: download.c IDVServerDialogDnLoad: IDVLookupUserIDInfo: No error
NAMELookup::<NIFGetInternetDomain> getting internet domain information.
01/08/2013 07:21:29 IDVAULT: download.c IDVServerDialogDnLoad: IDVServerStartSyncDialog: No error
01/08/2013 07:21:29 IDVAULT: idsync.c nwall; FileChunkSize 16384; WantDnLoad 1; WantUpLoad 0; WantCerts 0; WantChallengeC 0; UpFileHasPW: 0; TE0 0; TE1 0; TE2 1; TE3 1
NAMELookup::<NIFGetInternetDomain> getting internet domain information.
NAMELookup::<Lookup> PID:TID ( F54: 7) start of routine
NAMELookup::<lookup> Searching view '$Users' (1 of 1 views).
NAMELookup::<lookup> Searching name='nwall'
(1 of 1 names).
NAMELookup:: Searching DBIndex=1.
NAMELookup:: from cache took 0 msecs
NAMELookup:: NumReturned=1, TotalNumReturned=1 match(es) for name='nwall'
NAMELookup:: Skipping to next view/namespace (stop at first match)!
NAMELookup:: locate namespace in DBIndex=1, view='$ServerAccess'
NAMELookup:: locate namespace in DBIndex=1, view='$PoliciesByGroup'
01/08/2013 07:21:29 IDVAULT: idsync.c FetchArtifacts: IDVGetVOCertChain: Note item not found
01/08/2013 07:21:29 IDVAULT: idsync.c IDVSrvDlgSync: FetchArtifacts: Note item not found
Related
I'm actually looking for a way to get login history for a specific username.
I have tried these ways but didn't work:
1. eventid 4624
It only shows logins to the DC itself, Not in the entire domain. E.g. a user has logged in to the DC. So Eventviewer logs this as an event with eventid 4624. But if a user logs in to another server (not DC) , nothing will be logged in DC's Eventviewr.
2. eventid 4769
It's about tickets that DC creates and assigns. But is wasn't helpful.
So how can I get the login history of a user in entire domain?
I reproduce your scenario and getting the expected result.
Event ID 4624 - An account was successfully logged on.
This event records every successful attempt to log on to the local computer. It includes critical information about the logon type (e.g. interactive, RemoteInteractive , batch, network, or service), SID, username, network information, and more. Monitoring this particular event is crucial as the information regarding logon type is not found in DCs. you can get a user login history report without having to manually crawl through the event logs.
Open the PowerShell ISE → Run the following script, adjusting the timeframe:
# Find DC list from Active Directory
$DCs = Get-ADDomainController -Filter *
# Define time for report (default is 1 day)
$startDate = (get-date).AddDays(-1)
# Store successful logon events from security logs with the specified dates and workstation/IP in an array
foreach ($DC in $DCs){
$slogonevents = Get-Eventlog -LogName Security -ComputerName $DC.Hostname -after $startDate | where {$_.eventID -eq 4624 }}
# Crawl through events; print all logon history with type, date/time, status, account name, computer and IP address if user logged on remotely
foreach ($e in $slogonevents){
# Logon Successful Events
# Local (Logon Type 2)
if (($e.EventID -eq 4624 ) -and ($e.ReplacementStrings[8] -eq 2)){
write-host "Type: Local Logon`tDate: "$e.TimeGenerated "`tStatus: Success`tUser: "$e.ReplacementStrings[5] "`tWorkstation: "$e.ReplacementStrings[11]
}
# Remote (Logon Type 10)
if (($e.EventID -eq 4624 ) -and ($e.ReplacementStrings[8] -eq 10)){
write-host "Type: Remote Logon`tDate: "$e.TimeGenerated "`tStatus: Success`tUser: "$e.ReplacementStrings[5] "`tWorkstation: "$e.ReplacementStrings[11] "`tIP Address: "$e.ReplacementStrings[18]
Reference : Active Directory: How to Get User Login History using PowerShell - TechNet Articles - United States (English) - TechNet Wiki (microsoft.com)
You can also try with one easiest alternative way using A tool like ADAudit Plus that audits specific logon events as well as current and past logon activity to provide a list of all logon-related changes for particular user.
Step 1 : Download ADAdudit Plus in your VM and install it.
Step 2: Add your Server name ,Username and password.
Step 3 : Follow the below picture to get the logon details of particular user.
