• No results found

IBM Tivoli Monitoring Active Directory Option

N/A
N/A
Protected

Academic year: 2021

Share "IBM Tivoli Monitoring Active Directory Option"

Copied!
46
0
0

Loading.... (view fulltext now)

Full text

(1)

IBM

Tivoli

Monitoring

Active

Directory

Option

Release

Notes

Version

5.1.1

FX02

(2)
(3)

IBM

Tivoli

Monitoring

Active

Directory

Option

Release

Notes

Version

5.1.1

FX02

(4)

Note:Beforeusingthisinformationandtheproductitsupports,besuretoreadthegeneralinformationunder “Notices”onpage35.

SecondEdition(March2005)

Thiseditionappliestoversion5release1modificationlevel1ofIBMTivoliMonitoringActiveDirectoryOption andtoallsubsequentreleasesandmodificationsuntilotherwiseindicatedinneweditions.

(5)

Contents

Release

Notes

.

.

.

.

.

.

.

.

.

.

.

. 1

Aboutthisdocument . . . 1

Accessingpublicationsonline. . . 1

OrderingPublications . . . 2

ProvidingFeedbackaboutPublications . . . . 2

Supportinformation. . . 2

FeaturesandBenefits . . . 2

SystemRequirements . . . 4

SoftwareRequirements . . . 4

Supportedoperatingsystemsforendpoints . . . 5

InstallingtheTMW_DCs_Perfresourcemodel’s prerequisite:Microsoftdatabaseperformance object. . . 5

UsingwlcftaptoenabletheTMW_InterSite_Repl, TMW_InterSiteRepl_Traff,and TMW_DNS_ADIntegratedresourcemodels . . . 5

MicrosoftHotfixesthatarerecommended . . . 6

HardwareRequirements . . . 6

InstallationNotes. . . 6

InstallingtheProduct . . . 6

UninstallingtheProduct . . . 9

ConfiguringtheWebHealthConsole . . . 9

ConfiguringtheEventServer . . . 10

PatchesandAPARsIncluded . . . 10

KnownProductDefects,Limitations,and Workarounds . . . 11

DocumentationChanges . . . 11

Documentationchangesforinstallationissues . . 12

Documentationchangesforreferenceissues . . 12

Documentationchangesforproblem determination . . . 20

Support

information

.

.

.

.

.

.

.

.

. 31

Searchingknowledgebases . . . 31

Searchtheinformationcenteronyourlocal systemornetwork . . . 31

SearchtheInternet . . . 31

Obtainingfixes . . . 31

ContactingIBMSoftwareSupport . . . 32

Determinethebusinessimpactofyourproblem 33 Describeyourproblemandgatherbackground information . . . 33

SubmityourproblemtoIBMSoftwareSupport 33

Notices

.

.

.

.

.

.

.

.

.

.

.

.

.

. 35

(6)
(7)

Release

Notes

ThisReleaseNotesdocumentprovidesimportantinformationaboutIBM Tivoli®

MonitoringActiveDirectoryOptionVersion5.1.1,FX02,hereafterreferredtoasthe

FeatureOptionforIBMTivoliMonitoringActiveDirectoryOption.Thesenotesare

themostcurrentinformationfortheproductandtakeprecedence overallother

documentation.

Please reviewthesenotesthoroughlybeforeinstallingorusingthisproduct.

Thesereleasenotes includethefollowingtopics:

v “Aboutthisdocument”

v FeaturesandBenefits

v SystemRequirements

v InstallationNotes

v

KnownProductDefects,Limitations,and Workarounds

v DocumentationChanges

About

this

document

Thissectionprovides generalinformationaboutthis documentandaboutsupport

options.

Accessing

publications

online

ThedocumentationCDcontainsthepublicationsthatareintheproductlibrary.

TheformatofthepublicationsisPDF, HTML,orboth.

IBM postspublicationsforthisand allotherTivoliproducts,astheybecome

available andwhenevertheyareupdated,totheTivolisoftwareinformationcenter

Website.AccesstheTivolisoftwareinformationcenterbyfirst goingtotheTivoli

software libraryat thefollowingWebaddress:

http://www.ibm.com/software/tivoli/library/

Scrolldownandclick theProduct manualslink.IntheTivoliTechnicalProduct

DocumentsAlphabeticalListingwindow,clickMtoaccessalloftheIBMTivoli

Monitoringproductmanuals.

Note: IfyouprintPDFdocumentsonotherthanletter-sizedpaper,settheoption intheFile→ PrintwindowthatallowsAdobeReadertoprintletter-sized

pagesonyourlocalpaper.

TheIBM SoftwareSupportWebsiteprovidesthelatestinformationaboutknown

productlimitationsandworkarounds intheformoftechnotesforyourproduct.

Youcanviewthis informationatthefollowingWebsite:

(8)

Ordering

Publications

YoucanordermanyTivolipublicationsonline atthefollowingWebsite:

http://www.elink.ibmlink.ibm.com/public/applications/publications/cgibin/pbi.cgi

Youcanalsoorderbytelephonebycallingoneofthese numbers:

v IntheUnitedStates:800-879-2755

v

InCanada:800-426-4968

v Inothercountries,fora listoftelephonenumbers,seethefollowingWebsite:

http://www.tivoli.com/inside/store/lit_order.html

Providing

Feedback

about

Publications

IBM wantstohearaboutyourexperiencewith Tivoliproductsanddocumentation,

and welcomesyour suggestionsforimprovements.Ifyouhavecommentsor

suggestionsaboutproductsanddocumentation, contactusin oneofthefollowing

ways:

v Sendane-mailtopubs@tivoli.com.

v Completeourcustomer feedbacksurveyatthefollowingWebsite:

http://www.tivoli.com/support/survey/

Support

information

“Support information”onpage31describesthefollowingoptionsforobtaining

support forIBM® products:

v “Searchingknowledgebases”onpage31

v “Obtainingfixes”onpage31

v “ContactingIBMSoftwareSupport”onpage32

Features

and

Benefits

TivoliMonitoringActiveDirectoryOptionVersion5.1.1FX02hasthefollowing

featuresandbenefits:

Feature Benefit

IntegrationwithTivoliFramework andIBMTivoliMonitoring

v

Tivolienvironmentandinfrastructure

v

Familiaruser-interface

v AbilitytomonitorWindows2000/2003domaincontrollersasTivoli

endpoints

v AbilitytomonitorWindows2000/2003DomainNameSystem(DNS)and

Windows2000DynamicHostConfigurationProtocol(DHCP)serversas Tivoliendpoints

v AbilitytosendeventstotheTivoliEnterpriseConsole

v AbilitytosendeventstotheTivoliBusinessSystemManagerconsole

v Abilitytologdataforanalysisanddisplay

v AbilitytoviewonlineandhistoricaldataontheWebHealthConsole

v

Abilitytosetthresholds

v

AbilitytousenewresourcemodelstogetherwithexistingTivoliMonitoring

resourcemodels,suchasresourcemodelsintheSystemcategory.

(9)

Feature Benefit

ResourcemodelstailoredtoActive DirectoryOption

Abilitytomonitortheperformance,availability,andhealthofActiveDirectory Optionkeyservicesandobjectssuchas:

v Domaincontrollers

v AllocationofFlexibleSingleMasterOperations(FSMO)roles

v Replicationefficiencywithinandbetweenmultiplesites

v WindowsDHCPserver

v WindowsDNSserver

Error-handlingcapability AbilitytodisplayerrormessagesontheWebHealthConsoleaboutthe following:

v

Missingprerequisitesonendpoints

v Thestatusofresourcemodels

v Configurationerrorsthatcancauseresourcemodelstostop

IBMTivoliMonitoringResourceModelBuilderenablesadvanceduserstocreate

custom resourcemodels andisavailablefordownloadat

http://www-3.ibm.com/software/tivoli/resource-center/availability/code-monitor-resource.jsp.

Table1 summarizestheupdatesinproductfunctionalitythatFeatureOptions1

and 2provide.“DocumentationChanges”onpage11describesdetailsofthenew

functionality. Table1.Updatestoproductfunctionality

Functionality Description

Operatingsystemsupport TivoliMonitoringActiveDirectoryOptionnowsupportsWindows2003Standard EditionandWindows2003EnterpriseEdition.

Uninstall Uninstalloftheupgrade.Thewuninstallcommandandashellscriptareavailablefor theuninstalloftheVersion5.1.1FX02oftheproduct.

Linuxserversupport SupportforinstallingtheproductontoaLinuxTivolimanagementregionwasadded. Thisnewfeatureisdescribedin“DocumentationChanges”onpage11.

Newtasks ListDefaultFirstServerstasklistsdomaincontrollerobjectsintheDefault-First-Site indicatingthatthedomaincontrollerhasnotbeenassignedtoasite.

