IBM
Tivoli
Monitoring
Active
Directory
Option
Release
Notes
Version
5.1.1
FX02
IBM
Tivoli
Monitoring
Active
Directory
Option
Release
Notes
Version
5.1.1
FX02
Note:Beforeusingthisinformationandtheproductitsupports,besuretoreadthegeneralinformationunder “Notices”onpage35.
SecondEdition(March2005)
Thiseditionappliestoversion5release1modificationlevel1ofIBMTivoliMonitoringActiveDirectoryOption andtoallsubsequentreleasesandmodificationsuntilotherwiseindicatedinneweditions.
Contents
Release
Notes
.
.
.
.
.
.
.
.
.
.
.
. 1
Aboutthisdocument . . . 1
Accessingpublicationsonline. . . 1
OrderingPublications . . . 2
ProvidingFeedbackaboutPublications . . . . 2
Supportinformation. . . 2
FeaturesandBenefits . . . 2
SystemRequirements . . . 4
SoftwareRequirements . . . 4
Supportedoperatingsystemsforendpoints . . . 5
InstallingtheTMW_DCs_Perfresourcemodel’s prerequisite:Microsoftdatabaseperformance object. . . 5
UsingwlcftaptoenabletheTMW_InterSite_Repl, TMW_InterSiteRepl_Traff,and TMW_DNS_ADIntegratedresourcemodels . . . 5
MicrosoftHotfixesthatarerecommended . . . 6
HardwareRequirements . . . 6
InstallationNotes. . . 6
InstallingtheProduct . . . 6
UninstallingtheProduct . . . 9
ConfiguringtheWebHealthConsole . . . 9
ConfiguringtheEventServer . . . 10
PatchesandAPARsIncluded . . . 10
KnownProductDefects,Limitations,and Workarounds . . . 11
DocumentationChanges . . . 11
Documentationchangesforinstallationissues . . 12
Documentationchangesforreferenceissues . . 12
Documentationchangesforproblem determination . . . 20
Support
information
.
.
.
.
.
.
.
.
. 31
Searchingknowledgebases . . . 31
Searchtheinformationcenteronyourlocal systemornetwork . . . 31
SearchtheInternet . . . 31
Obtainingfixes . . . 31
ContactingIBMSoftwareSupport . . . 32
Determinethebusinessimpactofyourproblem 33 Describeyourproblemandgatherbackground information . . . 33
SubmityourproblemtoIBMSoftwareSupport 33
Notices
.
.
.
.
.
.
.
.
.
.
.
.
.
. 35
Release
Notes
ThisReleaseNotesdocumentprovidesimportantinformationaboutIBM Tivoli®
MonitoringActiveDirectoryOptionVersion5.1.1,FX02,hereafterreferredtoasthe
FeatureOptionforIBMTivoliMonitoringActiveDirectoryOption.Thesenotesare
themostcurrentinformationfortheproductandtakeprecedence overallother
documentation.
Please reviewthesenotesthoroughlybeforeinstallingorusingthisproduct.
Thesereleasenotes includethefollowingtopics:
v “Aboutthisdocument”
v FeaturesandBenefits
v SystemRequirements
v InstallationNotes
v
KnownProductDefects,Limitations,and Workarounds
v DocumentationChanges
About
this
document
Thissectionprovides generalinformationaboutthis documentandaboutsupport
options.
Accessing
publications
online
ThedocumentationCDcontainsthepublicationsthatareintheproductlibrary.
TheformatofthepublicationsisPDF, HTML,orboth.
IBM postspublicationsforthisand allotherTivoliproducts,astheybecome
available andwhenevertheyareupdated,totheTivolisoftwareinformationcenter
Website.AccesstheTivolisoftwareinformationcenterbyfirst goingtotheTivoli
software libraryat thefollowingWebaddress:
http://www.ibm.com/software/tivoli/library/
Scrolldownandclick theProduct manualslink.IntheTivoliTechnicalProduct
DocumentsAlphabeticalListingwindow,clickMtoaccessalloftheIBMTivoli
Monitoringproductmanuals.
Note: IfyouprintPDFdocumentsonotherthanletter-sizedpaper,settheoption intheFile→ PrintwindowthatallowsAdobeReadertoprintletter-sized
pagesonyourlocalpaper.
TheIBM SoftwareSupportWebsiteprovidesthelatestinformationaboutknown
productlimitationsandworkarounds intheformoftechnotesforyourproduct.
Youcanviewthis informationatthefollowingWebsite:
Ordering
Publications
YoucanordermanyTivolipublicationsonline atthefollowingWebsite:
http://www.elink.ibmlink.ibm.com/public/applications/publications/cgibin/pbi.cgi
Youcanalsoorderbytelephonebycallingoneofthese numbers:
v IntheUnitedStates:800-879-2755
v
InCanada:800-426-4968
v Inothercountries,fora listoftelephonenumbers,seethefollowingWebsite:
http://www.tivoli.com/inside/store/lit_order.html
Providing
Feedback
about
Publications
IBM wantstohearaboutyourexperiencewith Tivoliproductsanddocumentation,
and welcomesyour suggestionsforimprovements.Ifyouhavecommentsor
suggestionsaboutproductsanddocumentation, contactusin oneofthefollowing
ways:
v Sendane-mailtopubs@tivoli.com.
v Completeourcustomer feedbacksurveyatthefollowingWebsite:
http://www.tivoli.com/support/survey/
Support
information
“Support information”onpage31describesthefollowingoptionsforobtaining
support forIBM® products:
v “Searchingknowledgebases”onpage31
v “Obtainingfixes”onpage31
v “ContactingIBMSoftwareSupport”onpage32
Features
and
Benefits
TivoliMonitoringActiveDirectoryOptionVersion5.1.1FX02hasthefollowing
featuresandbenefits:
Feature Benefit
IntegrationwithTivoliFramework andIBMTivoliMonitoring
v
Tivolienvironmentandinfrastructure
v
Familiaruser-interface
v AbilitytomonitorWindows2000/2003domaincontrollersasTivoli
endpoints
v AbilitytomonitorWindows2000/2003DomainNameSystem(DNS)and
Windows2000DynamicHostConfigurationProtocol(DHCP)serversas Tivoliendpoints
v AbilitytosendeventstotheTivoliEnterpriseConsole
v AbilitytosendeventstotheTivoliBusinessSystemManagerconsole
v Abilitytologdataforanalysisanddisplay
v AbilitytoviewonlineandhistoricaldataontheWebHealthConsole
v
Abilitytosetthresholds
v
AbilitytousenewresourcemodelstogetherwithexistingTivoliMonitoring
resourcemodels,suchasresourcemodelsintheSystemcategory.
Feature Benefit
ResourcemodelstailoredtoActive DirectoryOption
Abilitytomonitortheperformance,availability,andhealthofActiveDirectory Optionkeyservicesandobjectssuchas:
v Domaincontrollers
v AllocationofFlexibleSingleMasterOperations(FSMO)roles
v Replicationefficiencywithinandbetweenmultiplesites
v WindowsDHCPserver
v WindowsDNSserver
Error-handlingcapability AbilitytodisplayerrormessagesontheWebHealthConsoleaboutthe following:
v
Missingprerequisitesonendpoints
v Thestatusofresourcemodels
v Configurationerrorsthatcancauseresourcemodelstostop
IBMTivoliMonitoringResourceModelBuilderenablesadvanceduserstocreate
custom resourcemodels andisavailablefordownloadat
http://www-3.ibm.com/software/tivoli/resource-center/availability/code-monitor-resource.jsp.