Reference : https://www.manageengine.com/products/active-directory-audit/kb/ad-user-login-history-report.html
Six of our 400+ users reported this error in the last two months:
System.Runtime.InteropServices.COMException (0x8000FFFF): Access violation at address 0000000000D7BA95
in module 'Redemption64.dll. Read of address FFFFFFFFFFFFFFFF
at System.IDisposable.Dispose()
This exception is raised just after a mail is saved on the user drive. The code that raises this exception is:
var msg = rdoMail as IDisposable;
if (msg != null)
msg.Dispose();
Any idea why this error occurs once in a while?
Notes:
Our Outlook 365 client version is "Product ID Version 2008 (Build 13127.20408 Click-to-Run Semi-Annual Entreprise Channel (Preview)"
The Redemption64.dll file version: 5.18.0.5142.
This problem (64 bit specific) was fixed about a month ago after version 5.24 was released. Please send an email to redemption (at) dimastr (dot) com for an updated version.
I followed the example given in the below link to create a new IBM-cloud VM.
https://www.ibm.com/developerworks/cloud/library/cl-softlayer-go-overview/index.html
func main() {
sess := session.New()
service := services.GetVirtualGuestService(sess)
guestTpl := datatypes.Virtual_Guest{
Hostname: sl.String("sample"),
Domain: sl.String("example.com"),
MaxMemory: sl.Int(2048),
StartCpus: sl.Int(1),
Datacenter: &datatypes.Location{Name: sl.String("sjc01")},
OperatingSystemReferenceCode: sl.String("UBUNTU_LATEST"),
LocalDiskFlag: sl.Bool(true),
}
guest, err := service.Mask("id;domain").CreateObject(&guestTpl)
if err != nil {
fmt.Println(err)
os.Exit(-1)
}
fmt.Printf("New Virtual Guest created with ID %d\n", *guest.Id)
fmt.Printf("Domain: %s\n", *guest.Domain)
}
The IBM approval mail comes after an hour , and the VM related updates are generated after that mail.
Is there a way to reduce the time ? Or is the IBM behavior takes longer time ?
Help is highly appreciated.
I use python for that task and one day I've faced that I need 1 hour per 1 server to create. So there is no technical solution. IBM somehow approves server creating manually.
I would recommend raise a support ticket to IBM. Now I have average 3 minutes to create a virtual server.
Just in case try to use servers like B1_1X2X100. To insure that you use standard fast setup.
Good luck
After 2 weeks of testing and all was good, we all of a sudden get this;
when i try to:
_workspace = CreateWorkSpace("some name", _vcs.AuthorizedUser)
Ik get this error:
TF30073: Please contact your administrator. There was an error processing your request.Technical information (for admininstrator): Sql error: 2627.
I deleted some forgotten workspaces for that user (serviceaccount tfs) and all is well again!
I get the error shown below on sign in (via Devise)
Oddly, Rails/Devise seems to be returning a user id of '1' even though there is no user in my users table with an id of '1'. This seems to happen kind of randomly, I can't figure out what the problem is.
Here's the latest error message.
ODBC::Error: S1000 (9001) [Microsoft][SQL Server Native Client 11.0][SQL Server]The log for database '[redacted]' is not available. Check the event log for related error messages. Resolve any errors and restart the database.: EXEC sp_executesql N'UPDATE [users] SET [last_sign_in_at] = ''2012-11-12T16:58:34.020'', [current_sign_in_at] = ''2012-11-13T08:44:33.586'', [sign_in_count] = 69, [updated_at] = ''2012-11-13T08:44:33.630'' WHERE [users].[id] = 1; SELECT ##ROWCOUNT AS AffectedRows'
Here's the request params:
{"utf8"=>"✓",
"authenticity_token"=>"[redacted]=",
"user"=>{"email"=>"jkramxx#xx.com",
"password"=>"[FILTERED]",
"remember_me"=>"0"},
"commit"=>"Sign in"}
There actually is no user in the db with an id of "1", and theres nothing wrong with the server. The user jkramxx#xx.com has id of 60. ( user id 1 was deleted from the db a while ago). I thought it might be something in the session cookie so i deleted that as well).
I've seen similar odd behavior in the console, where I have been able to log in, but when I examine current_user in the debugger it shows the user having an id of '1' even though when I examine the db directly (using SQL Server Mgmt Studio) the user has id of 34 and there is no user with id of 1. Sometimes this beahvior goes away when I restart the debugger. All very random.
Any suggestions?
(Ruby 1.9.3./Rails 3.2.8 SQL Server 10 using ruby-obdc gem)