ListOrphanedObjectstaskdetectsobjectsthathavebeenorphaned.

See“DocumentationChanges”onpage11fordetails.

Resourcemodels

Generalupdates Updateddeprecatedservicemethods:ThereweredeprecatedAPIswithinallthe resourcemodelsforloggingandevents.Theseresourcemodelshavenowbeen updated.

Deprecatedfunctions:ThisreleaseofTivoliMonitoringActiveDirectoryOption updatesdeprecatedfunctionswithintheresourcemodels.

Serviceabilityupdates:Tracingentryandexitofallresourcemodelfunctionswas addedtoallowmoreaccurateandcompletefunctiontracingcapabilities.

EnhancedtheActive DirectoryIntegratedDNS resourcemodel(Internal name:

TMW_DNSADIntegrated)

IncludetheWindows2003DomainDNSZonesandForestDNSZonespartitionsin additiontotheoriginalwin2kDomain,Schema,andConfigurationPartitions.The resourcemodelnowmonitorstheADIntegratedzonedatawhenstoredinanyofthe ActiveDirectorypartitionsavailableforzonedata.

(10)

Table1.Updatestoproductfunctionality (continued)

Functionality Description

EnhancedtheIntra-site replicationtrafficresource model(Internalname: TMW_IntraSiteReplTraff)

Gatherandanalyzestatisticalinformationrelatedtotheabilitytoresolveallqueries withinthelocaldomain.“NeweventforTMW_IntraSiteReplTraffresourcemodel”on page13providesmoredetails.

EnhancedtheInter-and Intra-siteReplication resourcemodels(Internal names:

TMW_InterSiteRepland TMW_IntraSiteRepl)

v Collectadditionalnetworklatencyinformation

v MonitorNTP(NetTimeProtocol)availability,timesynchronization,andtimesettings

updates.

CodelogicchangeforInter-siteReplicationresourcemodel:Resourcemodelcode functionalitythatexistedintheinitializationportionoftheresourcemodelwouldmiss thedynamicreassignmentoftheBHSforasitebytheKnowledgeConsistencyChecker (KCC)asthedetectionofaSitesBridgeHeadServer(BHS)wouldonlyhappenatInit. ThecodefunctionforlocatingtheBHSwithinasitehasnowbeenrelocatedtotheVisit Tree(thecodethatrunoneachresourcemodelcycle)toallowthediscoveryofdynamic BHSreassignmentbytheKCCaftertheresourcemodelinitialization.

EnhancedtheDomain ControllerAvailability resourcemodel(Internal name:TMW_DCs_Avail)

Pingdomaincontrollerstoverifyconnectivitypriortoanyattemptstoaccessthe controllersremotely.SendeventsonFSMORolereassignmentandeventonreplication partnersthatareunreachable.See“DocumentationChanges”onpage11fordetails.

EnhancedtheDomain ControllerPerformance resourcemodel(Internal name:TMW_DCs_Perf)

See“Networklatencyfeatures”onpage18formoreinformation.

MonitorNTDSconnections.See“DocumentationChanges”onpage11fordetails.

EnhancedtheFile ReplicationService Performanceresource model(Internalname: TMW_FRSPerformance)

ExplicitlymonitorGPOreplication.See“DocumentationChanges”onpage11for details.

CreatedtheDomain Trustsresourcemodel (Internalname: TMW_DCs_Trusts)

Monitordomaintruststoreporttruststhatareadded,dropped,orfailed.See “DocumentationChanges”onpage11fordetails.

Note: FeatureOption2 includestheenhancementsfromtheFeatureOption1.

System

Requirements

The followingsectionslistthesoftwareandhardwarerequirementsforinstalling

theFeatureOptionforIBMTivoliMonitoringActiveDirectoryOptiononTivoli

servers.

Software

Requirements

The FeatureOptionforIBMTivoliMonitoringActiveDirectoryOptionrequiresthe

followingsoftware:

v TivoliManagementFramework,Version3.7.1orhigher

v

IBMTivoliMonitoring,Version5.1.1

Note: IfyouuseTivoliDistributedMonitoring, Version3.7, youmust migrateto

IBMTivoliMonitoring, Version5.1.1,asdescribedinthedocumentation

forIBM TivoliMonitoring,Version5.1.1.

(11)

Note: AllWindows 2000/2003domaincontrollersonwhichresourcemodels are

runningrequiretheWindows2000/2003SupportToolscomponenttobe

installed.Youcaninstallthis componentfromtheWindows2000/2003

ServerinstallationCD.

For theprerequisitesnecessarytousetheresourcemodels,refertotheappropriate

section intheTivoliMonitoringActiveDirectory OptionReferenceand theTivoli

MonitoringUser’sGuide.

Supported

operating

systems

for

endpoints

Thefollowinglistexplainsoperatingsystem supportforIBMTivoliMonitoring

Active DirectoryOptionendpointsthatrunonWindows:

v TheproductsupportsWindows2000Server Editionand Windows2000

AdvancedServerEditionforendpoints.BothoperatingsystemsrequireService

Pack3 orlater,andServicePack5 isrecommended.

v TheproductsupportsWindows2003StandardEditionandWindows 2003

EnterpriseEditionforendpoints.

v TheproductdoesnotsupportActive Directorymixedmode,whichisalimited

implementationthatsupportsbothWindows2000/2003andNTdomain

controllersonthesameforestenvironment.

Table2.SummaryofendpointsupportfortheproductenvironmentonWindows Endpoint’soperatingsystem ServicePacks

Windows2000ServerEdition ServicePack3orlaterisrequired.ServicePack5 isrecommended.

Windows2000AdvancedServer Edition

Windows2003StandardEdition — Windows2003EnterpriseEdition

Installing

the

TMW_DCs_Perf

resource

model’s

prerequisite:

Microsoft

database

performance

object

TheIBM TivoliMonitoringActiveDirectoryOptionTMW_DCs_Perfresource

modelusesperformance countersthatrequire thatyouinstall theMicrosoft

database performanceobject.

Note: Thisperformance objectisnotinstalledbydefaultwhenyouinstallthe

Windows2000orWindows 2003software.

More detailedinfoisavailable intheIBM DocumentControlFacility(DCF) item

#1139002,Whatarethe DataProvidersofthe ITMforActive DirectoryOptionresource

models?For informationaboutinstallingthedatabaseperformance object,seethe

followingMicrosoft Website:

http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/ \ activedirectory/deploy/adguide/addeploy/addch09.mspx

Using

wlcftap

to

enable

the

TMW_InterSite_Repl,

TMW_InterSiteRepl_Traff,

and

TMW_DNS_ADIntegrated

resource

models

Toenable theTMW_InterSite_Repl,TMW_InterSiteRepl_Traff,and

(12)

command. Ifthedomaincontrollertowhichyoudistributed theresourcemodelis

nota GlobalCatalog,youmust runthefollowingwlcftapcommandonthat

endpoint:

wlcftap -r domain-name/user-name

where user-nameidentifiesa userthatisamemberoftheDomainUsersgroupand

canlogintothedomainonthisdomaincontroller.

Microsoft

Hotfixes

that

are

recommended

ItisrecommendedthatyouinstallthefollowingHotfixesfromMicrosoft.Consult

theMicrosoft Websiteforfurtherupdatesandrecommendations.

v ForWindows2000(contact Microsoftandaskfor thefixesthatgowith the

Qnnnnnn):

Q811370_W2K_SP4_X86_EN Q812782_W2K_SP4_X86_EN Q819629_W2k_SP4_X86_EN Q823210_W2K_SP5_x86_EN

v ForWindows2003:

KB837175

Hardware

Requirements

The followingtableslisttheestimateddiskspacerequiredfor installingTivoli

MonitoringActiveDirectoryOptiononTivoliservers.Theestimateddiskspace

includesspaceforthebinaries(bin),Lcf_bundles,and messagecatalogs.

Binaries Lcf_bundles MessageCatalogs

300KB 500KB 60KB

The minimumhardwarerequirements(CPUand RAM)forinstallingtheproduct

onTivoliservers arethesameastheminimum requirementsforinstallingthe

TivoliManagement Framework.

Installation

Notes

For informationregardingtheinstallationof thebase product,TivoliMonitoring

5.1.1,refertotheTivoliMonitoringUser’sGuide.