Table1 summarizestheupdatesinproductfunctionalitythatFeatureOptions1
and 2provide.“DocumentationChanges”onpage11describesdetailsofthenew
functionality. Table1.Updatestoproductfunctionality
Functionality Description
Operatingsystemsupport TivoliMonitoringActiveDirectoryOptionnowsupportsWindows2003Standard EditionandWindows2003EnterpriseEdition.
Uninstall Uninstalloftheupgrade.Thewuninstallcommandandashellscriptareavailablefor theuninstalloftheVersion5.1.1FX02oftheproduct.
Linuxserversupport SupportforinstallingtheproductontoaLinuxTivolimanagementregionwasadded. Thisnewfeatureisdescribedin“DocumentationChanges”onpage11.
Newtasks ListDefaultFirstServerstasklistsdomaincontrollerobjectsintheDefault-First-Site indicatingthatthedomaincontrollerhasnotbeenassignedtoasite.
ListOrphanedObjectstaskdetectsobjectsthathavebeenorphaned.
See“DocumentationChanges”onpage11fordetails.
Resourcemodels
Generalupdates Updateddeprecatedservicemethods:ThereweredeprecatedAPIswithinallthe resourcemodelsforloggingandevents.Theseresourcemodelshavenowbeen updated.
Deprecatedfunctions:ThisreleaseofTivoliMonitoringActiveDirectoryOption updatesdeprecatedfunctionswithintheresourcemodels.
Serviceabilityupdates:Tracingentryandexitofallresourcemodelfunctionswas addedtoallowmoreaccurateandcompletefunctiontracingcapabilities.
EnhancedtheActive DirectoryIntegratedDNS resourcemodel(Internal name:
TMW_DNSADIntegrated)
IncludetheWindows2003DomainDNSZonesandForestDNSZonespartitionsin additiontotheoriginalwin2kDomain,Schema,andConfigurationPartitions.The resourcemodelnowmonitorstheADIntegratedzonedatawhenstoredinanyofthe ActiveDirectorypartitionsavailableforzonedata.
Table1.Updatestoproductfunctionality (continued)
Functionality Description
EnhancedtheIntra-site replicationtrafficresource model(Internalname: TMW_IntraSiteReplTraff)
Gatherandanalyzestatisticalinformationrelatedtotheabilitytoresolveallqueries withinthelocaldomain.“NeweventforTMW_IntraSiteReplTraffresourcemodel”on page13providesmoredetails.
EnhancedtheInter-and Intra-siteReplication resourcemodels(Internal names:
TMW_InterSiteRepland TMW_IntraSiteRepl)
v Collectadditionalnetworklatencyinformation
v MonitorNTP(NetTimeProtocol)availability,timesynchronization,andtimesettings
updates.
CodelogicchangeforInter-siteReplicationresourcemodel:Resourcemodelcode functionalitythatexistedintheinitializationportionoftheresourcemodelwouldmiss thedynamicreassignmentoftheBHSforasitebytheKnowledgeConsistencyChecker (KCC)asthedetectionofaSitesBridgeHeadServer(BHS)wouldonlyhappenatInit. ThecodefunctionforlocatingtheBHSwithinasitehasnowbeenrelocatedtotheVisit Tree(thecodethatrunoneachresourcemodelcycle)toallowthediscoveryofdynamic BHSreassignmentbytheKCCaftertheresourcemodelinitialization.
EnhancedtheDomain ControllerAvailability resourcemodel(Internal name:TMW_DCs_Avail)
Pingdomaincontrollerstoverifyconnectivitypriortoanyattemptstoaccessthe controllersremotely.SendeventsonFSMORolereassignmentandeventonreplication partnersthatareunreachable.See“DocumentationChanges”onpage11fordetails.
EnhancedtheDomain ControllerPerformance resourcemodel(Internal name:TMW_DCs_Perf)
See“Networklatencyfeatures”onpage18formoreinformation.
MonitorNTDSconnections.See“DocumentationChanges”onpage11fordetails.
EnhancedtheFile ReplicationService Performanceresource model(Internalname: TMW_FRSPerformance)
ExplicitlymonitorGPOreplication.See“DocumentationChanges”onpage11for details.
CreatedtheDomain Trustsresourcemodel (Internalname: TMW_DCs_Trusts)
Monitordomaintruststoreporttruststhatareadded,dropped,orfailed.See “DocumentationChanges”onpage11fordetails.
Note: FeatureOption2 includestheenhancementsfromtheFeatureOption1.
System
Requirements
The followingsectionslistthesoftwareandhardwarerequirementsforinstalling
theFeatureOptionforIBMTivoliMonitoringActiveDirectoryOptiononTivoli
servers.
Software
Requirements
The FeatureOptionforIBMTivoliMonitoringActiveDirectoryOptionrequiresthe
followingsoftware:
v TivoliManagementFramework,Version3.7.1orhigher
v
IBMTivoliMonitoring,Version5.1.1
Note: IfyouuseTivoliDistributedMonitoring, Version3.7, youmust migrateto
IBMTivoliMonitoring, Version5.1.1,asdescribedinthedocumentation
forIBM TivoliMonitoring,Version5.1.1.
Note: AllWindows 2000/2003domaincontrollersonwhichresourcemodels are
runningrequiretheWindows2000/2003SupportToolscomponenttobe
installed.Youcaninstallthis componentfromtheWindows2000/2003
ServerinstallationCD.
For theprerequisitesnecessarytousetheresourcemodels,refertotheappropriate
section intheTivoliMonitoringActiveDirectory OptionReferenceand theTivoli
MonitoringUser’sGuide.
Supported
operating
systems
for
endpoints
Thefollowinglistexplainsoperatingsystem supportforIBMTivoliMonitoring
Active DirectoryOptionendpointsthatrunonWindows:
v TheproductsupportsWindows2000Server Editionand Windows2000
AdvancedServerEditionforendpoints.BothoperatingsystemsrequireService
Pack3 orlater,andServicePack5 isrecommended.
v TheproductsupportsWindows2003StandardEditionandWindows 2003
EnterpriseEditionforendpoints.
v TheproductdoesnotsupportActive Directorymixedmode,whichisalimited
implementationthatsupportsbothWindows2000/2003andNTdomain
controllersonthesameforestenvironment.
Table2.SummaryofendpointsupportfortheproductenvironmentonWindows Endpoint’soperatingsystem ServicePacks
Windows2000ServerEdition ServicePack3orlaterisrequired.ServicePack5 isrecommended.
Windows2000AdvancedServer Edition
Windows2003StandardEdition — Windows2003EnterpriseEdition
Installing
the
TMW_DCs_Perf
resource
model’s
prerequisite:
Microsoft
database
performance
object
TheIBM TivoliMonitoringActiveDirectoryOptionTMW_DCs_Perfresource
modelusesperformance countersthatrequire thatyouinstall theMicrosoft
database performanceobject.
