Networker
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: [Networker] Mailbox Backup: Access denied

2002-09-24 06:54:47
Subject: Re: [Networker] Mailbox Backup: Access denied
From: Ingo Roschmann <ingo AT VISIONET DOT DE>
To: NETWORKER AT LISTMAIL.TEMPLE DOT EDU
Date: Tue, 24 Sep 2002 06:54:45 -0400 
Thierry,

nsrexecd is running with an account that has exchange admin and domain
admin privileges, so that should be ok.

But there is another strange thing: the client resource corresponding to
the backup of the information store was configured with the domain admin as
remote user (which is not necessary, I know, but is an artefact from some
testing), which never was a problem; but yesterday this caused the backup
of the information store to fail with the message:
"A required privilege is not held by the client."
Removing the remote user entry fixed the problem (but not the mailbox
backup problem, of course, which is configured through a different client
resource).

So I'm wondering if this all is some strange behaviour of the exchange
server or the domain controller?

Who has got an idea?
Ingo


On Mon, 23 Sep 2002 20:22:55 +0200, Faidherbe, Thierry
<Thierry.Faidherbe AT HP DOT COM> wrote:

>Ingo,
>
>It's probably the nsrexecd that's started with local Admin account
>that has not enough Exchange Admin rights.
>
>Have a try to define at service level an account who has been
>granted of Exchange Admin rights and then to restart the nsrexecd
>service. Then start a new backup to see if things are going better.
>
>HTH,
>
>Thierry
>
>
>
>Kind regards - Bien cordialement - Vriendelijke groeten,
>
>Thierry FAIDHERBE
>
>Storage & Server Integration Practice
>Tru64 Unix and Legato EBS Consultant
>
> *********       *********   HEWLETT - PACKARD
> *******    h      *******   1 Rue de l'aeronef/Luchtschipstraat
> ******    h        ******   1140 Bruxelles/Brussel/Brussels
> *****    hhhh  pppp *****
> *****   h  h  p  p  *****   100/102 Blv de la Woluwe/Woluwedal
> *****  h  h  pppp   *****   1200 Bruxelles/Brussel/Brussels
> ******      p      ******   BELGIUM
> *******    p      *******
> *********       *********   Phone :    +32 (0)2  / 729.85.42
>                             Mobile :   +32 (0)498/  94.60.85 ***
>CHANGED ***
>                             Fax :      +32 (0)2  / 729.88.30
>     I  N  V  E  N  T        Email :    thierry.faidherbe AT hp DOT com
>                             Internet : http://www.hp.com/
>________________________________________________________________________
>_____
>
>MOBISTAR SA/NV
>
>SYSTEM Team Charleroi, Mermoz 2 Phone : +32 (0)2  / 745.75.81
>Avenue Jean Mermoz, 32          Fax :   +32 (0)2  / 745.89.56
>6041 GOSSELIES                  Email : tfhaidhe AT mail.mobistar DOT be
>BELGIUM                         Web :   http://www.mobistar.be/
>________________________________________________________________________
>_____
>
>
>
>
>-----Original Message-----
>From: Ingo Roschmann [mailto:ingo AT VISIONET DOT DE]
>Sent: Monday, September 23, 2002 2:06 PM
>To: NETWORKER AT LISTMAIL.TEMPLE DOT EDU
>Subject: Re: [Networker] Mailbox Backup: Access denied
>
>
>Hello Scott,
>
>I checked the logfile on the Exchange Server (see below) and I tried
>initiating a mailbox backup from the exchange server command line with
>the
>same result;
>I tried the mailbox backup with different mailboxes all of which are
>existing on the system, same result;
>I put the Exchange Administrator in the Remote User field of the
>appropriate client resource, with the effect, that when probing the
>backup
>I get the error message "A required privilege is not held by the
>client."
>
>What to do now?
>
>Regards,
>Ingo
>
>
>Here ist the logfile of the Exchange Server corresponding to the