Installing

the

Product

Likeitsparentproduct,TivoliMonitoring, youcaninstallIBM TivoliMonitoring

Active DirectoryOptioninthefollowingways:

v WiththeTivoli SoftwareInstallationService

v

FromtheTivolidesktop

v Fromthecommandlineinterface(CLI)

Note: CDsor downloadedimagesare providedfortheinstallationofthebase

product.Thefeature optiondescribedintheserelease notesisprovidedina

.tarfilethatisavailable throughIBM CustomerSupport.Ifyoudonothave

acustomer supportcontactperson,see“ContactingIBM SoftwareSupport”

(13)

Before

You

Begin

Pleasereadthefollowingnotesbefore youbegintoinstall theproduct:

v InstallthisproductonlyonTivoliservers.

v Decideonwhichservers youare goingtoinstall theproduct.

v Ensurethattheselectednodesmeetthehardwarerequirementsforthe

installation.

v

Ensurethattheselectednodesmeetthesoftwarerequirementsforthe

installation.

v Ensurethatyouhaveadministratorprivilegestoperform theinstallation.

v Backupyour databasebeforeyoubegintoinstalltheproduct.

Installing

with

Tivoli

Software

Installation

Service

TivoliSoftwareInstallationServicecaninstall multipleTivoliproductsonmultiple

systemsinparallel.ThisJava-basedproductcaninstallmoreproductsonmore

systemsinmuchlesstimethantheFramework’sinstall facility.Software

InstallationServiceperformsproductprerequisitechecksand,ifdefined,

user-specified prerequisitechecks,ensuringasfewinstall failuresaspossible.In

mostcases,failuresoccuronlywhenmachinesareturnedofforremovedfromthe

network.

SoftwareInstallationServicealso createsaninstallationrepositoryintowhichyou

canimporttheinstallationimageofoneormore Tivoliproducts.Youcanimport

onlythoseinterpretertypesneededinyour environment,whichsavesdiskspace

and importtime. Theinstallationrepositoryisthen thesourceofallyourTivoli

installations.Youcanevenshare asingleinstallation repositoryacrossmultiple

regions.

Tivolirecommends thatyouupgradetheTivoliManagementFrameworkinstall

facility inyourcurrentTivoliinstallationbyinstallingtheSoftwareInstallation

Service. Ifyouare installingTivoliproductsforthefirsttime, installtheSoftware

InstallationServiceonthefirst managednode runninganoperatingsystem thatis

supportedbytheSoftwareInstallationService.Afteryouhaveinstalledit,youcan

usetheSoftwareInstallationServiceproducttoinstall otherTivoli products.

For detailsoftheoperatingsystemsonwhichtheSoftwareInstallationServicecan

run, andforinstructionsoninstallingthisproductandusingittoinstall other

products,refertotheTivoliSoftwareInstallationServiceUser’sGuideand theTivoli

SoftwareInstallationServiceReleaseNotes.

Installing

the

Feature

Option

from

the

Tivoli

desktop

TousetheTivolidesktoptoinstalltheFeatureOptionfor IBMTivoliMonitoring

Active DirectoryOption,performthefollowingsteps:

Note: Youmustinstall IBMTivoliMonitoringActiveDirectoryOption5.1.1before

youinstall theFeatureOption.

1. InserttheproductCDintotheCD-ROMdrive.

2. StarttheTivolidesktop.

3. From theDesktopmenuselectInstall–>InstallPatch.TheInstallPatch

dialogopens.

Note: Forthenext step,itisassumedthatyouhavecontactedTivoliLevel 2

supportstaff toobtainthe.tarfilethatcontainsthefeatureoption.The

(14)

installation.Ifyoudo nothavea contactpersonat TivoliLevel2

support,see“ContactingIBMSoftwareSupport”onpage32.

4. If IBMTivoliMonitoring,ActiveDirectoryOption,Version 5.1.1Feature Option 2isdisplayedintheSelectPatch toInstallscrollinglist,gotostep 8. —OR—

IfIBMTivoliMonitoring,ActiveDirectoryOption,Version 5.1.1Feature Option 2isnotdisplayed intheSelectPatch toInstallscrollinglist,continue

with step5.

5. Click SelectMedia.TheFileBrowserdialogopens.

6. Type orselectthelocationoftheTivoliCDinthePathNamefieldby

completingoneofthefollowingtasks:

v Typethecompletepathtothe/cdromdirectoryintheCDinthePathName

field.(Use forwardslashestospecifythepath.)

v Browsethefilesystembycompletingthefollowingsteps:

a. IntheHostsscrollinglist,selectthehost(ordrive)onwhichtheCD is

mounted.Choosing ahostupdatestheDirectoriesscrollinglisttoshow

thedirectories(underroot)ofthehostyouselected.

b. IntheDirectoriesscrollinglist,double-clickthedirectorythatcontains

theinstall media.Choosinga directoryupdatestheFileslist.

7. Click SetMedia& Close.TheInstallPatchdialogreopens.TheSelectPatch

to Installscrollinglistshowstheproductsthatareavailable forinstallation.

8. Select thefollowingproductfromtheSelectPatch toInstallscrollinglist:

IBMTivoliMonitoring,ActiveDirectoryOption,Version 5.1.1Feature Option 2

9. Ensure thattheappropriatehostisdisplayedintheClientstoInstallOn

scrollinglist.

Ifit isnotdisplayed,selecttheserveronwhichyouwanttoinstall the

selectedproductfromtheAvailableClientsscrollinglist,andusetheleft

arrowtomovetheselectedservertotheClientstoInstallOnscrollinglist.

10. Click Installtobegininstallingtheproduct.The PatchInstalldialogopens.It

provides alistoftheoperationstobe performedand warnsofanyproblems

youmightwanttocorrectbeforeinstalling.

11. ReviewthestatusinformationandclickContinueInstall.ThePatchInstall

dialoginformsyouwheninstallation iscomplete.

12. Click Close.

Installing

the

Feature

Option

from

the

Command

Line

Use thewpatchcommandtoinstalltheFeatureOptionforIBMTivoliMonitoring

Active DirectoryOptionfromthecommandline.

Note: Youmustinstall IBMTivoliMonitoringActiveDirectoryOption5.1.1before

youinstall theFeatureOption.

For thisprocedure,it isassumedthatyouhavecontactedTivoliLevel2 support

staff toobtainthe.tarfilethatcontains thefeature option.Thereadmefilethat

comeswiththe.tarfilegivesdetailedinstructions forinstallation.Ifyoudonot

havea contactpersonat TivoliLevel2 support,see“Contacting IBMSoftware

Support” onpage32.

wpatch–cpath/upgrade-iindex_fileserver

(15)

path

Specifiesthecompletepathtothe/cdromortothe/upgradedirectoryinthe

CD.(Useforwardslashestospecifythepath.)

index_file

Specifiestheproductindexfile,511ADOF2.IND,fromwhichtheFeature

Optionisinstalled.

server

TheFeatureOptionforIBM TivoliMonitoringActiveDirectoryOptionwillbe

installedontheserveryouspecify.

For moreinformationaboutthewpatchcommand, refertotheTivoliManagement

Framework ReferenceManual.

Uninstalling

the

Product

TheTivoliManagement Frameworkprovidesthewuninstcommandtoremove

Tivoliapplicationsfroma specifiednodeorfromtheentireregion.Youcanusethe

wuninstcommandwith theIBMTivoliMonitoringActiveDirectoryOption

producttagtoremovetheproductfromyourservers.

Touninstall IBMTivoliMonitoringActiveDirectoryOption,enterthefollowing

command:

wuninsttagnamedestination_target -rmfiles where:

tagname

IstheregisteredproducttagforIBMTivoliMonitoringActiveDirectoryOption

thatisprovidedbyTivoli:

TMNT_AD

destination_target

Istheserverfromwhichyouwanttoremovetheproduct.

Note: Theuninstallationprocessremovesthemonitoringproduct,butitdoesnot

stoporremovetheresourcemodelsfromprofilesorfromendpoints.You

mustmanuallyremovetheresourcemodels.

For moreinformationaboutcommandlinesyntaxand usageofthewuninst

command, refertothefollowing:

v TivoliManagementFramework ReferenceManual

v TivoliManagementFramework ReleaseNotesServer,Gateway, andEndpoint.

Configuring

the

Web

Health

Console

Inordertoview resourcemodel namesina descriptiveform,do thefollowing:

Note: The.classfilesareonlyavailableonthebaseinstallationmedia.For

example,thefiles areavailableontheinstallationCDforversion5.1.1ofthe

product.NationalLanguageSupportand translationstolanguages other

thanEnglisharenotavailablefortheFX02featureoption.

1. InserttheproductCD-ROMand switchtotheHCONSOLEdirectory

2. Copythe.classfilesonthefollowingdirectoryontheserverwheretheWeb

(16)

<WHC_dir>/installedApps/dm.ear/dm.war/WEB-INF/classes/com/tivoli/DmForNt/resources

3. Stopandstart theWebHealthConsole

Configuring

the

Event

Server

On theTivoliEnterpriseConsoleserver,youneedtoinput,compile,and loadinto

theTivoliEnterpriseConsolerule basethatisactiveallbarocfilesincludedinthe

product. ThereadmethatcomeswiththeTARfileforthisfeatureoption provides

detailedinformationaboutthisprocess.

