Welcome to ISAserver.org

Configuration Storage Server issue

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Installation >> Configuration Storage Server issue

Page: [1]

Message

<< Older Topic Newer Topic >>

Configuration Storage Server issue - 23.Feb.2007 11:25:50 AM

wowbagger

Posts: 15
Joined: 24.Nov.2006
From: Belgium
Status: offline

Hi,

When we try to add an additional ISA 2004 ent server to an existing array we get the following error on the locate configuration storage server section of the setup.

"Setup failed to connect to the specified Configuration storage server computer. This may be because the local computer needs to be added to the Managed ISA Servers computer set.
Error code = 0x8007203a
Error description = The server is not operational"

Current setup is 3 isa servers, a seperate CSS server. We are trying to add a 4th ISA server.

Two ISA servers and the CSS server are in the same domain. One ISA and the 4th we are trying to add are in a subdomain of that domain. e.g.

Array 1
isa1 = isa1.company.org
isa2 = isa2.company.org
css = css.company.org

Array 2
isa3 = isa3.euro.company.org
isa4 (the new one) = isa4.euro.company.org

I verified the system policy and the new isa (isa4) is listed in the "local configuration storage server access" policy on the configuration storage server.

NOTE: I cannot ping from isa4 to the CSS server, but I also cannot ping from isa3 to the CSS server - but that isa is working fine and has access to the CSS.

Please help...

Post #: 1

Featured Links*

RE: Configuration Storage Server issue - 23.Feb.2007 1:48:10 PM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

So you're actually trying to add a second server to one of the arrays, right?

How is it that the CSS is part of an array? Is it co-located on one of the ISA Firewalls?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to wowbagger)

Post #: 2

RE: Configuration Storage Server issue - 24.Feb.2007 4:39:44 AM

wowbagger

Posts: 15
Joined: 24.Nov.2006
From: Belgium
Status: offline

Hi,
The configuration storage server is located on a seperate server, I guess like;

css.company.org
|
------------------------------------
|                                            |
Array 1                                 Array 2
isa1.company.org                  isa3.euro.company.org
isa2.company.org                  isa4 (the new one that's having the issue)

So we get the message when trying to connect isa4.euro.company.org to CSS.company.org.

Tia,
Filip

(in reply to tshinder)

Post #: 3

RE: Configuration Storage Server issue - 25.Feb.2007 1:04:39 PM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

It could be a name resolution issue. Can the machine resolve it's own name and can it resolve the name of the CSS?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to wowbagger)

Post #: 4

RE: Configuration Storage Server issue - 26.Feb.2007 3:15:24 AM

wowbagger

Posts: 15
Joined: 24.Nov.2006
From: Belgium
Status: offline

Nameresolution works on both ends, turns out it was a blocked port (2171) on an MPLS router. Now I have an additional error

"Setup failed while importing secrets"

snippet of the log file

15:58:48 ISA setup CA INFO   : LoadStorage succeeded
15:58:48 ISA setup CA INFO   : StorageInitialized OK
15:58:48 ISA setup CA INFO   : This is a deferred CA - ADAM server name should be already set in registry
15:58:48 ISA setup CA INFO   : ADAM server name is: defraidcnm01.company.org
15:58:48 ISA setup CA INFO   : Server=defraidcnm01.company.org, Username=(null), Domain=(null)
15:58:49 ISA setup CA INFO   : There are Secrets to import
15:58:49 ISA setup CA INFO   : Starting sending RPC to one of existing members

15:58:59 ISA setup CA INFO   : Import Secrets Progress 3 precent
15:59:09 ISA setup CA INFO   : Import Secrets Progress 6 precent
15:59:19 ISA setup CA INFO   : Import Secrets Progress 10 precent
15:59:29 ISA setup CA INFO   : Import Secrets Progress 13 precent
15:59:39 ISA setup CA INFO   : Import Secrets Progress 16 precent
15:59:49 ISA setup CA INFO   : Import Secrets Progress 20 precent
15:59:59 ISA setup CA INFO   : Import Secrets Progress 23 precent
16:00:09 ISA setup CA INFO   : Import Secrets Progress 26 precent
16:00:19 ISA setup CA INFO   : Import Secrets Progress 30 precent
16:00:29 ISA setup CA INFO   : Import Secrets Progress 33 precent
16:00:39 ISA setup CA INFO   : Import Secrets Progress 36 precent
16:00:49 ISA setup CA INFO   : Import Secrets Progress 40 precent
16:00:59 ISA setup CA INFO   : Import Secrets Progress 43 precent
16:01:09 ISA setup CA INFO   : Import Secrets Progress 46 precent
16:01:19 ISA setup CA INFO   : Import Secrets Progress 50 precent
16:01:29 ISA setup CA INFO   : Import Secrets Progress 53 precent
16:01:39 ISA setup CA INFO   : Import Secrets Progress 56 precent
16:01:49 ISA setup CA INFO   : Import Secrets Progress 60 precent
16:01:59 ISA setup CA INFO   : Import Secrets Progress 63 precent
16:02:09 ISA setup CA INFO   : Import Secrets Progress 66 precent
16:02:19 ISA setup CA INFO   : Import Secrets Progress 70 precent
16:02:29 ISA setup CA INFO   : Import Secrets Progress 73 precent
16:02:39 ISA setup CA INFO   : Import Secrets Progress 76 precent
16:02:49 ISA setup CA INFO   : Import Secrets Progress 80 precent
16:02:59 ISA setup CA INFO   : Import Secrets Progress 83 precent
16:03:09 ISA setup CA INFO   : Import Secrets Progress 86 precent
16:03:19 ISA setup CA INFO   : Import Secrets Progress 90 precent
16:03:29 ISA setup CA INFO   : Import Secrets Progress 93 precent
16:03:39 ISA setup CA INFO   : Import Secrets Progress 96 precent
16:03:49 ISA setup CA INFO   : Import Secrets Progress 100 precent
16:03:49 ISA setup CA INFO   : UI Level is ok to display a message box
Setup was unable to update array storage data. To update storage data, there must be connectivity between this computer and at least one ISA Server array member, and between that array member and the Configuration Storage server.

There is connectivity between all ISA servers (they all can resolve and ping each other), I'm really stumped here...

< Message edited by wowbagger -- 26.Feb.2007 10:08:52 AM >

(in reply to tshinder)

Post #: 5

RE: Configuration Storage Server issue - 27.Feb.2007 5:01:09 AM

wowbagger

Posts: 15
Joined: 24.Nov.2006
From: Belgium
Status: offline

The eventlog show the following error

Routing configurations for some intra-array servers are not defined properly. Routing to intra-array servers should be configured to use the local intra-array network adapter. Intra-array servers that do not comply with this configuration: 10.223.1.101.

Am I correct in assuming that I need a seperate NIC for intra-array communication between all my array members?

Is it a good idea to put two branch office proxy servers in the same array when they are on totaly seperate networks (one is in switserland the other in belgium), assuming that I need some way of intra-array communication?

Tia,
Filip

< Message edited by wowbagger -- 27.Feb.2007 6:17:04 AM >

(in reply to wowbagger)

Post #: 6

RE: Configuration Storage Server issue - 27.Feb.2007 8:43:12 AM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Array members need to be on the same internal and external networks. You can put machines in different offices in the same array.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to wowbagger)

Post #: 7