Note: Thisperformance objectisnotinstalledbydefaultwhenyouinstallthe
Windows2000orWindows 2003software.
More detailedinfoisavailable intheIBM DocumentControlFacility(DCF) item
#1139002,Whatarethe DataProvidersofthe ITMforActive DirectoryOptionresource
models?For informationaboutinstallingthedatabaseperformance object,seethe
followingMicrosoft Website:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/ \ activedirectory/deploy/adguide/addeploy/addch09.mspx
Using
wlcftap
to
enable
the
TMW_InterSite_Repl,
TMW_InterSiteRepl_Traff,
and
TMW_DNS_ADIntegrated
resource
models
Toenable theTMW_InterSite_Repl,TMW_InterSiteRepl_Traff,and
command. Ifthedomaincontrollertowhichyoudistributed theresourcemodelis
nota GlobalCatalog,youmust runthefollowingwlcftapcommandonthat
endpoint:
wlcftap -r domain-name/user-name
where user-nameidentifiesa userthatisamemberoftheDomainUsersgroupand
canlogintothedomainonthisdomaincontroller.
Microsoft
Hotfixes
that
are
recommended
ItisrecommendedthatyouinstallthefollowingHotfixesfromMicrosoft.Consult
theMicrosoft Websiteforfurtherupdatesandrecommendations.
v ForWindows2000(contact Microsoftandaskfor thefixesthatgowith the
Qnnnnnn):
Q811370_W2K_SP4_X86_EN Q812782_W2K_SP4_X86_EN Q819629_W2k_SP4_X86_EN Q823210_W2K_SP5_x86_EN
v ForWindows2003:
KB837175
Hardware
Requirements
The followingtableslisttheestimateddiskspacerequiredfor installingTivoli
MonitoringActiveDirectoryOptiononTivoliservers.Theestimateddiskspace
includesspaceforthebinaries(bin),Lcf_bundles,and messagecatalogs.
Binaries Lcf_bundles MessageCatalogs
300KB 500KB 60KB
The minimumhardwarerequirements(CPUand RAM)forinstallingtheproduct
onTivoliservers arethesameastheminimum requirementsforinstallingthe
TivoliManagement Framework.
Installation
Notes
For informationregardingtheinstallationof thebase product,TivoliMonitoring
5.1.1,refertotheTivoliMonitoringUser’sGuide.
Installing
the
Product
Likeitsparentproduct,TivoliMonitoring, youcaninstallIBM TivoliMonitoring
Active DirectoryOptioninthefollowingways:
v WiththeTivoli SoftwareInstallationService
v
FromtheTivolidesktop
v Fromthecommandlineinterface(CLI)
Note: CDsor downloadedimagesare providedfortheinstallationofthebase
product.Thefeature optiondescribedintheserelease notesisprovidedina
.tarfilethatisavailable throughIBM CustomerSupport.Ifyoudonothave
acustomer supportcontactperson,see“ContactingIBM SoftwareSupport”
Before
You
Begin
Pleasereadthefollowingnotesbefore youbegintoinstall theproduct:
v InstallthisproductonlyonTivoliservers.
v Decideonwhichservers youare goingtoinstall theproduct.
v Ensurethattheselectednodesmeetthehardwarerequirementsforthe
installation.
v
Ensurethattheselectednodesmeetthesoftwarerequirementsforthe
installation.
v Ensurethatyouhaveadministratorprivilegestoperform theinstallation.
v Backupyour databasebeforeyoubegintoinstalltheproduct.
Installing
with
Tivoli
Software
Installation
Service
TivoliSoftwareInstallationServicecaninstall multipleTivoliproductsonmultiple
systemsinparallel.ThisJava-basedproductcaninstallmoreproductsonmore
systemsinmuchlesstimethantheFramework’sinstall facility.Software
InstallationServiceperformsproductprerequisitechecksand,ifdefined,
user-specified prerequisitechecks,ensuringasfewinstall failuresaspossible.In
mostcases,failuresoccuronlywhenmachinesareturnedofforremovedfromthe
network.
SoftwareInstallationServicealso createsaninstallationrepositoryintowhichyou
canimporttheinstallationimageofoneormore Tivoliproducts.Youcanimport
onlythoseinterpretertypesneededinyour environment,whichsavesdiskspace
and importtime. Theinstallationrepositoryisthen thesourceofallyourTivoli
installations.Youcanevenshare asingleinstallation repositoryacrossmultiple
regions.
Tivolirecommends thatyouupgradetheTivoliManagementFrameworkinstall
facility inyourcurrentTivoliinstallationbyinstallingtheSoftwareInstallation
Service. Ifyouare installingTivoliproductsforthefirsttime, installtheSoftware
InstallationServiceonthefirst managednode runninganoperatingsystem thatis
supportedbytheSoftwareInstallationService.Afteryouhaveinstalledit,youcan
usetheSoftwareInstallationServiceproducttoinstall otherTivoli products.
For detailsoftheoperatingsystemsonwhichtheSoftwareInstallationServicecan
run, andforinstructionsoninstallingthisproductandusingittoinstall other
products,refertotheTivoliSoftwareInstallationServiceUser’sGuideand theTivoli
SoftwareInstallationServiceReleaseNotes.
Installing
the
Feature
Option
from
the
Tivoli
desktop
TousetheTivolidesktoptoinstalltheFeatureOptionfor IBMTivoliMonitoring
Active DirectoryOption,performthefollowingsteps:
Note: Youmustinstall IBMTivoliMonitoringActiveDirectoryOption5.1.1before
youinstall theFeatureOption.
1. InserttheproductCDintotheCD-ROMdrive.
2. StarttheTivolidesktop.
3. From theDesktopmenuselectInstall–>InstallPatch.TheInstallPatch
dialogopens.
Note: Forthenext step,itisassumedthatyouhavecontactedTivoliLevel 2
supportstaff toobtainthe.tarfilethatcontainsthefeatureoption.The
installation.Ifyoudo nothavea contactpersonat TivoliLevel2
support,see“ContactingIBMSoftwareSupport”onpage32.
4. If IBMTivoliMonitoring,ActiveDirectoryOption,Version 5.1.1Feature Option 2isdisplayedintheSelectPatch toInstallscrollinglist,gotostep 8. —OR—
IfIBMTivoliMonitoring,ActiveDirectoryOption,Version 5.1.1Feature Option 2isnotdisplayed intheSelectPatch toInstallscrollinglist,continue
with step5.
5. Click SelectMedia.TheFileBrowserdialogopens.
6. Type orselectthelocationoftheTivoliCDinthePathNamefieldby
completingoneofthefollowingtasks:
v Typethecompletepathtothe/cdromdirectoryintheCDinthePathName
field.(Use forwardslashestospecifythepath.)
v Browsethefilesystembycompletingthefollowingsteps:
a. IntheHostsscrollinglist,selectthehost(ordrive)onwhichtheCD is
mounted.Choosing ahostupdatestheDirectoriesscrollinglisttoshow
thedirectories(underroot)ofthehostyouselected.
b. IntheDirectoriesscrollinglist,double-clickthedirectorythatcontains
theinstall media.Choosinga directoryupdatestheFileslist.