The barocfiles,whicharecontainedinthedirectory$BINDIR/TMNT_TECofthe

TivoliManagement Regionserver)are:

v TMW_DCs_Avail.baroc

v TMW_DCs_Perf.baroc

v TMW_DHCPPerformance.baroc

v TMW_DNSPerformance.baroc

v TMW_DNS_ADIntegrated.baroc

v TMW_FRSPerformance.baroc

v

TMW_InterSite_Repl.baroc

v TMW_InterSite_ReplTraff.baroc

v

TMW_IntraSite_Repl.baroc

v TMW_IntraSite_ReplTraff.baroc

v TMW_ReplPerf.baroc

v TMW_DCs_Trusts.baroc

Patches

and

APARs

Included

The followingAPARsandpatches havebeen includedinTivoliMonitoringActive

DirectoryOption5.1:

Table3.APARsfortheproductinActiveDirectory3.7 TivoliDistributedMonitoringfor

ActiveDirectory3.7

APARsincluded

3.7-DAD-0001(June27,2002) IY32073,IY25803,IY29338,IY29952,IY29984,IY29986,IY30459,IY30685, IY30997,IY31000,IY31007,IY31384,IY32440

3.7-DAD-0002E(October30,2002) IY32681,IY32747,IY32875,IY33468,IY36087,IY35992,IY35238 3.7-DAD-0003LA(September3,2002) IY37391,IY41781,IY45837

3.7-DAD-0004LA(October28,2003) IY47379,IY49155 3.7-DAD-0005LA(September3,2003) IY533210,122755,122860

Table4.APARsfortheproductinActiveDirectory5.1.0 ActiveDirectoryMonitoringOption

5.1.0(5.1.1)

APARsincluded

5.1.0-ADO-0003LA(May7,2003) IY37391,IY40589,IY41781 5.1.0-ADO-0004LA(September3,2003) IY37391,IY41781,IY45837,116576 5.1.0-ADO-0005LA(October23,2003) IY46370,IY47379,IY49155,117315 5.1.0-ADO-0007LA(November13,

2003)

IY37391,IY50803,IY50152,IY50231,123519,124712,IY50803,IY51512

(17)

Table4.APARsfortheproductinActiveDirectory5.1.0 (continued) ActiveDirectoryMonitoringOption

5.1.0(5.1.1)

APARsincluded

5.1.0-ADO-0009LA(January16,2004) IY50803,IY51512 5.1.0-ADO-0010LA(April23,2004) IY53128

5.1.0-ADO-0011LA(April29,2004) IY56044 5.1.0-ADO-0012LA(August11,2004) IY59948

Table5.DetailsregardingthecontentsofsuccessiveLA(LimitedAvailability)patches

LAPatch 51ADO01E 51ADO02E 51ADO03LA 51ADO04LA 51ADO05LA

LAPatch includes

51ADO01E 51ADO01E

51ADO02E

LAPatch depends

None. None. None. 51ADO03LA 51ADO03LA

51ADO04LA

Resourcemodel changes

SeeNote1. SeeNote2. SeeNote3. SeeNote4.

Notes:

1. TMW_InterSiteRepl.dmws 2. TMW_DCs_Avail.dmws

3. TMW_DCs_Avail.dmwsandTMW_DHCPPerformance.dmws

4. TMW_DCs_Avail.dmws,TMW_InterSiteRepl.dmws,TMW_DNS_ADIntegrated.dmws,and

TMW_DNSPerformance.dmws

Known

Product

Defects,

Limitations,

and

Workarounds

Thissectiondescribes knowndefectsinthis releaseofTivoliMonitoringActive

DirectoryOption.Whereapplicableand known,suggestedworkaroundsare

identified.Thelistof defectsinthissectionmight notbecomplete.

v IntheresourcemodelReplicationPerformancethecomputationofpercentageof

outboundobjectsfilteredmaynotbe accurate.Theproblemisdue tothe

inaccuratevalueof thedirectoryservice (NTDS)performancecounter

DRA/OutboundObjects/sec.TheproblemhasbeensubmittedtoMicrosoft.

v Thedocumentationneedstobeupdatedwiththeinformationprovidedin

“DocumentationChanges.”

Documentation

Changes

Thissectionprovides updatesthatshouldbe addedtothedocumentationforIBM

TivoliMonitoringActiveDirectoryOptionwhenthedocumentationisrevised.The

followingtypesofinformationareprovided:

v “Documentationchangesfor installationissues”onpage12

v “Documentationchangesfor referenceissues”onpage12

v “Documentationchangesfor problemdetermination”onpage20

Some changesupdateexistinginformation.Other changesdescribenew features.

Theoverview sectionoftheuser’sguideshouldmention thatIBMTivoli

(18)

resourcemodels andisavailablefordownloadat

http://www-3.ibm.com/software/tivoli/resource-center/availability/code-monitor-resource.jsp.

Documentation

changes

for

installation

issues

The followingchanges shouldbeaddedtotheinstallationinstructionsatthenext

revision ofthedocumentation:

Installing theproductonLinux:Warningsare displayedwhenyouinstall the

productonaTivolimanagement regionserveronLinux.Thefollowingsteps

describewhen thewarnings aredisplayedandhow torespond:

1. Asrequired,youupgradetheLinux-basedTivolimanagementregion serverto

Version5.1orVersion5.1.1of IBMTivoliMonitoringActiveDirectoryOption.

2. ThefollowingwarningisdisplayedforeachLinuxhostthatisatarget for

installation:

The following problems were encountered: Host <hostname>:

Could not find a valid Binaries media packet listed in the installation index (.IND) file for this type of platform. Check that the source directory is set correctly for what you are trying to do.

Could not find a valid Server Database media packet listed in the installation index (.IND) file for this type of platform. Check that the source directory is set correctly for what you are trying to do.

ThiswarningindicatesthatinstallationoftheFeatureOptionisrequiredto

supplythenecessarymediapackets.

3. ClickContinueInstallto allowtheinstallationofthebaseproducttocomplete.

4. InstalltheFeatureOption.

Documentation

changes

for

reference

issues

The followingchanges mustbe madetoTivoliMonitoringActive DirectoryOption

Reference:

Table6.ChangesfortheTivoliMonitoringActiveDirectoryOptionReferencedocument Typeofchange Textofthechange

UpdatesthatareincludedinFeatureOption01

Adddescriptionofanew task.

See“Enable/DisableIADsTools.dllWindowsEventstask”onpage14.

Adddescriptionof enhancementstothe Intra-siteReplicationand Inter-siteReplication resourcemodels.

(Internalnames: TMW_IntraSiteRepland TMW_InterSiteRepl)

(19)

Table6.ChangesfortheTivoliMonitoringActiveDirectoryOptionReferencedocument (continued) Typeofchange Textofthechange

Addinformationaboutthe Inter-siteReplication Trafficresourcemodel.

(Internalname:

TMW_InterSiteReplTraff)

NeweventforTMW_IntraSiteReplTraffresourcemodel

v

Internalname:TMW_HighInbRatio

v Descriptivename:Highinter-sitetointra-siteinboundbytesratio

v

Description:Indicationissentwhenthenumberofinter-siteinboundbytes

comparedtointra-siteinboundbytesislargerthanthethreshold.Thiscould indicateclientsareusingtoomanyinter-siteresourcesduetoapooractive directoryconfiguration.

v Message:Highinter-sitetointra-siteinboundbytesratio

v Numericattributes:localInboundBytesPerSecand

remoteInboundBytesPerSec

v Defaultsettings: Occurrences 2

Holes 0

Clearing Event FALSE

Send to TEC FALSE

Send to TBSM FALSE

Severity HARMLESS

Newthreshold:

v Internalname:interToIntraRatio

v Descriptivename:IntersitetoIntrasiteRatio

v Details:Theratioofinter-siteinboundbytestointra-siteinboundbytesthat

willcauseaneventtobegenerated.

v Defaultvalue:0.7 Generaldetailsofenhancement:

TheIntrasiteReplicationTrafficresourcemodelwasupdatedtocompare intra-siteinboundbytestointer-siteinboundbytes.Iftheinter-siteinbound bytesisconsistentlylargerthantheintra-siteinboundbytes,thiscould indicatethatyourclientsareusingtoomanyresourcesfromanotheractive directorydomain.

Addinformationaboutthe DomainController

Availabilityresource model.

(Internalname: TMW_DCs_Avail)

EnhancementfortheDomainControllerAvailabilityresourcemodel

pingTimeoutpingsdomaincontrollerstoverifyconnectivitypriortoany attemptstoaccessthecontrollersremotely.Youmustensureremoteaccessto enabletheproducttoverifyremoteReplicationPartners,GlobalCatalogs,and domaincontrollersforFlexibleSingleMasterofOperations(FSMO)rolesin ActiveDirectory.

