Similar Questions

• the DFS replication add new servers to an existing rule

  I have an existing replication and 2 new servers

  I want to add new servers to the old rule and start replication

  Once everything is running I want to remove the old servers and leave the new

  Ask in the forum Windows Server:
  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer.

• Replications auto archiver doenst work

  Hello

  I created a replication free (only for certain metadata automatically update), and when I use the option 'Automatic export', the content that needs to export and import doenst works, but when I deselect this option and manually export the content is exported and imported ok. Anyone have this problem?

  It was a bug, now with a patch:

  Patch 22293965: ARCHIVER IMPORT not WORKS DO NOT GET NULLPOINTER IN RM

• Replication between two servers without direct connecton

  Hi all

  In this case, we have two servers without direct access between them (firewall, security requirements). In fact the two servers are stored in different VPN.
  and the question is:
  Can you build an architecture that will provide replication between them (include the server in downstream, trails in the intermediate machine bank file, or something else)?

  Much love and thanks for your suggestions))
  

  Hello

  In this case, your downstream server should be able to communicate to your Source and target.

  Kind regards

  Veera

• Just imaginary deduplication or only after replication or archiving?

  Anyone else running appassure noted that the meter of deduplication is apparently imaginary? I'm going to prosecute and wait 3-4 weeks to get anywhere, I know, but I just did some calculations on all my carrots and it is quite obvious that the total of protected data * compression = used space on the repository. So what is deduplication meter 47% indicating?

  Although on my replicated core is the used space is much closer to what we would expect with compression and deduplication... well on this basis, the percentages of compression and deduplication are completely different and don't match anything I can find.

  That's it, after that I have been instructed by the support to rebuild the repository because our total protected data were lower than the space used on the repository if our deduplication and compression read more than 30% each.

  Hello

  Two different counters of compression and deduplication

  1. deduplication - indicating how many records have been structure since the last job "to maintain the repository."

  2. compression - indicating the difference between protected and space used in the repository, including deduplication.

  NOTE: With each volume image transferred to the volume, these metadata metadata is no compression and not deduplication.

  Thank you

  Anton Kolomiiets.

• ACS server installation issues

  I have a client of the remote site that is replacing their ACS servers and several questions:

  (1) what version we should be installed?

  (2) where we can get a clean binary installer (or do you start with 3.x or 4.0 & upgrade-if upgrade, use us the latest hotfix installer, or do we apply successive patches?)

  (3) replication between versions? Current servers have version 4.1 (1) build 23 Patch 5-do these need to be upgraded to the current version, or can move us later & replicate current?

  (4) is it possible to use different DNS (ex rtpacs.corpnet2.com) name for the site of 'real' server name (e.g. us2sawn00232.us1auth.xxxx.com)?

  (5) how to use GSK signed cert? Have previously tried & failed - something special here?

  Thanks for any help you can give.

  RO

  
  I have a remote site customer that is in the process of replacing their ACS servers,and have several questions:
  1) What version should we be installing?
  2) Where can we get a clean binary installer (or do we have to start with 3.x or 4.0 & upgrade-if upgrade, can we use latest patch installer, or do we have   to apply successive patches?)
  3) Cross-version replication? Current servers have Release 4.1(1) Build 23 Patch 5-do these need to be upgraded to current version, or can we install latest & replicate from current?
  4) Is it possible to use different DNS name (ex rtpacs.corpnet2.com) for website than server's 'real' name (ex. us2sawn00232.us1auth.xxxx.com)?
  5) How to use GSK-signed cert? Have tried previously & failed-anything special here?
  Thanks for any help you can give.
  RO
  

  Hi Richard,

  For your queries for replication ACS should be the same version, only then you can replicate between the ACS patner, if you have the same version, so your first and third query got the answer.

  For your fourth query, you can use the DNS server to host your web servers as when the user access the traffic of your web site will land in your DNS server where it will redirect to the origin server so that the DNS server should be authority server for your Web site.