7. Click SetMedia& Close.TheInstallPatchdialogreopens.TheSelectPatch
to Installscrollinglistshowstheproductsthatareavailable forinstallation.
8. Select thefollowingproductfromtheSelectPatch toInstallscrollinglist:
IBMTivoliMonitoring,ActiveDirectoryOption,Version 5.1.1Feature Option 2
9. Ensure thattheappropriatehostisdisplayedintheClientstoInstallOn
scrollinglist.
Ifit isnotdisplayed,selecttheserveronwhichyouwanttoinstall the
selectedproductfromtheAvailableClientsscrollinglist,andusetheleft
arrowtomovetheselectedservertotheClientstoInstallOnscrollinglist.
10. Click Installtobegininstallingtheproduct.The PatchInstalldialogopens.It
provides alistoftheoperationstobe performedand warnsofanyproblems
youmightwanttocorrectbeforeinstalling.
11. ReviewthestatusinformationandclickContinueInstall.ThePatchInstall
dialoginformsyouwheninstallation iscomplete.
12. Click Close.
Installing
the
Feature
Option
from
the
Command
Line
Use thewpatchcommandtoinstalltheFeatureOptionforIBMTivoliMonitoring
Active DirectoryOptionfromthecommandline.
Note: Youmustinstall IBMTivoliMonitoringActiveDirectoryOption5.1.1before
youinstall theFeatureOption.
For thisprocedure,it isassumedthatyouhavecontactedTivoliLevel2 support
staff toobtainthe.tarfilethatcontains thefeature option.Thereadmefilethat
comeswiththe.tarfilegivesdetailedinstructions forinstallation.Ifyoudonot
havea contactpersonat TivoliLevel2 support,see“Contacting IBMSoftware
Support” onpage32.
wpatch–cpath/upgrade-iindex_fileserver
path
Specifiesthecompletepathtothe/cdromortothe/upgradedirectoryinthe
CD.(Useforwardslashestospecifythepath.)
index_file
Specifiestheproductindexfile,511ADOF2.IND,fromwhichtheFeature
Optionisinstalled.
server
TheFeatureOptionforIBM TivoliMonitoringActiveDirectoryOptionwillbe
installedontheserveryouspecify.
For moreinformationaboutthewpatchcommand, refertotheTivoliManagement
Framework ReferenceManual.
Uninstalling
the
Product
TheTivoliManagement Frameworkprovidesthewuninstcommandtoremove
Tivoliapplicationsfroma specifiednodeorfromtheentireregion.Youcanusethe
wuninstcommandwith theIBMTivoliMonitoringActiveDirectoryOption
producttagtoremovetheproductfromyourservers.
Touninstall IBMTivoliMonitoringActiveDirectoryOption,enterthefollowing
command:
wuninsttagnamedestination_target -rmfiles where:
tagname
IstheregisteredproducttagforIBMTivoliMonitoringActiveDirectoryOption
thatisprovidedbyTivoli:
TMNT_AD
destination_target
Istheserverfromwhichyouwanttoremovetheproduct.
Note: Theuninstallationprocessremovesthemonitoringproduct,butitdoesnot
stoporremovetheresourcemodelsfromprofilesorfromendpoints.You
mustmanuallyremovetheresourcemodels.
For moreinformationaboutcommandlinesyntaxand usageofthewuninst
command, refertothefollowing:
v TivoliManagementFramework ReferenceManual
v TivoliManagementFramework ReleaseNotesServer,Gateway, andEndpoint.
Configuring
the
Web
Health
Console
Inordertoview resourcemodel namesina descriptiveform,do thefollowing:
Note: The.classfilesareonlyavailableonthebaseinstallationmedia.For
example,thefiles areavailableontheinstallationCDforversion5.1.1ofthe
product.NationalLanguageSupportand translationstolanguages other
thanEnglisharenotavailablefortheFX02featureoption.
1. InserttheproductCD-ROMand switchtotheHCONSOLEdirectory
2. Copythe.classfilesonthefollowingdirectoryontheserverwheretheWeb
<WHC_dir>/installedApps/dm.ear/dm.war/WEB-INF/classes/com/tivoli/DmForNt/resources
3. Stopandstart theWebHealthConsole
Configuring
the
Event
Server
On theTivoliEnterpriseConsoleserver,youneedtoinput,compile,and loadinto
theTivoliEnterpriseConsolerule basethatisactiveallbarocfilesincludedinthe
product. ThereadmethatcomeswiththeTARfileforthisfeatureoption provides
detailedinformationaboutthisprocess.
The barocfiles,whicharecontainedinthedirectory$BINDIR/TMNT_TECofthe
TivoliManagement Regionserver)are:
v TMW_DCs_Avail.baroc
v TMW_DCs_Perf.baroc
v TMW_DHCPPerformance.baroc
v TMW_DNSPerformance.baroc
v TMW_DNS_ADIntegrated.baroc
v TMW_FRSPerformance.baroc
v
TMW_InterSite_Repl.baroc
v TMW_InterSite_ReplTraff.baroc
v
TMW_IntraSite_Repl.baroc
v TMW_IntraSite_ReplTraff.baroc
v TMW_ReplPerf.baroc
v TMW_DCs_Trusts.baroc
Patches
and
APARs
Included
The followingAPARsandpatches havebeen includedinTivoliMonitoringActive
DirectoryOption5.1:
Table3.APARsfortheproductinActiveDirectory3.7 TivoliDistributedMonitoringfor
ActiveDirectory3.7
APARsincluded
3.7-DAD-0001(June27,2002) IY32073,IY25803,IY29338,IY29952,IY29984,IY29986,IY30459,IY30685, IY30997,IY31000,IY31007,IY31384,IY32440
3.7-DAD-0002E(October30,2002) IY32681,IY32747,IY32875,IY33468,IY36087,IY35992,IY35238 3.7-DAD-0003LA(September3,2002) IY37391,IY41781,IY45837
3.7-DAD-0004LA(October28,2003) IY47379,IY49155 3.7-DAD-0005LA(September3,2003) IY533210,122755,122860
Table4.APARsfortheproductinActiveDirectory5.1.0 ActiveDirectoryMonitoringOption
5.1.0(5.1.1)
APARsincluded
5.1.0-ADO-0003LA(May7,2003) IY37391,IY40589,IY41781 5.1.0-ADO-0004LA(September3,2003) IY37391,IY41781,IY45837,116576 5.1.0-ADO-0005LA(October23,2003) IY46370,IY47379,IY49155,117315 5.1.0-ADO-0007LA(November13,
2003)
IY37391,IY50803,IY50152,IY50231,123519,124712,IY50803,IY51512
Table4.APARsfortheproductinActiveDirectory5.1.0 (continued) ActiveDirectoryMonitoringOption
5.1.0(5.1.1)
APARsincluded
5.1.0-ADO-0009LA(January16,2004) IY50803,IY51512 5.1.0-ADO-0010LA(April23,2004) IY53128
5.1.0-ADO-0011LA(April29,2004) IY56044 5.1.0-ADO-0012LA(August11,2004) IY59948
Table5.DetailsregardingthecontentsofsuccessiveLA(LimitedAvailability)patches
LAPatch 51ADO01E 51ADO02E 51ADO03LA 51ADO04LA 51ADO05LA
LAPatch includes
51ADO01E 51ADO01E
51ADO02E
LAPatch depends
None. None. None. 51ADO03LA 51ADO03LA
51ADO04LA
Resourcemodel changes
SeeNote1. SeeNote2. SeeNote3. SeeNote4.