Youcanselectthemaximumtimeoutvalueforthepingcommand.Youcanset verificationtooccuratoneofthefollowingintervals:5ms,1.5s,15s,1min, 3min,and5min.Slowconnectionsmightrequirealongertimeoutinterval.The timeoutvalueiscumulativeforallconnectivityverificationswithapingretry countof3,assummarizedinthefollowingequation:

(N * 3 = maximum timeout)

whereNistheintervalthatyouspecify.Youmustaccountforthiscumulative effectwhenyousetthecycletimeforaresourcemodel.Ifyousetthecycle timeforaresourcemodeltobelessthanthecumulativepingtimeoutvalue, thecurrentlyexecutingresourcemodelcyclemightnothavetimetocomplete beforeanothercyclestarts.

(20)

Table6.ChangesfortheTivoliMonitoringActiveDirectoryOptionReferencedocument (continued) Typeofchange Textofthechange

Addinformationaboutthe ActiveDirectoryIntegrated DNSresourcemodel.

(Internalname:

TMW_DNS_ADIntegrated)

EnhancementfortheTMW_DNS_ADIntegratedresourcemodel

check_4_Gcdetermineswhetherthedomainmusthaveaninstanceofthe GlobalCatalog.AbestpracticeforActiveDirectoryistohaveaninstanceof GlobalCatalogineachdomain.Thisresourcemodelverifiesthataninstance ofGlobalCatalogispresentinthedomain.ThedefaultisTrue.Ifyousetthis valuetoFalse,youallowvalidationoftheGlobalCataloginstancetobe ignored.

Addinformationaboutthe Enable/Disable

IADsTools.dllWindows Eventstask.

Thefollowinginformationaboutthe″Enable/DisableIADsTools.dllWindowsEvents″ taskshouldbeaddedtothereferencedocumentationatthenextrevision:

Description

EnablesordisablesloggingofeventsfromtheIADsTools.dll.

IADsTools.dllcangeneratealargenumberofevents.Theseeventsarelogged intheWindowseventlog.Tivolireferencessomeoftheseeventstodiscover variouspropertiesofActiveDirectory.UsetheEnable/DisableIADsTools.dll WindowsEventstasktostoptheIADsToolsDLLfromsendingeventstothe WindowsNTEventLog.

Note: IfyouusetheEnable/DisableIADsTools.dllWindowsEventstaskto disableIADsTools.dllevents,thoseeventsstopflowingintothe’NTEvent Log’.CustomerswhousetheOSPACParametricEventLogresourcemodel tomonitorIADsToolseventswouldbeimpactedbythisaction.

Authorizationrole:

senior

Tasklocation:

ITM-ADO-regioninthedesktopoftheTivolimanagementregion

Targetmanagednode:

endpoint

GUIdataentryfield:

Yes|Noradiobuttons.

UpdatesthatareincludedinFeatureOption02

Adddescriptionoffurther enhancementstothe Intra-siteReplication resourcemodeland Inter-siteReplication resourcemodels.

(Internalnames: TMW_IntraSiteRepland TMW_InterSiteRepl)

See“Monitoringthetimesynchronizationofdomaincontrollers”onpage17formore information.

(21)

Table6.ChangesfortheTivoliMonitoringActiveDirectoryOptionReferencedocument (continued) Typeofchange Textofthechange

Adddescriptionof enhancementstothe Domaincontroller availabilityresource model.

(Internalname: TMW_DCs_Avail)

NeweventforDomaincontrolleravailabilityresourcemodel

v Internalname:TMW_FSMORole_Transfered

v Descriptivename:FSMORoleownerhaschanged

v Description:ThisindicationissentwhenanActiveDirectoryFSMOrole

ownerhasbeentransferredfromoneDomainControllertoanother.

v Message:The@fsmoRole@hasbeentransferredfrom@origServer@to

@newServer@.

v Stringattributes:origServer,newServer,fsmorole

v Defaultsettings: Occurrences 1 Holes 0

Clearing Event FALSE Send to TEC True Send to TBSM FALSE Severity Warming

Newthresholds:

None.

Generaldetailsofenhancement:

ThebehaviorofDomaincontrolleravailabilityresourcemodelhasbeen modifiedforthecasewhenareplicationpartnerisnolongeravailable. Formerlytheresourcemodelwouldgointoanerrorstatewhenareplication partnerstilldefinedinActiveDirectorywasnotaccessiblebyDNS.The resourcemodelhasbeenmodifiedsotheindicationUnreachablereplica partnerisraisedandtheresourcemodelnolongergoesintoanerrorstatein thissituation.

TheDomainControllerAvailabilityresourcemodelwasalsoupdatedtosend andeventwhenaFSMOrolehasbeentransferredfromoneDomain

Controllertoanother. Adddescriptionof

enhancementstotheFile ReplicationService performanceresource model

(Internalname:

TMW_FRSPerformance)

Newindication:

GPOInconsistent

Defaultsettings: Occurrences 1

Holes 0

Severity WARNING

Newthresholds:

None.

Generaldetailsofenhancement:

ThisindicationissentifanActiveDirectoryGroupPolicyObjectis inconsistentbetweenlocalSYSVOLdirectoryandtheADsystembasedon GPOversionnumber.

Adddescriptionofthe newDomainTrusts resourcemodel.

(Internalname: TMW_DCs_Trusts)

See“DomainTrustsresourcemodel(Internalname:TMW_DCs_Trusts)”onpage19for moreinformation.

(22)

Table6.ChangesfortheTivoliMonitoringActiveDirectoryOptionReferencedocument (continued) Typeofchange Textofthechange

Descriptionof enhancementstothe DomainController Performanceresource model.

(Internalname: TMW_DCs_Perf)

Newevent:

HighNumberofNTDSConnections.Thiseventissentwhenthenumberof NTDSConnectionobjectsexceedsthethreshold.Theconnectionobjectsare usedinthereplicationprocess.Eachconnectionobjectisusedtoreplicate inboundchangestothedomaincontrollerandtheKCCmanagestheobjects.

v Message:ThecurrentnumberofNTDSConnections(@ActiveConnections@)

exceedstheestablishedthreshold(@ConnectionsThreshold@).

v Numericattributes:ActiveConnections,ConnectionsThreshold

v Severity:WARNING Newthreshold:

v NtdsConnectionsThr:MaxnumberofNTDSConnections

v Description:Replicationperformanceisaffectedbythenumberofinbound

connectionsthatadomaincontrollerreceivesdatafrom.Whenthis thresholdisexceededyoushouldusetheadlbtooltoloadbalancethe connectionobjectswithinyoursite.

v Default:20

Generaldetailsofenhancement:

TheDomainControllerPerformanceresourcemodel(Internalname: TMW_DCs_Perf)isenhancedtoenablemonitoringoftheNTDSConnection objectsusedduringthereplicationprocess.Thisenhancementcreatesthe followingnewthreshold,event,andloggingfeatures:

Adddescriptionofanew task,ListDefaultFirst Servers.

ListDefaultFirstServerstaskisaddedtotheIBMTivoliMonitoringActive DirectoryUtilityTaskslibrary

Thistaskliststheserversthatareamembersofthedefaultfirstsite.Thetask listsallserversthatareamemberofthesitenamed″Default-First-Site-Name″. Thefirstdomaincontrollerthatiscreatedinaforestendsupinthissiteand youmustmoveittothecorrectsiteafteryouhaveitsetup.Thedomain controllersthataremembersofthissitearelikelythereeitherforthatreason orbecausethedomaincontrollerfailedtobeaddedtothecorrectsite.You shouldrunthistasktomakesurenoneofyourdomaincontrollersareinthe defaultsite.

Authorizationrole:

senior

Tasklocation:

ITM-ADO-regioninthedesktopoftheTivolimanagementregion

Targetmanagednode:

endpoint

GUIdataentryfield:

(23)

Table6.ChangesfortheTivoliMonitoringActiveDirectoryOptionReferencedocument (continued) Typeofchange Textofthechange

Adddescriptionofanew task,ListOrphaned Objects.

ListOrphanedObjectstaskisaddedtotheIBMTivoliMonitoringActiveDirectory UtilityTaskslibrary

Thistaskliststheobjectswhosecontainersweredeletedatthesametimethat theobjectwascreated.Ifanobjecthasbeencreatedormovedtoalocation thatwasdeletedafterreplication,thelostobjectisaddedtothe

LostAndFoundcontainer.

Yourunthistasktodeterminewhetheryouneedtorestoretoanewlocation anyoftheobjectsintheLostAndFoundcontainer.Ifyoucontinuetowantthe objectslisted,youshouldrestorethem,otherwisedeletethem.

