Nov 24, 2017 10:18 AM
4 Posts

Not authorized to use server

  • Category: Domino Server
  • Platform: Windows
  • Release: 9.0
  • Role: Administrator
  • Tags:
  • Replies: 2

When trying to route Notes mail from one Domino server to another on the same NNN it fails with the message on the sending server that it is not authorized to access the server on the destination server. The destination server log show Attempt to Access Denied.  This is an intermittent problem that will resolve itself (may be several hours later) without any changes being made. The sending server is in the LocalDomainServers and also explicitly named in the Access server field on the Server document for the receiving server. Its also not in any Deny Access lists but the fact that this is intermittent would suggest its not a simple issue of permissions.

Nov 25, 2017 9:33 AM
145 Posts
Try dong a "Trace" from the source server to destination during good times and then during...
From Server Console on Alice/PNPHCL to check connectivity to Emily/PNPHCL whose dns address is emily.swg.usma.ibm.com



Trace emily.swg.usma.ibm.com
[001D5C:00000A-0000000000001204] Determining path to server EMILY.SWG.USMA.IBM.COM
[001D5C:00000A-0000000000001204] Available Ports:  TCPIP
[001D5C:00000A-0000000000001204] Checking normal priority connection documents only...
[001D5C:00000A-0000000000001204] Allowing wild card connection documents...
[001D5C:00000A-0000000000001204] Enabling name service requests and probes...
[001D5C:00000A-0000000000001204] Checking for EMILY.SWG.USMA.IBM.COM on TCPIP using address 'EMILY.SWG.USMA.IBM.COM'
[001D5C:00000A-0000000000001204]   Requesting IP Address for EMILY.SWG.USMA.IBM.COM from DNS
[001D5C:00000A-0000000000001204]   DNS returned address X.XX.XXX.XX for EMILY.SWG.USMA.IBM.COM
[001D5C:00000A-0000000000001204]   Requesting IP Address for EMILY.SWG.USMA.IBM.COM from DNS
[001D5C:00000A-0000000000001204]   DNS returned address X.XX.XXX.XX for EMILY.SWG.USMA.IBM.COM
[001D5C:00000A-0000000000001204] EMILY.SWG.USMA.IBM.COM is the address of server CN=Emily/O=PNPHCL
[001D5C:00000A-0000000000001204] Connected to server Emily/PNPHCL
[001D5C:00000A-0000000000001204] Attempting Authenticated Connection
[001D5C:00000A-0000000000001204] Compression is Disabled
[001D5C:00000A-0000000000001204] Encryption is Disabled




or

Trace Emily/PNPHCL
[001D5C:00000A-0000000000001204] Determining path to server EMILY/PNPHCL
[001D5C:00000A-0000000000001204] Available Ports:  TCPIP
[001D5C:00000A-0000000000001204] Checking normal priority connection documents only...
[001D5C:00000A-0000000000001204] Local network connection document found for Emily/PNPHCL
[001D5C:00000A-0000000000001204]   Verifying address 'emily.swg.usma.ibm.com' for EMILY/PNPHCL on TCPIP
[001D5C:00000A-0000000000001204]       Using address 'X.XX.XXX.XX' for EMILY/PNPHCL on TCPIP
[001D5C:00000A-0000000000001204]   Connected to server EMILY/PNPHCL
[001D5C:00000A-0000000000001204] Attempting Authenticated Connection
[001D5C:00000A-0000000000001204] Compression is Disabled
[001D5C:00000A-0000000000001204] Encryption is Disabled



Could be the DNS is resolving to a different server at different times.....

jpaganet@us.ibm.com
jpaganet@pnp-hcl.com
john.paganetti@gmail.com
Dec 5, 2017 9:11 AM
4 Posts
Trace feedback

Thanks for your suggestion. Doing a trace DNS resolved to the correct IP and attempted to authenticate with the destination server but this was rejected. Overnight the queued messages were delivered only for connections to be rejected again this morning. Tried refreshing router table and that seemed to resolve the issue.

Will continue to monitor as I'm sure I haven't go to the root of the problem.