Notes:
1. TMW_InterSiteRepl.dmws 2. TMW_DCs_Avail.dmws
3. TMW_DCs_Avail.dmwsandTMW_DHCPPerformance.dmws
4. TMW_DCs_Avail.dmws,TMW_InterSiteRepl.dmws,TMW_DNS_ADIntegrated.dmws,and
TMW_DNSPerformance.dmws
Known
Product
Defects,
Limitations,
and
Workarounds
Thissectiondescribes knowndefectsinthis releaseofTivoliMonitoringActive
DirectoryOption.Whereapplicableand known,suggestedworkaroundsare
identified.Thelistof defectsinthissectionmight notbecomplete.
v IntheresourcemodelReplicationPerformancethecomputationofpercentageof
outboundobjectsfilteredmaynotbe accurate.Theproblemisdue tothe
inaccuratevalueof thedirectoryservice (NTDS)performancecounter
DRA/OutboundObjects/sec.TheproblemhasbeensubmittedtoMicrosoft.
v Thedocumentationneedstobeupdatedwiththeinformationprovidedin
“DocumentationChanges.”
Documentation
Changes
Thissectionprovides updatesthatshouldbe addedtothedocumentationforIBM
TivoliMonitoringActiveDirectoryOptionwhenthedocumentationisrevised.The
followingtypesofinformationareprovided:
v “Documentationchangesfor installationissues”onpage12
v “Documentationchangesfor referenceissues”onpage12
v “Documentationchangesfor problemdetermination”onpage20
Some changesupdateexistinginformation.Other changesdescribenew features.
Theoverview sectionoftheuser’sguideshouldmention thatIBMTivoli
resourcemodels andisavailablefordownloadat
http://www-3.ibm.com/software/tivoli/resource-center/availability/code-monitor-resource.jsp.
Documentation
changes
for
installation
issues
The followingchanges shouldbeaddedtotheinstallationinstructionsatthenext
revision ofthedocumentation:
Installing theproductonLinux:Warningsare displayedwhenyouinstall the
productonaTivolimanagement regionserveronLinux.Thefollowingsteps
describewhen thewarnings aredisplayedandhow torespond:
1. Asrequired,youupgradetheLinux-basedTivolimanagementregion serverto
Version5.1orVersion5.1.1of IBMTivoliMonitoringActiveDirectoryOption.
2. ThefollowingwarningisdisplayedforeachLinuxhostthatisatarget for
installation:
The following problems were encountered: Host <hostname>:
Could not find a valid Binaries media packet listed in the installation index (.IND) file for this type of platform. Check that the source directory is set correctly for what you are trying to do.
Could not find a valid Server Database media packet listed in the installation index (.IND) file for this type of platform. Check that the source directory is set correctly for what you are trying to do.
ThiswarningindicatesthatinstallationoftheFeatureOptionisrequiredto
supplythenecessarymediapackets.
3. ClickContinueInstallto allowtheinstallationofthebaseproducttocomplete.
4. InstalltheFeatureOption.
Documentation
changes
for
reference
issues
The followingchanges mustbe madetoTivoliMonitoringActive DirectoryOption
Reference:
Table6.ChangesfortheTivoliMonitoringActiveDirectoryOptionReferencedocument Typeofchange Textofthechange
UpdatesthatareincludedinFeatureOption01
Adddescriptionofanew task.
See“Enable/DisableIADsTools.dllWindowsEventstask”onpage14.
Adddescriptionof enhancementstothe Intra-siteReplicationand Inter-siteReplication resourcemodels.
(Internalnames: TMW_IntraSiteRepland TMW_InterSiteRepl)
Table6.ChangesfortheTivoliMonitoringActiveDirectoryOptionReferencedocument (continued) Typeofchange Textofthechange
Addinformationaboutthe Inter-siteReplication Trafficresourcemodel.
(Internalname:
TMW_InterSiteReplTraff)
NeweventforTMW_IntraSiteReplTraffresourcemodel
v
Internalname:TMW_HighInbRatio
v Descriptivename:Highinter-sitetointra-siteinboundbytesratio
v
Description:Indicationissentwhenthenumberofinter-siteinboundbytes
comparedtointra-siteinboundbytesislargerthanthethreshold.Thiscould indicateclientsareusingtoomanyinter-siteresourcesduetoapooractive directoryconfiguration.
v Message:Highinter-sitetointra-siteinboundbytesratio
v Numericattributes:localInboundBytesPerSecand
remoteInboundBytesPerSec
v Defaultsettings: Occurrences 2
Holes 0
Clearing Event FALSE
Send to TEC FALSE
Send to TBSM FALSE
Severity HARMLESS
Newthreshold:
v Internalname:interToIntraRatio
v Descriptivename:IntersitetoIntrasiteRatio
v Details:Theratioofinter-siteinboundbytestointra-siteinboundbytesthat
willcauseaneventtobegenerated.
v Defaultvalue:0.7 Generaldetailsofenhancement:
TheIntrasiteReplicationTrafficresourcemodelwasupdatedtocompare intra-siteinboundbytestointer-siteinboundbytes.Iftheinter-siteinbound bytesisconsistentlylargerthantheintra-siteinboundbytes,thiscould indicatethatyourclientsareusingtoomanyresourcesfromanotheractive directorydomain.
Addinformationaboutthe DomainController
Availabilityresource model.
(Internalname: TMW_DCs_Avail)
EnhancementfortheDomainControllerAvailabilityresourcemodel
pingTimeoutpingsdomaincontrollerstoverifyconnectivitypriortoany attemptstoaccessthecontrollersremotely.Youmustensureremoteaccessto enabletheproducttoverifyremoteReplicationPartners,GlobalCatalogs,and domaincontrollersforFlexibleSingleMasterofOperations(FSMO)rolesin ActiveDirectory.
Youcanselectthemaximumtimeoutvalueforthepingcommand.Youcanset verificationtooccuratoneofthefollowingintervals:5ms,1.5s,15s,1min, 3min,and5min.Slowconnectionsmightrequirealongertimeoutinterval.The timeoutvalueiscumulativeforallconnectivityverificationswithapingretry countof3,assummarizedinthefollowingequation:
(N * 3 = maximum timeout)
whereNistheintervalthatyouspecify.Youmustaccountforthiscumulative effectwhenyousetthecycletimeforaresourcemodel.Ifyousetthecycle timeforaresourcemodeltobelessthanthecumulativepingtimeoutvalue, thecurrentlyexecutingresourcemodelcyclemightnothavetimetocomplete beforeanothercyclestarts.
Table6.ChangesfortheTivoliMonitoringActiveDirectoryOptionReferencedocument (continued) Typeofchange Textofthechange
Addinformationaboutthe ActiveDirectoryIntegrated DNSresourcemodel.