Note: Thereplicationresourcemodelcreatesanobjectinthelostandfound containertomeasurereplicationperformance.TheListOrphanedObjectstask ignoresthoseobjectswhichhaveaname<servername>(intra)or

<servername>(inter).

Authorizationrole:

senior

Tasklocation:

ITM-ADO-regioninthedesktopoftheTivolimanagementregion

Targetmanagednode:

endpoint

GUIdataentryfield:

None.

Monitoring

the

time

synchronization

of

domain

controllers

Thefollowingnew thresholdandneweventsareprovided asenhancementsfor

theInter- andIntra-siteReplicationresourcemodels(Internalnames:

TMW_InterSiteRepl andTMW_IntraSiteRepl):

New events

Thefollowingnew eventsare available:

BlockedNetTimeProtocolConnection

Thisindicationissentif NetTimecannotproperlysynchronize

with thedesignatednetworktimeprotocolserver.Theresource

modelqueries theWindows NETTIMEcommandfor status.The

behaviorofNetTimeisthedomaincontrollersattempttocontact

thedomaincontrollerthatholdstheprimary domaincontroller

(PDC)FlexibleSingleMasterOperation(FSMO)role.Thedomain

controllerthatholdsthePDCFSMOrolecanqueryanexternal

timesourcetosetthetime.IftheNet Timecommandindicatesan

errortheindicationisraised andtheerrorcode iscaptured.The

event severityisWarningbydefault.Default configurationis1

occurrenceand0 holes.

Note: TheeventforBlockedNTPconnection doesnotoccur while

thereisanyserverwithin theforestthatprovidesatime

syncsource,keepingtheforesttimesynchronized.

Partnertimenotsynchronized

Theindicationcomparesservertimeonthelocalserverwiththe

servertimeofallreplicationpartners.Ifthetimedifferenceisnot

(24)

IfClockDelta Thresholdissetto0, theindicationisdisabled.The

event severityisWarningbydefault.Default configurationis1

occurrenceand0 holes.

ServerClockChange

Theindicationsignalsachangein localservertimebycomparing

thelocalservertimeagainstreplicationpartners.Ifthetimehas

changedrelativetoallreplicationpartners,theindicationisraised.

Theevent severityisMinorbydefault.Defaultconfigurationis1

occurrenceand0 holes.

Note: Thisindicationisdesignedtobe viewedwith TECasit is

onlyavailable foronecyclefollowingaclockchange.A

clearingeventhasnotbeen defined.

New threshold:ClockDelta Threshold

Anewthreshold hasbeenadded,ClockDelta Threshold,andappliesto

theindicationPartnertimenotsynchronized.

Network

latency

features

ExistingresourcemodelsTMW_InterSiteRepl andTMW_IntraSiteReplhavebeen

modifiedtocollectadditionalnetworklatencyinformation.

Eachresourcemodelcreates anobjecttorepresenta localendpointthatisrunning

theresourcemodel.Theobjectisplacedinthelostand founddirectoryofthe

defaultdomain onthelocaldomaincontroller.Theobjecthasonlytwoattributes

and isthereforelimitedin size.

Intra-site replicationresourcemodel

Creates anobject<servername>(intra)whereservernameisthelocalendpoint

runningtheresourcemodel.(Internal name:TMW_IntraSiteRepl)

Inter-site replicationresource model

Creates anobject<servername>(inter)whereservernameisthelocalendpoint

runningtheresourcemodel.(Internal name:TMW_InterSiteRepl)

New events

Thefollowingnew eventshavebeencreated toreportwhenthemeasured

replicationlatencybetweenreplicationpartners exceedsthespecified

ReplicationLatency Threshold(ReplicationLatencyThreshold):

v Forintra-sitereplicationlatency:TMW_IntraSiteRepl_Latent

v Forinter-sitereplicationlatency:TMW_InterSiteRepl_Latent

Theevent isgeneratedbydefaulton1occurrenceand0 holesandhasthe

severityWarning.

Note: ReportedReplicationLatency providesthecurrentmeasureof

replicationlatency.Ifa replicationwith aspecific partnerhasnot

occurred,theReplicationLatencycancontinuetogroweachcycle

untilconsistencyismet.Atthatpoint,ReplicationLatencypersists

untilLatencyFrequency expires.

New thresholds

Thefollowingnew thresholdshavebeencreated:

ReplicationLatencyThreshold

ReplicationLatency Threshold(ReplicationLatencyThreshold),has

(25)

v For intra-sitereplication:Whenmeasuredreplicationlatencyfor

an Intra-sitereplicationpartnerexceedsthespecifiedReplication

Latency Threshold,theeventIntra-sitereplicationlatent

(TMW_IntraSiteRepl_Latent) isgenerated.

v For inter-sitereplication:Whenmeasuredreplicationlatencyfor

an Inter-sitereplicationpartner exceedsthespecifiedReplication

Latency ThresholdtheeventInter-sitereplicationlatent

(TMW_InterSiteRepl_Latent)isgenerated.

New parameter

Anewparameter,Latency Frequency(latencyFrequency),hasbeen created.

Latency Frequencydetermineshowoftenlatencyismeasured,in minutes.

By defaultLatencyisnotmeasuredeverycycletominimizenetwork

traffic.Thedefaultfrequencyis60minutes,meaningthatafter60minutes,

thenetworklatencyofthenext resourcemodelcycle ismeasured.

Note: Thelastreportednetworklatencyvalue persistsuntila new

measurementisstarted.Forexample,provideda 60minuteLatency

Frequencyanda 300second Intra-siteNetwork Latencythevalue,

theeventIntra-sitereplicationlatent continuestoreport

ReplicationLatency=300 eachcycleuntiltheexpirationof60

minuteswhen anewmeasureistaken.

Domain

Trusts

resource

model

(Internal

name:

TMW_DCs_Trusts)

ThisresourcemodelverifiesTrustrelationshipsandsend eventsregardingadded

trusts,dropped trustsandfailingtrusts.Forallexistingtrustrelationships,the

resourcemodelconfirms thefollowing:

v Istheexistingtrustrelationship active?

v Isthesecurechannelwith theparentdomainavailable?

YoudeploytheDomaintrustsresourcemodelatleastonceinadomain tomonitor

trustrelationships.Youcandeploymultipleinstancesofthisresourcemodelina

single domain.For example,whenadomainspansgeographicalsites,youcan

deploy thisresourcemodeltoeverygeographicalsiteencompassed bythedomain.

Theresourcemodelmonitorseachexistingtrustamongdomains.Todothisthe

resourcemodelverifiesthefollowing:

v Alltrustrelationshipsare active.

v Securitychannelsareworkingproperly.

New events

Thefollowingeventsareavailable:

TMW_Dropped_Trusts

Domaintrusthasbeendropped.Thiseventissentwhena

previouslydetectedtrustisnolongeravailable.Thedefault

severityisWarning.

TMW_Added_Trust

Domaintrusthasbeenadded.Thiseventissentwhenanew Trust

hasbeenaddedtothedomain.ThedefaultseverityisWarning.

TMW_Trusts_Failing

Trustverification failed.Thisevent issentwhen attemptstoverify

thedomaintrusthavefailed.Thetrustisnotfunctional.The

(26)

New thresholds None.

New parameter:Dynamic_Trust_Updates(checkboxenable/disable)

Enablementof thisParameterallowstheresourcemodeltodynamically

updatethemonitoredTrusts.Onlyoneevent willbe senttonotifytheuser

thata trusthasbeenadded ordeletedwhendetected.Themonitoredtrust

informationwillbeupdatedtonotreportthisaddedordeletedtrustevent

again.

Disablingthisparameter stopstheresourcemodelfromdynamically

updatingthemonitoredTrusts.For eachresourcemodelcycle,events

continuetobesent tonotifytheuseroftheaddedordeletedTrusts.

Documentation

changes

for

problem

determination

The followingtopics arederivedfroma TechNoteandshouldbeincludedinthe

next revisionofthedocumentation:

v Generaltroubleshooting

v ActiveDirectoryresourcemodelsummaryandconfigurationtips

v

Errorhandling

General

troubleshooting

Use thefollowingmethodstoverifywhethera resourcemodelisrunningcorrectly.

Usingthewdmlsengcommand

Toverifythatthestatusoftheresourcemodelis″Running,″runthe

followingcommand:

wdmlseng -e <ep_label> -verbose

where <ep_label>isthenameoftheendpointonwhichtheresourcemodel

isrunning.

Thecommandreturnstheresourcemodelinternalnameoftheresource

model.Table7onpage21listsresourcemodelnameswith the

corresponding internalresourcemodelnames.