  For a binary installation clear I would say check out this link http://openacs.org/forums/message-view?message_id=1245671 I hope this helps.

  So useful note valauable post.

  Concerning

  Ganesh.H

• How to fix VMware View Server certificate revocation check connection error?

  Dear community,

  For about 2 weeks, I feel a revocation of the certificate check error in our environment Horizon see 6.2. The strange thing is that, within 12 hours about two (replication) connection servers and the vCenter Server / server of composer (on the same machine) are considered as having invalid certificates, even if, in fact, they are valid (CA certificates). We use no security servers.

  The view admin console shows the following for servers connection:

  The server certificate is not approved.

  The server certificate cannot be verified.

  For the vCenter, he said (that I have validated manually the certificate):

  No problems found.

  Certificate is not approved, but the thumbprint of the certificate is accepted.

  With the connection series on 'full', States that the login server logs for the vCenter server:

  TRACE (B 17-0 - 0E98) < VCHealthUpdate > [NativeKeyVault] validateCertificateChain response: {result = FAIL, EndEntityReasons = cantCheckRevoked, ChainReasons = invalid, SelfSigned = false, EndErrorCode = 16777280, EndInfoCode = 258, ChainErrorCode = 16777280, ChainInfoCode = 256, PolicyErrorCode =-2146885613}

  As far as I can see there no similar entries for login server certificates in the newspaper.

  At the moment I am under the environment with composer and vCenter certificates manually valid and invalid connection (red) server certificates (as view clients and browsers are not disabled).

  I already checked that I am able to do everything 'green' again via setting the registry key 'CertificateRevocationCheckType'2 (as described here Configure the server certificates certificate revocation check). This brings me to the conclusion that one of the intermediate certificates cannot be validated. So, I had the information a "version" of an intermediate (intermediate certification authority) certificate has been revoked. There seems to be no coincidence - like the time point is as well, but this particular version does not appear to be used in the servers of my connection.

  However, even with full logging enabled, I can't information which (intermediate) certificate cannot be validated and why. I expected to see something like 'OCSP verification' or 'check the CRL' but I can't find it in the newspapers. However, I noticed that one of the intermediate certificates lacked the OCSP URL (even if the field "Authority Information Access" existed). Of course I updated the certificate with a version that contains the OCSP URL, but it has not changed anything.

  In addition, I checked manually all of the certificates in the chain with openssl (for OCSP) and CRLs as well, but everything seems to be OK (all URLS are accessible and no opportunity of certificate has been revoked). Actually, I do not interpret the error as "that the connection to the server is an invalid certificate because it has been revoked", but "it cannot check if it has been revoked. The servers do not need a proxy and nothing configured, so (I checked the proxy settings system context, also).

  For now, the problem is not critical, such as 'red' status connection server has no effect on our customers and so I could turn off certificate revocation check (or switch to check that the certificate of the server (2)). But of course, I would really solve the problem.

  Is there someone who can give me a hint on what to check, for example, how do I know which certificate cannot be controlled and why? Someone had the same or a similar problem? Support VMware is working on the problem as well, but they seem don't know is not the problem, either.

  I appreciate the thoughts and responses! Thank you!

  Best regards

  Fabian

  Dear community,

  During this time, I was able to correct the error described at the beginning of this thread. Jump to the end to see what could probably help you...

