Welcome to ISAserver.org

Synching issues

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> Installation and Planning >> Synching issues

Page: [1]

Message

<< Older Topic Newer Topic >>

Synching issues - 5.Jun.2007 5:53:51 AM

Grape

Posts: 22
Joined: 31.Mar.2005
Status: offline

Can anyone help with my problem, as it's driving me up the wall. Configuration is;

Server01 is a W2K3/SP2, configured as a CA and has ISA2006 EE installed (both CSS and ISA Services). Server02 has ISA2006 EE installed (ISA services only) and both are in the array Array01.

Currently, they servers won't synch and the only error message that I have is in the Server01 system log at boot time. This is a schannel error (id=36884) stating that 'The certificate received from the remote server does not contain the expected name'. I've chceked the certs and they seem fine. The root cert from the CA is installed and trusted on both servers and the server cert for Server01 is installed on server01.

Is the scannel message a red herring or do I have a problem with my certs that is stopping the synching from working?

Any help gratefully received,

Grape.

Post #: 1

Featured Links*

RE: Synching issues - 11.Jun.2007 9:07:07 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Grape,

That is a valid message and indicates that you've messed up the common names on the certificates or you're not referring to the servers by their common names or your DNS is horked.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Grape)

Post #: 2

RE: Synching issues - 12.Jun.2007 3:57:35 AM

Grape

Posts: 22
Joined: 31.Mar.2005
Status: offline

Hi Tom,

Thanks for the reply. I've rerun ISACERTTOOL, leaving off the /keepcerts switch. I also noticed that I was getting a message about missing subnets on the intra-array NIC.

Correcting these two things has resolved the issue.

Regards,

Paul

(in reply to tshinder)

Post #: 3

RE: Synching issues - 12.Jun.2007 10:31:09 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Paul,

Great! Good to hear you got it working and thanks for the follow up!

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Grape)

Post #: 4