UsingTivoliEnterpriseConsole

Check foranerrorstatusforaresourcemodelbylookingfortheTivoli

EnterpriseConsole(TEC)event fromIBMTivoliMonitoringHeartbeat

whichshows″RMInError″forthis resourcemodelononeormore

endpoints. TivoliEnterpriseConsoledisplaystheinternalnameofthe

resourcemodel.Table7onpage21listsresourcemodelnameswiththe

corresponding internalresourcemodelnames.

Active

Directory

resource

model

summary

and

configuration

tips

Thissectionsummarizesthenamesand characteristicsoftheActiveDirectory

(27)

Table7.ActiveDirectoryresourcemodelsummaryandconfigurationtips Category Name

Distributiontarget&

purpose Configurationtips

Domain Controller DomainController Availability Internalname: TMW_DCs_Avail Distributiontarget: AllDomain

Controllersinaforest

Purpose:Monitor availabilityofthe following:

v DCholdingFSMO

roles

v Keyservices

v GlobalCatalogs

v Directreplica

partners

v

Makesuretheendpointbeingdistributedto,is

therightonefortheDomainControllertargeted

v

Searchinthesection″ErrorHandling″,forthe

correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.

DomainController Performance InternalName: TMW_DCs_Perf Distributiontarget: AllDomain

Controllersinaforest

Purpose:Monitor,

v NTDScounters

v Clientrequests

performance

v ExtensibleStorage

Engine(ESE) databaseactivity

v Makesuretheendpointbeingdistributedto,is

therightonefortheDomainControllertargeted

v Makesuretheperformanceobjectsusedbythis

resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)

v Searchinthesection″ErrorHandling″,forthe

correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.

Replicate Intra-sitereplication

InternalName:

TMW_IntraSite_Repl

Distributiontarget:

AllDomain

Controllersinaforest

Purpose:Monitor replicationstatusfor eachreplicated partition

v

Makesuretheendpointbeingdistributedto,is

therightonefortheDomainControllertargeted

v Searchinthesection″ErrorHandling″,forthe

correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.

Intra-sitereplication traffic InternalName: TMW_IntraSite_ReplTraff Distributiontarget: AllDomain

Controllersinaforest

Purpose:Monitor performanceofthe intrasitereplication traffic

v Makesuretheendpointbeingdistributedto,is

therightonefortheDomainControllertargeted

v Makesuretheperformanceobjectsusedbythis

resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)

v Searchinthesection″ErrorHandling″,forthe

correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.

(28)

Table7.ActiveDirectoryresourcemodelsummaryandconfigurationtips (continued) Category Name

Distributiontarget&

purpose Configurationtips

Inter-sitereplication

InternalName:

TMW_InterSite_Repl

Distributiontarget:

BridgeheadServer *

*Ifnotknownyou shouldusewlcftap commandtoset credentialsofauser thatcanlogintothe domain.

Purpose:Monitor intersitereplication statusforeach replicatedpartition withtheother bridgehead

v

Makesuretheendpointbeingdistributedto,is

therightonefortheDomainControllertargeted

v

Searchinthesection″ErrorHandling″,forthe

correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.

Inter-sitereplicationtraffic

InternalName:

TMW_IntraSite_ReplTraff

Distributiontarget:

BridgeheadServer*

*Ifnotknownyou maydistributethe resourcemodeltoall domaincontrollers: datawillbecollected onlyforthe

bridgeheadserver.

Purpose:Monitor performanceofthe intersitereplication traffic

v Makesuretheendpointbeingdistributedto,is

therightonefortheDomainControllertargeted

v Makesuretheperformanceobjectsusedbythis

resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)

v Searchinthesection″ErrorHandling″,forthe

correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.

ReplicationPerformance

InternalName:

TMW_ReplPerf

Distributiontarget:

AllDomain

Controllersinaforest

Purpose:Monitor performanceofthe replicationprocess

v Makesuretheendpointbeingdistributedto,is

therightonefortheDomainControllertargeted

v Makesuretheperformanceobjectsusedbythis

resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)

v Searchinthesection″ErrorHandling″,forthe

correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.

(29)

Table7.ActiveDirectoryresourcemodelsummaryandconfigurationtips (continued) Category Name

Distributiontarget&

purpose Configurationtips

FRS(FileReplication Service)Performance

InternalName:

TMW_FRSPerformance

Distributiontarget:

AllDomain

Controllersinaforest

Purpose:Monitor performanceofthe filereplicationservice process

v

Makesuretheendpointbeingdistributedto,is

therightonefortheDomainControllertargeted

v

Makesuretheperformanceobjectsusedbythis

resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)

v Searchinthesection″ErrorHandling″,forthe

correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.

DNS Windows2000DNS Serverperformanceand Windows2003DNS Serverperformance

InternalName:

TMW_DNSPerformance

Distributiontarget:

Windows2000DNS ServerandWindows 2003DNSServer

Purpose:Monitorthe following,

v DNSservice

v Performanceof

DNSzonetraffic andDNSupdate

v Makesuretheendpointbeingdistributedto,is

therightonefortheDomainControllertargeted

v Makesuretheperformanceobjectsusedbythis

resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)

v Searchinthesection″ErrorHandling″,forthe

correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.

ActiveDirectory IntegratedDNS InternalName: TMW_DNS_ADIntegrated Distributiontarget: DomainController hostingtheDNS*

*Theresourcemodel shouldbedistributed tothedomain controllerthathosts theDNSserverorto aDCsittingonthe samedomain.The domaincontroller shouldbeaGlobal Catalogandwlcftap shouldbeusedtoset credentialsofauser thatcanlogintothe domain.

Purpose:Monitor informationand consistencyofdata restoredintotheDNS zonesintegratedwith theActiveDirectory

v Makesuretheendpointbeingdistributedto,is

therightonefortheDomainControllertargeted

v

Makesuretheperformanceobjectsusedbythis

resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)

v Searchinthesection″ErrorHandling″,forthe

correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.

(30)

Table7.ActiveDirectoryresourcemodelsummaryandconfigurationtips (continued) Category Name

Distributiontarget&

purpose Configurationtips

DHCP Windows2000DHCP Serverperformanceand Windows2003DHCP Serverperformance

InternalName:

TMW_DHCPPerformance

Distributiontarget:

Windows2000DHCP ServerandWindows 2003DHCPServer

Purpose:Monitor DHCPserviceand PerformanceofDHCP traffic

v

Makesuretheendpointbeingdistributedto,is

therightonefortheDomainControllertargeted

v

Makesuretheperformanceobjectsusedbythis

resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)

v Searchinthesection″ErrorHandling″,forthe

correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.

Trusts DomainTrusts

Internalname:

TMW_DCs_Trusts

Distributiontarget:

oneormoredomain controllersper domain

Purpose:VerifyTrust relationshipsand sendeventsregarding addedtrusts,dropped trusts,andfailing trusts

v Makesuretheendpointbeingdistributedto,is

therightonefortheDomainControllertargeted

v Searchinthesection″ErrorHandling″,forthe

correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.

Error

handling

Thissectionlists errorcodes thatresourcemodelscangeneratewhentheyarenot

in a″Running″state. Table10onpage25theerrorconditionsanduser actionsto

resolve theseconditions.

Errorhandling functionality: Whena resourcemodelisrunthroughtheTivoli

Monitoringapplication,theactiontheenginecantakedependsonthestateofthe

resourcemodel.Thepossiblestatesareeither assignedautomaticallybytheengine,

or specifiedbytheuserinthemonitoringalgorithmscript.Theresourcemodel

states aredisplayedtogetherwith themonitoringresults,bythecommandline,

TivoliMonitoringWebHealthConsole, orTivoliBusinessSystemsManager,when

enabled. Thefollowingtable showsthestatesthattheengine automaticallyassigns,

theexternal causesfromwhichthestatesresult,and therelatedactionsthatthe

engine takes.

Table8.Statesofresourcemodels

State CauseoftheState ActionTakenbytheEngine

Running Resourcemodelrunningsuccessfully None Stopped Userstoppedtheresourcemode,orit

hassuccessfullyfinishedrunning.

None

Disabled Useraction. None

Scheduled Userhasscheduledresourcemodelfora latertime.

None

Error Anerrorispreventingtheresource modelfromrunning.

Every3minutestheengineautomatically triestorerunit.