>networker
>server logfile of my last posting:
>
>-----
>
>Start time Mon Sep 16 13:29:28 2002
>Computer Name: NBGN504A     User Name: Exchange_adm
>System Version: 4.0 Build 1381 Service Pack 6
>ESEBCLI.DLL Version: 5.5.2653.11
>ESEBCLI.DLL Comments: Service Pack 4
>nsrxchsv.exe Version: 2.0.005 Build: 225
>nsrxchsv.exe Comments: 2.0 Patch 5
>Command line:
>  C:\Program Files\nsr\bin\nsrxchsv.exe -s nbgn549a -g mbox -LL -m
>nbgn504a -l full -W 78 -N MSEXCH:MB/PuglieseG MSEXCH:MB/PuglieseG
>Active ANSI Code Page: 1252; OEM Code Page: 437
>Non-cluster environment on node NBGN504A.
>Options:
>  Compress: False
>  Server: nbgn549a
>  Save set name: MSEXCH:MB/PuglieseG
>  Pool: None
>  Group: mbox
>  Level: full
>Started PerfMon update thread (Id: 587)
>Performance monitor update thread running
>
>Backing up Microsoft Exchange Private Mailboxes ...
>Error: /Private Mailboxes/PuglieseG (/Private Mailboxes/PuglieseG)
><mailbox
>not found>
>Processed 0 files 0 KB  in 0:00:01  0 bytes/second
>Stopping performance monitor update thread.
>CreateFileMapping error: Access is denied.
>Performance monitor update thread terminating
>Exiting with error status 263040: unknown error 263040 (0x40380)
>Completion time Mon Sep 16 13:29:35 2002
>
>Start time Mon Sep 16 13:30:16 2002
>Computer Name: NBGN504A     User Name: Exchange_adm
>System Version: 4.0 Build 1381 Service Pack 6
>ESEBCLI.DLL Version: 5.5.2653.11
>ESEBCLI.DLL Comments: Service Pack 4
>nsrxchsv.exe Version: 2.0.005 Build: 225
>nsrxchsv.exe Comments: 2.0 Patch 5
>Command line:
>  C:\Program Files\nsr\bin\nsrxchsv.exe -s nbgn549a -g mbox -LL -m
>nbgn504a -l full -W 78 -N MSEXCH:MB/PuglieseG MSEXCH:MB/PuglieseG
>Active ANSI Code Page: 1252; OEM Code Page: 437
>Non-cluster environment on node NBGN504A.
>Options:
>  Compress: False
>  Server: nbgn549a
>  Save set name: MSEXCH:MB/PuglieseG
>  Pool: None
>  Group: mbox
>  Level: full
>Started PerfMon update thread (Id: 413)
>Performance monitor update thread running
>
>-----
>
>And here is the results of a try on the client as domain admin (the
>result
>as exchange admin are the same):
>
>(nsrxchsv -v -c nbgn504a -s nbgn549a -l full -b tagessicherung
>MSEXCH:MB/PuglieseG)
>
>-----
>
>Start time Fri Sep 20 10:00:08 2002
>Computer Name: NBGN504A     User Name: Administrator
>System Version: 4.0 Build 1381 Service Pack 6
>ESEBCLI.DLL Version: 5.5.2653.11
>ESEBCLI.DLL Comments: Service Pack 4
>nsrxchsv.exe Version: 2.0.005 Build: 225
>nsrxchsv.exe Comments: 2.0 Patch 5
>Command line:
>  nsrxchsv /?
>Active ANSI Code Page: 1252; OEM Code Page: 437
>Non-cluster environment on node NBGN504A.
>Options:
>  Compress: False
>  Server: None
>  Save set name: None
>  Pool: None
>  Group: None
>  Level: Copy
>xchutil.c(1529): Bad argument(s)
>Error parsing parameter: /?
>Exiting with error status 160: The argument string passed to DosExecPgm
>is
>not correct.
>Completion time Fri Sep 20 10:00:08 2002
>
>Start time Fri Sep 20 10:00:18 2002
>Computer Name: NBGN504A     User Name: Administrator
>System Version: 4.0 Build 1381 Service Pack 6
>ESEBCLI.DLL Version: 5.5.2653.11
>ESEBCLI.DLL Comments: Service Pack 4
>nsrxchsv.exe Version: 2.0.005 Build: 225
>nsrxchsv.exe Comments: 2.0 Patch 5
>Command line:
>  nsrxchsv --help
>Active ANSI Code Page: 1252; OEM Code Page: 437
>Exiting with error status 87: The parameter is incorrect.
>Completion time Fri Sep 20 10:00:18 2002
>
>Start time Fri Sep 20 10:01:50 2002
>Computer Name: NBGN504A     User Name: Administrator
>System Version: 4.0 Build 1381 Service Pack 6
>ESEBCLI.DLL Version: 5.5.2653.11
>ESEBCLI.DLL Comments: Service Pack 4
>nsrxchsv.exe Version: 2.0.005 Build: 225
>nsrxchsv.exe Comments: 2.0 Patch 5
>Command line:
>  nsrxchsv -v -c nbgn504a -s nbgn549a -l full -b tagessicherung