  1. At first, I installed an additional standalone VMware View Server connection in order to check the following related certificates:
     1. VMware support always told me to renew my certificates because they "were not valid" etc. - even if in fact they were (like external URL calls and attested manual verification and tests).
     2. That's why I created new additional certificates for the login server and configured to include the vCenter even as my production environment - only difference was I didn't inlcude the composer who runs the server vCenter himself.
     3. The result was that the server was "green" including both the vCenter Server certificate which could be 'not reliable' by the environment of production - strange, huh?
  2. After I reset the additional server to a turned wink where connection to the server was not yet installed (before that, I uninstalled the connection to the server in case there is information in vCenter thereon) and reinstalled as a replica of the production environment server. Somehow I expected this, but still quite strange the vCenter Server (and composer) now again was considered "invalid", even if the certificate of the server connection itself considered still valid and green. For test purposes, so I put certifice revocation checking on '2' (only one server certificate check) - but only on the 'old' production servers' and 'magical' everything has been considered valid. So as I see it, there seems to be some sort of information stored on the 'old' connection servers that makes them believe that invalid certificates and that the information is replicated on the third server unless I lower the revocation of the certificate controls on these servers. Altervative explanation could be that VMware View does not accept certificates with aliases that do not include the 'real' server name - that is / was in fact certificates the old servers connection. The new server certificate connection included the real name and the alias. I understand if this is the case, but then I expect that it be documented somewhere (I have not found this information) and also wouldn't understand why it worked without problem for several years before.
  3. After finding that out, I created new certificates for the 'old' connection servers, including aliases and real names and replaced the certificate on one of the servers (and restarted the login server) - only a few successfully. Once I put the revocation checking on '4' again on this server, the login server certificate was still considered valid, but not the vCenter and certificate of composer.
  4. Now, I've uninstalled the old login server (removed from the view) and reinstalled completely (including an update of the 2008 R2 2012 R2 OS) and after I have it reintegrated into the environment, everything remained green - as long I have will activate revocation checking on the second login server "old." This is why I did the same with this (completely reinstalled and reinstated it) and now everything is green with the revocation checking enabled on all replicas of server connection.
  5. The next step I uninstall the additional replica because I created only for troubleshooting purposes.

  So what will no doubt help in similar cases:

  • Reinstall the servers of connection one by one, including:
  • Uninstalling html access (if used), uninstall the login server to view, uninstall 'VMware' AD LDS Instance.
  • Removal of the connection to the server of replication group: run "s - r s uninstalled_ vdmadmin.exeservername" on one of the servers connection remaining.
  • Reinstall/Update OS (may not be necessary, but I did not test that)
  • Reininstall, return to the login server replica. If you used the certificates which included only the alias of the server I recommend you to create new ones, including the name of the server as well, but maybe it's not necessary as well. If you want to keep the certificates which only inlcude the alias it will be necessary to install this certificate after the first replication of the servers (see below).

  My question for technicians of VMware/developers: It is supported to use certificates include only the server alias. Otherwise why it worked before and where is it documented? Where are certificate cached information so that simply replace the certificate was only some, and not a complete success (see above). FYI - when I paired initially replicas that I had to install the CA (including only the pseudonym) after the first replication - now with certificates (including the server name and the alias), I could install the certificate before you replicate (= the login server installation).

• With VMware View Server using LDAPS (port 636)

  I've been responsible for something that seems impossible/not supported.

  VMware View Server uses port 389 for LDAP.  My task is to do view to use instead the port 636 (LDAP over SSL).  The accusation is that the replicated servers in VMware View data not encrypted between other on port 389.

  So far in my quest, I did no progress in this project.  However, I was able to test that manual connections can now be performed (with ADSI Edit) with port port SSL 636 other replicated servers view.  Problem is that the view seems to have hard-coded to use port 389 and cannot be moved to use LDAPS.

  There are instructions to do something like this in vCenter (http://www.vstable.com/2012/01/27/vcenter-5-active-directory-web-services-error-1209/) (Security Virtual Lab: & amp; nbsp;) Architecture - Blog - proSauce), but nothing related to the sight of the surfaces in a Google search.

  Someone at - it have a Yes or whinny if possible?

  EDIT: Moved to the correct community.

  It is not easy being responsible for something impossible!

  Connection view servers have an AD LDS instance, and replication between servers using the AD LDS replication. This is a replication mechanism secure by using the replication RPC, LDAP and Kerberos and secure without having to implement LDAP over SSL on 636.

  The articles you refer to are actually on the definition of a port number unused LDAPS access of Web Active Directory Services with vCenter Server to get rid of an event without danger. It does nothing to do with replication between LDAP servers. View prevents remote access Active Directory Web services anyway with a specific firewall rule so that remote users have no access to it.

