Regresar
-
Título
Change Auditor Agents on Windows 2008 Server are not connecting to the Coordinator -
Descripción
You noticed that the Change Auditor Agent running on Windows 2008 Server SP1/SP2 (Legacy Agents) are not connecting anymore.The issue shows the following known symptoms:- The issue started after the 7.0.2 upgrade- Upgraded legacy agents are unable to connect with the following recorded in the AgentServiceProxy log:2019-06-14 07:35:38.691 [44][ERROR][ChangeAuditor.AgentServiceProxy.CAgentServiceProxy.Open(0)] Proxy <agent_server_FQDN>(b1b60b7f-1976-4859-8188-561787973b0b) failed to connect to coordinatorSystem.ServiceModel.CommunicationException: The socket connection was aborted. This could be caused by an error processing your message or a receive timeout being exceeded by the remote host, or an underlying network resource issue. Local socket timeout was '00:05:00'. ---> System.IO.IOException: The read operation failed, see inner exception. ---> System.ServiceModel.CommunicationException: The socket connection was aborted. This could be caused by an error processing your message or a receive timeout being exceeded by the remote host, or an underlying network resource issue. Local socket timeout was '00:05:00'. ---> System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host- Nothing is recorded in the Change Auditor Coordinator logs regarding the Change Auditor Agent connection- Non-Legacy Change Auditor Agents are still able to connect without issues -
Causa
The NPRepository4 SPN is missing for the Coordinator AD Computer object. -
Resolución
Using the AdsiEdit console, navigate to the Coordinator AD Computer object and open the properties.
Edit the servicePrincipalName attribute and add the NPRepository4 SPN list: "NPRepository4(%CA_InstallationName%)/%Coordinator_FQDN%"
You can also use the setspn utility by running the following command from a DC:
setspn -A NPRepository4(%CA_InstallationName%)/%Coordinator_FQDN% %Coordinator_NetBiosName%
Example of the NPRepository4 SPN: NPRepository4(DEFAULT)/SRV-AUDIT.corpdomain.local SRV-AUDIT