Notes Registration Class :: Error :: with the CA process
Hello all
I have a very critical problem here at the ministry of Health in Canada Province of Quebec.
I really need your help. It is very important. We have 30,000 users. And the impacts are huge.
We are currently migrating 3000 users to a 2nd and 3rd low balancing clusters.
We have an application that creates user accounts automatically with The UserRegistration Class.
I'm using the CA process.
The application was running smooth for the last 4 year in the first environment: An application server with two clustered mail servers. As part of the migration we had installed the application in the second and third environments which are similar.
Now after months of test we always get the same error.
The error is unique and has never appeared before. Nevertheless, we have spent a huge amount of hours and narrowed the problem to the code inside of the Notes Registration itself.
In Short after the execution of the server agent and after getting the error: “You are not authorized to perform that operation…” we have some results that are not complete, here they are:
- I have a working names user document in the address book
- I have a working id
- The mail database has been created and it has been deleted as you can see in the logs (look at the time that the log logs the deletion and the time the application server logs the error: “you are... “)
Here is the Architecture:
AS = Application Server
Mail server in cluster
C1 = Mail server cluster 1 and Registration server (CA process)
C2 = Mail server cluster 2
Here is the business case:
The application server (AS) runs an application schedule agent full (3) execution rights.
The Notes Registration Class ask (C1) to be the Registration server
and asks C1 to be the mail server.
It also asks the Notes Registration Class to create a replica on (C2)
Here are the logs :
AS (application server)
2012/03/09 14:42:42 AMgr: 'Agent 'Processus dispatcher | processusDispatcher' in 'Reg\Coordination\GDeManDE.nsf' will run on
behalf of 'Administration &06TCR/Technocentre Regional/Reg06/SSSS'
2012/03/09 14:42:42 Agent 'Processus dispatcher | processusDispatcher' in database 'Reg\Coordination\GDeManDE.nsf' signed by
'Administration &06TCR/Technocentre Regional/Reg06/SSSS' is running in Full Administrator mode
2012/03/09 14:42:48 Certifying TESTGRAPE01 TESTGRAPE01/Berthiaume du Tremblay/Reg06/SSSS
2012/03/09 14:43:24 AMgr: Agent ('Processus dispatcher | processusDispatcher' in 'Reg\Coordination\GDeManDE.nsf') printing:
Notes error: Vous n'êtes pas autorisé(e) à effectuer cette opération (TESTGRAPE01)
IN INGLISH you are not authorized to perform this operation
C1 (application server and Registration server (CA process))
2012-03-09 14:42:48 Database mail\CHSLD\bert\TTESTGRA.nsf created by TCR06APP00009/Serveurs/SSSS
2012-03-09 14:42:48 Recovery Manager: Assigning new DBIID for K:\mail\CHSLD\bert\TTESTGRA.nsf (need new backup for media recovery).
2012-03-09 14:42:49 The ACL in database mail\CHSLD\bert\TTESTGRA.nsf has been changed by TCR06APP00009/Serveurs/SSSS.
2012-03-09 14:42:54 Certifying TESTGRAPE01 TESTGRAPE01/Berthiaume du Tremblay/Reg06/SSSS
2012-03-09 14:42:54 CA Process (OU=Berthiaume du Tremblay/OU=Reg06/O=SSSS): Certificate Request processed.
2012-03-09 14:43:22 The ACL in database mail\CHSLD\bert\TTESTGRA.nsf has been changed by TCR06APP00009/Serveurs/SSSS.
2012-03-09 14:43:23 Database mail\CHSLD\bert\TTESTGRA.nsf deleted by TCR06APP00009/Serveurs/SSSS
2012-03-09 14:44:12 AMgr: Error opening database 'mail\CHSLD\bert\TTESTGRA.nsf' after receiving agent document update message: File does not exist
Version : 6.56 FP3 hot fix 367
Windows 2003
We have used all expertise (admins and developers) and have no solution to this big problem.
We would appreciate if you can gives us support or a hot fix to this bug if any.
Thanks
Alfredo Duran
Développeur et Architecte Web
Projet: Migration of users
Technocentre régional
Agence de la santé et des services sociaux de Montréal
4835, avenue Christophe-Colomb
Montréal (Québec)
H2J 3G8
Tél : 514 597-2058 # 4082
Télécopieur : 514 524-3362
alfredo.duran@ssss.gouv.qc.ca
goznevi@gmail.com
http://intranet.mtl.rtss.qc.ca