  The only reason why you can use LDAPS with AD LDS is if you support simple LDAP connections. The use of SSL would mean that the simple bind passwords are not sent in the clear. In the case of the view, simple LDAP connections are not enabled in any case.

  In summary, what you're trying to do is useless.

  Mark

• Distributed replication of file system between servers with different performances

  If the published file system replication is set between servers with different performances. What will happen with the fastest server performance? The performance will shrink to match the performance of the server in the slower string?

  This issue is beyond the scope of this site and must be placed on Technet or MSDN

  http://social.technet.Microsoft.com/forums/en-us/home

  http://social.msdn.Microsoft.com/forums/en-us/home

• Hyper-v replication between servers with different performances

  If the replication of Hyper-v is set between servers with different performances. What will happen with the performance of the fastest servers? The performance will shrink to match the performance of the server in the slower string?

  This issue is beyond the scope of this site and must be placed on Technet or MSDN

  http://social.technet.Microsoft.com/forums/en-us/home

  http://social.msdn.Microsoft.com/forums/en-us/home

• Maximum extension of the replication servers. How?

  Total Hi,

  I have a question about VMware replication to the experts in this community.

  In our society, we have a vCenter Server, with 60 ESX hosts connected to 12 different locations, all locations are connected via VPN to our headquarters.

  We use replication as follows

  1 vCenter Server (5.5 Build 1378903))

  60 host ESX (5.5 Build 2068190)

  1 unit of replication at Headquarters (5.5.0 Build 1309877)

  10 servers in replication in subsidiaries (5.5.0 Build 1309877)

  Reproduce us in each subsidiary of one ESX to another (LAN) as a concept of the disaster. So, when disaster strikes, we can start the replica of the other server.

  So now, we have 11 subsidiaries and I can only install 10 VMware replication servers.

  VMware KB: limits of operation for MRS 5.1, 5.5 and vSphere replication 5.1 and 5.5 http://www.Google.de/URL?SA=t & rct = j & q = & esrc = s & source = web & cd = 1 & ved = 0CCEQFjAA & url=http%3A%2F%2Fkb.vmware.com%2Fkb%2F2034768 & ei = JtObVfeHOMX9ygOw5LO4Cg & usg = AFQjCNE7ZOTP7TzxH-2fvYc8WY88VMvPXA & cad = AJLN

  When I use the other replication server that this subsidiary, and then all the traffic goes beyond the line of VPN (WAN) and impact on users and the speed of the line.

  There is no option, because the lines are between 0.5 and 20 Mbps. And replication is local, so why copy differentials twice via the VPN!

  We have no RS, only the functionality of replication VMware included.

  How can I get more then 10 replication servers?

  Install the second vCenter and get 10 more?

  Buy the big brother of MRS?

  Best regards

  Andreas

  The limit is 10 VR devices by vCenter (independent of the use of connected mode) so an extra vCenter allow you to deploy a device VR on your 11th site (and 9 more in the future).

• Archive of virtual servers

  I would like to be able to archive virtual servers that we probably use more but maybe. If we look at a vCenter server image copy/extraction, save the imagre away by using our backup system, remove the virtual server vCenter, but still want the ability to be able to restore the image if need be.

  Did someone do something like the above? Any recommendations of how best to extract the image from vCenter?

  Welcome to the Forums - you can use a third party such as Veeam Backup or Vizioncore vRanger connection tool or you can export the VM in an OVF and then move on a tape, then re-import when image OVF.

  If you find this or any other answer useful please consider awarding points marking the answer correct or useful

• Load balancing and replication between two ESX servers

  This point is covered in another post last month, but I want to assure you that I am

  erase before ordering anything.  We run a VMware

  Server (ESX Server 3.5 Enterprise version).  I have about 12 VM

  running on the server. The server is connected to via fiber channel to

  a Clariion drive Bay.  We backup each virtual computer inside the virtual machine, not outside in

  it.