(Internalname:
TMW_DNS_ADIntegrated)
EnhancementfortheTMW_DNS_ADIntegratedresourcemodel
check_4_Gcdetermineswhetherthedomainmusthaveaninstanceofthe GlobalCatalog.AbestpracticeforActiveDirectoryistohaveaninstanceof GlobalCatalogineachdomain.Thisresourcemodelverifiesthataninstance ofGlobalCatalogispresentinthedomain.ThedefaultisTrue.Ifyousetthis valuetoFalse,youallowvalidationoftheGlobalCataloginstancetobe ignored.
Addinformationaboutthe Enable/Disable
IADsTools.dllWindows Eventstask.
Thefollowinginformationaboutthe″Enable/DisableIADsTools.dllWindowsEvents″ taskshouldbeaddedtothereferencedocumentationatthenextrevision:
Description
EnablesordisablesloggingofeventsfromtheIADsTools.dll.
IADsTools.dllcangeneratealargenumberofevents.Theseeventsarelogged intheWindowseventlog.Tivolireferencessomeoftheseeventstodiscover variouspropertiesofActiveDirectory.UsetheEnable/DisableIADsTools.dll WindowsEventstasktostoptheIADsToolsDLLfromsendingeventstothe WindowsNTEventLog.
Note: IfyouusetheEnable/DisableIADsTools.dllWindowsEventstaskto disableIADsTools.dllevents,thoseeventsstopflowingintothe’NTEvent Log’.CustomerswhousetheOSPACParametricEventLogresourcemodel tomonitorIADsToolseventswouldbeimpactedbythisaction.
Authorizationrole:
senior
Tasklocation:
ITM-ADO-regioninthedesktopoftheTivolimanagementregion
Targetmanagednode:
endpoint
GUIdataentryfield:
Yes|Noradiobuttons.
UpdatesthatareincludedinFeatureOption02
Adddescriptionoffurther enhancementstothe Intra-siteReplication resourcemodeland Inter-siteReplication resourcemodels.
(Internalnames: TMW_IntraSiteRepland TMW_InterSiteRepl)
See“Monitoringthetimesynchronizationofdomaincontrollers”onpage17formore information.
Table6.ChangesfortheTivoliMonitoringActiveDirectoryOptionReferencedocument (continued) Typeofchange Textofthechange
Adddescriptionof enhancementstothe Domaincontroller availabilityresource model.
(Internalname: TMW_DCs_Avail)
NeweventforDomaincontrolleravailabilityresourcemodel
v Internalname:TMW_FSMORole_Transfered
v Descriptivename:FSMORoleownerhaschanged
v Description:ThisindicationissentwhenanActiveDirectoryFSMOrole
ownerhasbeentransferredfromoneDomainControllertoanother.
v Message:The@fsmoRole@hasbeentransferredfrom@origServer@to
@newServer@.
v Stringattributes:origServer,newServer,fsmorole
v Defaultsettings: Occurrences 1 Holes 0
Clearing Event FALSE Send to TEC True Send to TBSM FALSE Severity Warming
Newthresholds:
None.
Generaldetailsofenhancement:
ThebehaviorofDomaincontrolleravailabilityresourcemodelhasbeen modifiedforthecasewhenareplicationpartnerisnolongeravailable. Formerlytheresourcemodelwouldgointoanerrorstatewhenareplication partnerstilldefinedinActiveDirectorywasnotaccessiblebyDNS.The resourcemodelhasbeenmodifiedsotheindicationUnreachablereplica partnerisraisedandtheresourcemodelnolongergoesintoanerrorstatein thissituation.
TheDomainControllerAvailabilityresourcemodelwasalsoupdatedtosend andeventwhenaFSMOrolehasbeentransferredfromoneDomain
Controllertoanother. Adddescriptionof
enhancementstotheFile ReplicationService performanceresource model
(Internalname:
TMW_FRSPerformance)
Newindication:
GPOInconsistent
Defaultsettings: Occurrences 1
Holes 0
Severity WARNING
Newthresholds:
None.
Generaldetailsofenhancement:
ThisindicationissentifanActiveDirectoryGroupPolicyObjectis inconsistentbetweenlocalSYSVOLdirectoryandtheADsystembasedon GPOversionnumber.
Adddescriptionofthe newDomainTrusts resourcemodel.
(Internalname: TMW_DCs_Trusts)
See“DomainTrustsresourcemodel(Internalname:TMW_DCs_Trusts)”onpage19for moreinformation.
Table6.ChangesfortheTivoliMonitoringActiveDirectoryOptionReferencedocument (continued) Typeofchange Textofthechange
Descriptionof enhancementstothe DomainController Performanceresource model.
(Internalname: TMW_DCs_Perf)
Newevent:
HighNumberofNTDSConnections.Thiseventissentwhenthenumberof NTDSConnectionobjectsexceedsthethreshold.Theconnectionobjectsare usedinthereplicationprocess.Eachconnectionobjectisusedtoreplicate inboundchangestothedomaincontrollerandtheKCCmanagestheobjects.
v Message:ThecurrentnumberofNTDSConnections(@ActiveConnections@)
exceedstheestablishedthreshold(@ConnectionsThreshold@).
v Numericattributes:ActiveConnections,ConnectionsThreshold
v Severity:WARNING Newthreshold:
v NtdsConnectionsThr:MaxnumberofNTDSConnections
v Description:Replicationperformanceisaffectedbythenumberofinbound
connectionsthatadomaincontrollerreceivesdatafrom.Whenthis thresholdisexceededyoushouldusetheadlbtooltoloadbalancethe connectionobjectswithinyoursite.
v Default:20
Generaldetailsofenhancement:
TheDomainControllerPerformanceresourcemodel(Internalname: TMW_DCs_Perf)isenhancedtoenablemonitoringoftheNTDSConnection objectsusedduringthereplicationprocess.Thisenhancementcreatesthe followingnewthreshold,event,andloggingfeatures:
Adddescriptionofanew task,ListDefaultFirst Servers.
ListDefaultFirstServerstaskisaddedtotheIBMTivoliMonitoringActive DirectoryUtilityTaskslibrary
Thistaskliststheserversthatareamembersofthedefaultfirstsite.Thetask listsallserversthatareamemberofthesitenamed″Default-First-Site-Name″. Thefirstdomaincontrollerthatiscreatedinaforestendsupinthissiteand youmustmoveittothecorrectsiteafteryouhaveitsetup.Thedomain controllersthataremembersofthissitearelikelythereeitherforthatreason orbecausethedomaincontrollerfailedtobeaddedtothecorrectsite.You shouldrunthistasktomakesurenoneofyourdomaincontrollersareinthe defaultsite.
Authorizationrole:
senior
Tasklocation:
ITM-ADO-regioninthedesktopoftheTivolimanagementregion
Targetmanagednode:
endpoint
GUIdataentryfield:
Table6.ChangesfortheTivoliMonitoringActiveDirectoryOptionReferencedocument (continued) Typeofchange Textofthechange
Adddescriptionofanew task,ListOrphaned Objects.
ListOrphanedObjectstaskisaddedtotheIBMTivoliMonitoringActiveDirectory UtilityTaskslibrary
Thistaskliststheobjectswhosecontainersweredeletedatthesametimethat theobjectwascreated.Ifanobjecthasbeencreatedormovedtoalocation thatwasdeletedafterreplication,thelostobjectisaddedtothe
LostAndFoundcontainer.