>MSEXCH:MB/PuglieseG
>Active ANSI Code Page: 1252; OEM Code Page: 437
>Non-cluster environment on node NBGN504A.
>Options:
>  Compress: False
>  Server: nbgn549a
>  Save set name: None
>  Pool: tagessicherung
>  Group: None
>  Level: full
>Started PerfMon update thread (Id: 494)
>Performance monitor update thread running
>CreateFileMapping error: Access is denied.
>Performance monitor update thread terminating
>
>Backing up Microsoft Exchange Private Mailboxes ...
>Error: /Private Mailboxes/PuglieseG (/Private Mailboxes/PuglieseG)
><mailbox
>not found>
>Processed 0 files 0 KB  in 0:00:02  0 bytes/second
>Stopping performance monitor update thread.
>Exiting with error status 263040: unknown error 263040 (0x40380)
>Completion time Fri Sep 20 10:02:30 2002
>
>-----
>
>
>On Tue, 17 Sep 2002 14:39:38 -0700, Scott Bingham <sbingham AT LEGATO DOT COM>
>wrote:
>
>>Hello Ingo,
>>
>>The logfiles found at ...nsr\applogs\nsrxch*.log are always much better
>for
>>troubleshooting Exchange Module problems.
>>
>>The message "<mailbox not found>" is saying that there is no such
>mailbox
>on
>>this system.
>>
>>Does a manual save of this user work?  If so, use the name that you see
>in
>>nsrxchsv.log from the successful operation.
>>
>>If you are sure that you have the correct name, there are improvements
>BSMEx
>>2.0 that make it more tolerant of naming discrepancies within Exchange
>>Server, available through our Support people.
>>
>>Hope that this helps,
>>_Scott
>>
>>-----Original Message-----
>>From: Ingo Roschmann [mailto:ingo AT VISIONET DOT DE]
>>Sent: Tuesday, September 17, 2002 7:42 AM
>>To: NETWORKER AT LISTMAIL.TEMPLE DOT EDU
>>Subject: [Networker] Mailbox Backup: Access denied
>>
>>
>>Hi all,
>>
>>I'm trying to backup an individual mailbox with the BSO 2.0 for
>Exchange
>>Server (Networker Server is 6.1.1, Unix), but all I get is the error
>message
>>"CreateFileMapping error: Access is denied." and in the following
>"<mailbox
>>not found>".
>>
>>I followed the Manual, especially
>>- the networker remote exec service is run by an account that has
>exchange
>>admin and domain admin privileges
>>- this account is listed in the remote access field in the client
>resource
>>of the exchange server
>>
>>The output if I run the savegroup verbously is:
>>
>>
>>nbgn504a:MSEXCH:MB/PuglieseG              level=full
>>09/16/02 01:30:01 PM savegrp: Run up to 4 clients in parallel
>>09/16/02 01:30:01 PM savegrp: nbgn504a:probe
>>started
>>savefs -s nbgn549a -c nbgn504a -g mbox -p -l full -R -v -F
>>MSEXCH:MB/PuglieseG
>>09/16/02 01:30:16 PM savegrp: nbgn504a:probe succeeded.
>>rcmd nbgn504a, user root: `savefs -s nbgn549a -c nbgn504a -g mbox -p -l
>>full -R -v -F MSEXCH:MB/PuglieseG'
>>nsrexec: authtype nsrexec
>>type: NSR client description;
>>pools supported: Yes;
>>browse time supported: Yes;
>>remote user: Exchange_adm;
>>groups: Domain Users, Everyone, FTP-User, Administrators, Backup
>Operators,
>>Server Operators, Users, Domain Admins, Sekretariat, ms, bts, SERVICE,
>>Authenticated Users;
>>arch: Windows NT;
>>client OS type: Windows NT Server on Intel;
>>CPU type: INTEL_PENTIUM;
>>CPUs: 1;
>>IP address: 172.29.188.9;
>>machine type: server;
>>MB used: 25126;
>>NetWorker version: 6.1.1.Build.238;
>>OS: Windows NT 4.0;
>>version: 6.1.1.Build.238;
>>save set: path="MSEXCH:MB/PuglieseG", arg="MSEXCH:MB/PuglieseG",
>>level=full, diskno=0, max_sessions=1, stype=save ;
>>parallelism: 8
>>nbgn504a:MSEXCH:MB/PuglieseG       level=full, dn=0, mx=1,
>vers=ssbrowse,
>>p=4
>>09/16/02 01:30:16 PM savegrp: nbgn504a:MSEXCH:MB/PuglieseG
>>started
>>nsrxchsv.exe -s nbgn549a -g mbox -LL -m nbgn504a -l full -W 78 -N
>>MSEXCH:MB/PuglieseG MSEXCH:MB/PuglieseG
>>09/16/02 01:30:25 PM savegrp: nbgn504a:MSEXCH:MB/PuglieseG succeeded.