  I want to buy an additional VMware Server which

  provide redundancy. The second server VMware will also point the

  Bay of same discs (shared storage).  It will store some VM as well.

  What

  I want to do is to have two servers balance between them.

  Also, I want that there return replication while is a server

  Dies, it will be responsible for all virtual machines.

  What I have

  read, we need to use a combination of VMware HA, DRS and VMotion to make

  all it - OK?  I intend to buy another license of the VI3 enterprise as well as a permit for VirtualCenter Foundation.  Finally, if I have company for both servers ESX licenses and

  VirtualCenter, which gives me VMware HA, DRS and VMotion

  capacity?  I appreciate any guidance on this.

  I don't think you can automatically load the balance between the two boxes.   the shared storage ensures guests / VM have the current data available.  No actual replication necessary.

  Just take your Hardest hit of VM and split them between the two hosts.

  On VMotion?  It is much easier to run just a host with a failure to another identical host.    I have not attemptied it in any other way quite a few facilities.   Do you think that your host is running out of gas?   I used to think that as well, but I'm surprised how much any given host can be loaded up without experiencing consitantly performance problems.    If they are windows?  You can check how the VM is performing pretty easy with the Windows performance tools.  All this with low end Iscsi San, I can only imagine how fiber of rocks on the performance.

• Archive replication (data export)

  Simple question, but I don't know how simple the answer is going to be. Is there a way for us to configure how many times an "automated export" runs on the replication tab in the archiver?
  
  If I check the "Activate Automated Export" turns the export automated literally 10 seconds or something (which initially do not work... because he always ends by running, but is never able to pick-up the NEWLY released documents to export to an archive). When I run export manually, by right-clicking on a archive by clicking on export, it works the way it's suppose to work.
  
  So, I guess if I can increase how many times it will say to like after every 10 minutes and then automatically export might work? Unless someone else can give me a better solution? Thanks in advance!

  We use cron tasks to call the IdcCommand utility to perform work of archive. The cron job will look something like this:

  15 0 * / usr/idc/bin/IdcCommand f /usr/idc/archives/archive-command.hda u sysadmin-l /usr/idc/weblayout/groups/secure/logs/cron-archive-log.txt > / dev/null 2 > & 1

  The exact definition of what job archive to run is defined in the file archive - command.hda. Example:

  LocalData @Properties
  IdcService = EXPORT_ARCHIVE
  IDC_Name = prod
  aArchiveName = RemoveOldRevisions
  dataSource = RevisionIDs
  aDoDelete = 1
  @end

• SRM with migration of replication of storage to new site 1: n

  Hello

  We have 2 sites, site A and site B. We have a few virtual machines to the site are protected & DR configured to site B, with storage replication & vice versa.

  Now, we want to add 2 other sites, the site C & d site.

  1 set up replication of storage between site A and site C for some virtual machines that are protected.

  2. turn the replication of storage between D & B site for some virtual machines protected site.

  3. recovery plan to test for C & D site with disturbing replication between A and B.

  Is this possible? Current version of vSphere is the 5.5 & SRM is 5.8

  Thank you

  Yes, it is possible to keep a few things in mind:

  -SRM requires a vCenter on each site (so you should have 4 total vCenters, 1 each on sites A, B, C & D)

  -SRM requires pairs of servers SRM for each link (so if B C & D are connected to A, you should have a total of 6 servers RS, 3 a and 1 b, C & D)

  -Each virtual machine can only be protected by a single pair of SRM Server (so you can't protect a machine virtual from A to C if it is already protected from A to B in your example)

  -Each virtual machine can be replicated only once, visible to SRM (this is possible with certain suppliers of table alternatives to replicate a LUN to multiple destinations, that's fine when you use SRM as long as MRS. manages only a single replication)

  Check out this blog for other topologies available and details: http://www.benmeadowcroft.com/archive/2015/01/12/vmware-srm-topologies/