Yourunthistasktodeterminewhetheryouneedtorestoretoanewlocation anyoftheobjectsintheLostAndFoundcontainer.Ifyoucontinuetowantthe objectslisted,youshouldrestorethem,otherwisedeletethem.
Note: Thereplicationresourcemodelcreatesanobjectinthelostandfound containertomeasurereplicationperformance.TheListOrphanedObjectstask ignoresthoseobjectswhichhaveaname<servername>(intra)or
<servername>(inter).
Authorizationrole:
senior
Tasklocation:
ITM-ADO-regioninthedesktopoftheTivolimanagementregion
Targetmanagednode:
endpoint
GUIdataentryfield:
None.
Monitoring
the
time
synchronization
of
domain
controllers
Thefollowingnew thresholdandneweventsareprovided asenhancementsfor
theInter- andIntra-siteReplicationresourcemodels(Internalnames:
TMW_InterSiteRepl andTMW_IntraSiteRepl):
New events
Thefollowingnew eventsare available:
BlockedNetTimeProtocolConnection
Thisindicationissentif NetTimecannotproperlysynchronize
with thedesignatednetworktimeprotocolserver.Theresource
modelqueries theWindows NETTIMEcommandfor status.The
behaviorofNetTimeisthedomaincontrollersattempttocontact
thedomaincontrollerthatholdstheprimary domaincontroller
(PDC)FlexibleSingleMasterOperation(FSMO)role.Thedomain
controllerthatholdsthePDCFSMOrolecanqueryanexternal
timesourcetosetthetime.IftheNet Timecommandindicatesan
errortheindicationisraised andtheerrorcode iscaptured.The
event severityisWarningbydefault.Default configurationis1
occurrenceand0 holes.
Note: TheeventforBlockedNTPconnection doesnotoccur while
thereisanyserverwithin theforestthatprovidesatime
syncsource,keepingtheforesttimesynchronized.
Partnertimenotsynchronized
Theindicationcomparesservertimeonthelocalserverwiththe
servertimeofallreplicationpartners.Ifthetimedifferenceisnot
IfClockDelta Thresholdissetto0, theindicationisdisabled.The
event severityisWarningbydefault.Default configurationis1
occurrenceand0 holes.
ServerClockChange
Theindicationsignalsachangein localservertimebycomparing
thelocalservertimeagainstreplicationpartners.Ifthetimehas
changedrelativetoallreplicationpartners,theindicationisraised.
Theevent severityisMinorbydefault.Defaultconfigurationis1
occurrenceand0 holes.
Note: Thisindicationisdesignedtobe viewedwith TECasit is
onlyavailable foronecyclefollowingaclockchange.A
clearingeventhasnotbeen defined.
New threshold:ClockDelta Threshold
Anewthreshold hasbeenadded,ClockDelta Threshold,andappliesto
theindicationPartnertimenotsynchronized.
Network
latency
features
ExistingresourcemodelsTMW_InterSiteRepl andTMW_IntraSiteReplhavebeen
modifiedtocollectadditionalnetworklatencyinformation.
Eachresourcemodelcreates anobjecttorepresenta localendpointthatisrunning
theresourcemodel.Theobjectisplacedinthelostand founddirectoryofthe
defaultdomain onthelocaldomaincontroller.Theobjecthasonlytwoattributes
and isthereforelimitedin size.
Intra-site replicationresourcemodel
Creates anobject<servername>(intra)whereservernameisthelocalendpoint
runningtheresourcemodel.(Internal name:TMW_IntraSiteRepl)
Inter-site replicationresource model
Creates anobject<servername>(inter)whereservernameisthelocalendpoint
runningtheresourcemodel.(Internal name:TMW_InterSiteRepl)
New events
Thefollowingnew eventshavebeencreated toreportwhenthemeasured
replicationlatencybetweenreplicationpartners exceedsthespecified
ReplicationLatency Threshold(ReplicationLatencyThreshold):
v Forintra-sitereplicationlatency:TMW_IntraSiteRepl_Latent
v Forinter-sitereplicationlatency:TMW_InterSiteRepl_Latent
Theevent isgeneratedbydefaulton1occurrenceand0 holesandhasthe
severityWarning.
Note: ReportedReplicationLatency providesthecurrentmeasureof
replicationlatency.Ifa replicationwith aspecific partnerhasnot
occurred,theReplicationLatencycancontinuetogroweachcycle
untilconsistencyismet.Atthatpoint,ReplicationLatencypersists
untilLatencyFrequency expires.
New thresholds
Thefollowingnew thresholdshavebeencreated:
ReplicationLatencyThreshold
ReplicationLatency Threshold(ReplicationLatencyThreshold),has
v For intra-sitereplication:Whenmeasuredreplicationlatencyfor
an Intra-sitereplicationpartnerexceedsthespecifiedReplication
Latency Threshold,theeventIntra-sitereplicationlatent
(TMW_IntraSiteRepl_Latent) isgenerated.
v For inter-sitereplication:Whenmeasuredreplicationlatencyfor
an Inter-sitereplicationpartner exceedsthespecifiedReplication
Latency ThresholdtheeventInter-sitereplicationlatent
(TMW_InterSiteRepl_Latent)isgenerated.
New parameter
Anewparameter,Latency Frequency(latencyFrequency),hasbeen created.
Latency Frequencydetermineshowoftenlatencyismeasured,in minutes.
By defaultLatencyisnotmeasuredeverycycletominimizenetwork
traffic.Thedefaultfrequencyis60minutes,meaningthatafter60minutes,
thenetworklatencyofthenext resourcemodelcycle ismeasured.
Note: Thelastreportednetworklatencyvalue persistsuntila new
measurementisstarted.Forexample,provideda 60minuteLatency
Frequencyanda 300second Intra-siteNetwork Latencythevalue,
theeventIntra-sitereplicationlatent continuestoreport
ReplicationLatency=300 eachcycleuntiltheexpirationof60
minuteswhen anewmeasureistaken.
Domain
Trusts
resource
model
(Internal
name:
TMW_DCs_Trusts)
ThisresourcemodelverifiesTrustrelationshipsandsend eventsregardingadded
trusts,dropped trustsandfailingtrusts.Forallexistingtrustrelationships,the
resourcemodelconfirms thefollowing:
v Istheexistingtrustrelationship active?
v Isthesecurechannelwith theparentdomainavailable?
YoudeploytheDomaintrustsresourcemodelatleastonceinadomain tomonitor
trustrelationships.Youcandeploymultipleinstancesofthisresourcemodelina
single domain.For example,whenadomainspansgeographicalsites,youcan
deploy thisresourcemodeltoeverygeographicalsiteencompassed bythedomain.
Theresourcemodelmonitorseachexistingtrustamongdomains.Todothisthe
resourcemodelverifiesthefollowing:
v Alltrustrelationshipsare active.
v Securitychannelsareworkingproperly.
New events
Thefollowingeventsareavailable:
TMW_Dropped_Trusts
Domaintrusthasbeendropped.Thiseventissentwhena
previouslydetectedtrustisnolongeravailable.Thedefault
severityisWarning.
TMW_Added_Trust
Domaintrusthasbeenadded.Thiseventissentwhenanew Trust
hasbeenaddedtothedomain.ThedefaultseverityisWarning.