(31)

Table8.Statesofresourcemodels (continued)

State CauseoftheState ActionTakenbytheEngine

NotCompiled AnerrorinVisualBasicorJavaScript code

None

Itispossibletochangeresourcemodelstatebyusingreturncodes duringthe

monitoringalgorithm executionaswell.Youcanprogramtheresourcemodel

states duringmonitoringalgorithmexecutionbymakingVisitTree(),Init()or

SetDefaultConfiguration()toreturn acertaincode.Thesection ″ResourceModel

Troubleshooting″of″WorkbenchUser Guide″describesthisindetail. Depending

onthestate, theengine willperform adifferentaction.Thefollowingtable

describes whichstatecanbe triggeredbywhichreturncode(″CauseoftheState″

column) andthecorrespondingengineaction:

Table9.Statescodesforresourcemodels

Statecode CauseoftheState ActionTakenbytheEngine

Failed1-200.Theresource modelhasfailed

VisitTreereturncode:201-400 None

Failing1-200.Theresource modelhasanerror

VisitTreereturncode:401-600 Theengineautomaticallyretriesevery threeminutestoruntheresourcemodel. Retrying1-200.Theresourceis

running

VisitTreereturncode:601-800 Retries3timesineachcycletime, indefinitely,toruntheresourcemodel Unabletostart1-200.The

resourcemodelisunableto start.Assumedmissed prerequisites

Init,orSetDefaultConfigurationReturn code:801-1000

None

Recovering1-200.Theresource modelisrunning

VisitTreereturncode:1001-1100 Oncepercycle,forthreecyclesonly, triestoreruntheresourcemodel.After threeunsuccessfulattemptsinterprets theresourcemodelasfailed.

Failedafterrecovery Theresourcemodelfailedinthree successivecycles.Interpretedasfailed

None

Return codesofselectedresourcemodels: Table10contains alistingofthemost

currentresourcemodelreturn codes,theirdescription,and actionsforresolving

eachcode.Thereturn codenumberisdisplayedintheIBMTivoliMonitoringWeb

HealthConsolestatusfield.Youcanalsodisplayit usingthewdmlsengcommand.

Table10.Resourcemodelreturncodes

Code Description Resourcemodel

Statusof resource

model Useraction

1 TheOperating Systemwherethe resourcemodelis runningisnota Windows2000.

All Unableto Start

Checkthattheendpointwheretheresource modelisrunningisasupportedversionof Windows.See“Supportedoperatingsystemsfor endpoints”onpage5.IntheTmw2k.logfileon theendpointtheerrormessagescarriesthe Windowsversionlevel.

2 BindingtorootDSE objectfailed. Allexcept: TMW_DNS_Perfand TMW_DHCP_Perf Unableto Start

Checkthattheendpointwheretheresource modelisrunningisasupportedversionof Windows.See“Supportedoperatingsystemsfor endpoints”onpage5.

(32)

Table10.Resourcemodelreturncodes (continued)

Code Description Resourcemodel

Statusof resource

model Useraction

3 Errorloading IADsToolsDLL. DMfADresource model,usethe IADsToolsCOM objectprovidedinto Windows2000 SupportTools Component. Allexcept: TMW_DNS_Perfand TMW_DHCP_Perf Unableto Start

CheckthatWindows2000or2003SupportTools ComponentisinstalledontheDomainController wheretheresourcemodelhasbeendistributed.

5 Thecall

DsGetSiteName,for retrievingthesite nameofthedomain controller,failed.

TMW_DCs_Avail TMW_InterSite_Repl

Unableto Start

CheckDNSnamingresolutionfromtheDCtarget ofdistribution

8 Thecall

GetDefaultNaming\ Context,for

retrievingthedefault namingcontextof thedomain

controllerwherethe resourcemodelis running,failed.

TMW_DCs_Avail Unableto Start

-CheckthattheDNSserverconfigurationis correct.

-ChecktheconfigurationofActiveDirectoryon thedomaincontrollerwheretheresourcemodelis running.

-CheckiftheDirectoryServiceloghaslogged anyerrorsontheeventviewer.

TMW_DNS_AD \ Integrated

Failing

9 Thecall

GetNamingContexts, forretrievingthe3 defaultnaming contextsofthe domaincontrolleron whichtheresource modelisrunning, failed. TMW_IntraSite_Repl and TMW_InterSIte_Repl Unableto Start

-CheckthattheDNSserverconfigurationis correct.

-ChecktheconfigurationofActiveDirectoryon thedomaincontrollerwheretheresourcemodelis running.

-CheckiftheDirectoryServiceloghaslogged anyerrorsontheeventviewer.

10 Thecall

GetPartialNaming\ Context,for retrievingtheother namingcontexts storedonthedomain controlleronwhich theresourcemodelis running,failed. TMW_IntraSite_Repl and TMW_InterSIte_Repl Unableto Start

-CheckthattheDNSserverconfigurationis correct.

-ChecktheconfigurationofActiveDirectoryon thedomaincontrollerwheretheresourcemodelis running.

-CheckiftheDirectoryServiceloghaslogged anyerrorsontheeventviewer.

11 Namingresolution problemsonthe domaincontroller wheretheresource modelisrunning

TMW_DCs_Avail Failing -CheckthattheDNSisproperlyconfigured.

-Checkthatnslookupcancorrectlyresolvenames whenrunsonthedomaincontrollerwherethe resourcemodelisrunning.

(33)

Table10.Resourcemodelreturncodes (continued)

Code Description Resourcemodel

Statusof resource

model Useraction

12 Thecall

GetSiteLinks,for retrievingthe numberofsitelinks inthesitewherethe domaincontrolleris placed,failed.

TMW_InterSite_Repl Unableto start

-CheckthattheDNSserverconfigurationis correct.

-ChecktheconfigurationofActiveDirectoryon thedomaincontrollerwheretheresourcemodelis running.

-CheckiftheDirectoryServiceloghaslogged anyerrorsontheeventviewer.

13 Thecall

GetBridgeHeads\ InSite,forretrieving thenumberof bridgeheadservers inthesitewherethe domaincontrolleris placed,failed.

TMW_InterSite_Repl Unableto start

-CheckthattheDNSserverconfigurationis correct.

-ChecktheconfigurationofActiveDirectoryon thedomaincontrollerwheretheresourcemodelis running.

-CheckiftheDirectoryServiceloghaslogged anyerrorsontheeventviewer.

15 Theerrormaybe issuedbythe Inter-sitereplication resourcemodelif thereisno

authorizationtoread therequested replicationstate.

TMW_InterSite_Repl Unableto start

IftheresourcemodelistheInter-sitereplication resourcemodelandyouhavedistributedthe resourcemodeltoadomaincontrollerendpoint whichisnotabridgeheadserver,youmustrun thewlcftapcommandtoenableTivolitoaccess theremoteresources.Alternatively,youcan distributethisresourcemodeltoanydomain controlleractingasbridgeheadserverinyour domain.

16 Thecall

GetDirectPartnersEx, forretrievingthe numberof

replicationpartners oftheserver,failed.

TMW_InterSite_Repl and TMW_IntraSite_Repl Recovering andFailed after Recovering

-CheckthattheDNSserverconfigurationis correct.

-ChecktheconfigurationofActiveDirectoryon thedomaincontrollerwheretheresourcemodelis running.

-CheckiftheDirectoryServiceloghaslogged anyerrorsontheeventviewer.

17 Thiserrormightbe issuedbytheDNS ActiveDirectory integratedresource modelifabindingto theGlobalCatalog objectandabinding totheconfiguration Containerreturna differentnumberof domainsinthe forest.

TMW_DNS_AD \ Integrated

Unableto start

-CheckthattheDNSserverconfigurationis correct.

-ChecktheconfigurationofActiveDirectoryon thedomaincontrollerwheretheresourcemodelis running.

-CheckiftheDirectoryServiceloghaslogged anyerrorsontheeventviewer.

Figure

Table 1. Updates to product functionality Functionality Description
Table 1. Updates to product functionality (continued) Functionality Description
Table 2. Summary of endpoint support for the product environment on Windows Endpoint’s operating system Service Packs
Table 3. APARs for the product in Active Directory 3.7 Tivoli Distributed Monitoring for
+7

References

Related documents

The application of the proposed methodology in the tourist destinations analysed (where a sufficient a disaggregate level was used) aim to provide tourism

For the primary endpoint of culture- or PCR-confirmed influenza PD-ILI caused by any influenza viral type/subtype (regardless of similarity to the vaccine), IIV-HD was significantly

Pythagoras, Parmenides, Empedocles, Anaxagoras, and Democritus, in this context, were of the opinion that the plants are driven by natural yearning, that they breathe, feel joy

Interviews were conducted before and after intervention using a physical restraint questionnaire to examine any change in staff knowledge, attitudes, and behaviours on physical

focus on groups with symmetric access to genre expectations. Future research could explore how genre expectations develop and are shared among people with asymmetric access to

IMPORTANT NOTE - Following the OTC submission to the OPA A Connection Cost Estimate (CCE) document will be sent by email from the Generation Planning Section, once a positive offer

It has been reported (5) that the o- bonding contribution in the zinc complexes is much weaker than that in the analogo~ls copper complexes, and, for

If the H-point couple distance, or seating package, is such that the H-point machine with 95 th percentile leg lengths will attain an ankle angle greater than 130 degrees with