>>* nbgn504a:MSEXCH:MB/PuglieseG rcmd nbgn504a, user root: `nsrxchsv.exe
>-s
>>nbgn549a -g mbox -LL -m nbgn504a -l full -W 78 -N MSEXCH:MB/PuglieseG
>>MSEXCH:MB/PuglieseG'
>>* nbgn504a:MSEXCH:MB/PuglieseG Non-cluster environment on node
>NBGN504A.
>>* nbgn504a:MSEXCH:MB/PuglieseG CreateFileMapping error: Access is
>denied.
>>* nbgn504a:MSEXCH:MB/PuglieseG
>>* nbgn504a:MSEXCH:MB/PuglieseG Backing up Microsoft Exchange Private
>>Mailboxes ...
>>* nbgn504a:MSEXCH:MB/PuglieseG Error: /Private Mailboxes/PuglieseG
>>(/Private Mailboxes/PuglieseG) <mailbox not found>
>>* nbgn504a:MSEXCH:MB/PuglieseG Exiting with error status 263040:
>unknown
>>error 263040 (0x40380)
>>09/16/02 01:30:25 PM savegrp: nbgn504a:index
>>started
>>save -s nbgn549a -S -g mbox -LL -f - -m nbgn549a -V -l full -LL -W 78
>-N
>>index:c377bb1f-00000004-3c10d922-3c160759-00930000-
>>c0a80001 /nsr/index/nbgn504a
>>09/16/02 01:31:04 PM savegrp: nbgn504a:index succeeded.
>>* nbgn504a:index rcmd localhost, user root: `save -s nbgn549a -S -g
>mbox -
>>LL -f - -m nbgn549a -V -l full -LL -W 78 -N index:c377bb1f-00000004-
>>3c10d922-3c160759-00930000-c0a80001 /nsr/index/nbgn504a'
>>* nbgn504a:index NSR server nbgn549a: busy
>>* nbgn504a:index save: waiting 30 seconds then retrying
>>* nbgn504a:index save: save successfully started
>>* nbgn504a:index /nsr/index/nbgn504a/db6/3d811c87.rec
>>...
>>* nbgn504a:index /nsr/index/nbgn504a/db6/3d73ee73.rec
>>* nbgn504a:index /nsr/index/nbgn504a/db6/
>>* nbgn504a:index /nsr/index/nbgn504a/
>>* nbgn504a:index
>>  nbgn549a: index:nbgn504a          level=full,     13 MB 00:00:09
>341
>>files
>>* nbgn504a:index completed savetime=1032175855
>>09/16/02 01:31:05 PM savegrp: nsrim run recently, skipping
>>
>>
>>Any Ideas?
>>
>>Thanks,
>>Ingo
>>
>>--
>>Note: To sign off this list, send a "signoff" command via email
>>to listserv AT listmail.temple DOT edu or visit the list's Web site at
>>http://listmail.temple.edu/archives/networker.html where you can
>>also view and post messages to the list.
>>=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=
>>
>>--
>>Note: To sign off this list, send a "signoff" command via email
>>to listserv AT listmail.temple DOT edu or visit the list's Web site at
>>http://listmail.temple.edu/archives/networker.html where you can
>>also view and post messages to the list.
>>=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=
>
>--
>Note: To sign off this list, send a "signoff" command via email
>to listserv AT listmail.temple DOT edu or visit the list's Web site at
>http://listmail.temple.edu/archives/networker.html where you can
>also view and post messages to the list.
>=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=
>
>--
>Note: To sign off this list, send a "signoff" command via email
>to listserv AT listmail.temple DOT edu or visit the list's Web site at
>http://listmail.temple.edu/archives/networker.html where you can
>also view and post messages to the list.
>=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=

--
Note: To sign off this list, send a "signoff" command via email
to listserv AT listmail.temple DOT edu or visit the list's Web site at
http://listmail.temple.edu/archives/networker.html where you can
also view and post messages to the list.
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=
[More with this subject...]
<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [Networker] mminfo output into a file, Primoz Golob
Next by Date:  [Networker] AW: [Networker] Slow (really slow) AIT-3 drives, Clemens Zerbe
Previous by Thread:  Re: [Networker] Mailbox Backup: Access denied, Faidherbe, Thierry
Next by Thread:  Re: [Networker] Mailbox Backup: Access denied, Dan Francis
Indexes:  [Date] [Thread] [Top] [All Lists]