TMW_Trusts_Failing
Trustverification failed.Thisevent issentwhen attemptstoverify
thedomaintrusthavefailed.Thetrustisnotfunctional.The
New thresholds None.
New parameter:Dynamic_Trust_Updates(checkboxenable/disable)
Enablementof thisParameterallowstheresourcemodeltodynamically
updatethemonitoredTrusts.Onlyoneevent willbe senttonotifytheuser
thata trusthasbeenadded ordeletedwhendetected.Themonitoredtrust
informationwillbeupdatedtonotreportthisaddedordeletedtrustevent
again.
Disablingthisparameter stopstheresourcemodelfromdynamically
updatingthemonitoredTrusts.For eachresourcemodelcycle,events
continuetobesent tonotifytheuseroftheaddedordeletedTrusts.
Documentation
changes
for
problem
determination
The followingtopics arederivedfroma TechNoteandshouldbeincludedinthe
next revisionofthedocumentation:
v Generaltroubleshooting
v ActiveDirectoryresourcemodelsummaryandconfigurationtips
v
Errorhandling
General
troubleshooting
Use thefollowingmethodstoverifywhethera resourcemodelisrunningcorrectly.
Usingthewdmlsengcommand
Toverifythatthestatusoftheresourcemodelis″Running,″runthe
followingcommand:
wdmlseng -e <ep_label> -verbose
where <ep_label>isthenameoftheendpointonwhichtheresourcemodel
isrunning.
Thecommandreturnstheresourcemodelinternalnameoftheresource
model.Table7onpage21listsresourcemodelnameswith the
corresponding internalresourcemodelnames.
UsingTivoliEnterpriseConsole
Check foranerrorstatusforaresourcemodelbylookingfortheTivoli
EnterpriseConsole(TEC)event fromIBMTivoliMonitoringHeartbeat
whichshows″RMInError″forthis resourcemodelononeormore
endpoints. TivoliEnterpriseConsoledisplaystheinternalnameofthe
resourcemodel.Table7onpage21listsresourcemodelnameswiththe
corresponding internalresourcemodelnames.
Active
Directory
resource
model
summary
and
configuration
tips
Thissectionsummarizesthenamesand characteristicsoftheActiveDirectory
Table7.ActiveDirectoryresourcemodelsummaryandconfigurationtips Category Name
Distributiontarget&
purpose Configurationtips
Domain Controller DomainController Availability Internalname: TMW_DCs_Avail Distributiontarget: AllDomain
Controllersinaforest
Purpose:Monitor availabilityofthe following:
v DCholdingFSMO
roles
v Keyservices
v GlobalCatalogs
v Directreplica
partners
v
Makesuretheendpointbeingdistributedto,is
therightonefortheDomainControllertargeted
v
Searchinthesection″ErrorHandling″,forthe
correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.
DomainController Performance InternalName: TMW_DCs_Perf Distributiontarget: AllDomain
Controllersinaforest
Purpose:Monitor,
v NTDScounters
v Clientrequests
performance
v ExtensibleStorage
Engine(ESE) databaseactivity
v Makesuretheendpointbeingdistributedto,is
therightonefortheDomainControllertargeted
v Makesuretheperformanceobjectsusedbythis
resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)
v Searchinthesection″ErrorHandling″,forthe
correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.
Replicate Intra-sitereplication
InternalName:
TMW_IntraSite_Repl
Distributiontarget:
AllDomain
Controllersinaforest
Purpose:Monitor replicationstatusfor eachreplicated partition
v
Makesuretheendpointbeingdistributedto,is
therightonefortheDomainControllertargeted
v Searchinthesection″ErrorHandling″,forthe
correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.
Intra-sitereplication traffic InternalName: TMW_IntraSite_ReplTraff Distributiontarget: AllDomain
Controllersinaforest
Purpose:Monitor performanceofthe intrasitereplication traffic
v Makesuretheendpointbeingdistributedto,is
therightonefortheDomainControllertargeted
v Makesuretheperformanceobjectsusedbythis
resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)
v Searchinthesection″ErrorHandling″,forthe
correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.
Table7.ActiveDirectoryresourcemodelsummaryandconfigurationtips (continued) Category Name
Distributiontarget&
purpose Configurationtips
Inter-sitereplication
InternalName:
TMW_InterSite_Repl
Distributiontarget:
BridgeheadServer *
*Ifnotknownyou shouldusewlcftap commandtoset credentialsofauser thatcanlogintothe domain.
Purpose:Monitor intersitereplication statusforeach replicatedpartition withtheother bridgehead
v
Makesuretheendpointbeingdistributedto,is
therightonefortheDomainControllertargeted
v
Searchinthesection″ErrorHandling″,forthe
correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.
Inter-sitereplicationtraffic
InternalName:
TMW_IntraSite_ReplTraff
Distributiontarget:
BridgeheadServer*
*Ifnotknownyou maydistributethe resourcemodeltoall domaincontrollers: datawillbecollected onlyforthe
bridgeheadserver.
Purpose:Monitor performanceofthe intersitereplication traffic
v Makesuretheendpointbeingdistributedto,is
therightonefortheDomainControllertargeted
v Makesuretheperformanceobjectsusedbythis
resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)
v Searchinthesection″ErrorHandling″,forthe
correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.
ReplicationPerformance
InternalName:
TMW_ReplPerf
Distributiontarget:
AllDomain
Controllersinaforest
Purpose:Monitor performanceofthe replicationprocess
v Makesuretheendpointbeingdistributedto,is
therightonefortheDomainControllertargeted
v Makesuretheperformanceobjectsusedbythis
resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)
v Searchinthesection″ErrorHandling″,forthe
correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.
Table7.ActiveDirectoryresourcemodelsummaryandconfigurationtips (continued) Category Name
Distributiontarget&
purpose Configurationtips
FRS(FileReplication Service)Performance
InternalName:
TMW_FRSPerformance
Distributiontarget:
AllDomain
Controllersinaforest
Purpose:Monitor performanceofthe filereplicationservice process
v
Makesuretheendpointbeingdistributedto,is
therightonefortheDomainControllertargeted
v
Makesuretheperformanceobjectsusedbythis
resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)
v Searchinthesection″ErrorHandling″,forthe
correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.
DNS Windows2000DNS Serverperformanceand Windows2003DNS Serverperformance
InternalName:
TMW_DNSPerformance
Distributiontarget:
Windows2000DNS ServerandWindows 2003DNSServer
Purpose:Monitorthe following,
v DNSservice
v Performanceof
DNSzonetraffic andDNSupdate
v Makesuretheendpointbeingdistributedto,is
therightonefortheDomainControllertargeted
v Makesuretheperformanceobjectsusedbythis
resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)
v Searchinthesection″ErrorHandling″,forthe
correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.
ActiveDirectory IntegratedDNS InternalName: TMW_DNS_ADIntegrated Distributiontarget: DomainController hostingtheDNS*
*Theresourcemodel shouldbedistributed tothedomain controllerthathosts theDNSserverorto aDCsittingonthe samedomain.The domaincontroller shouldbeaGlobal Catalogandwlcftap shouldbeusedtoset credentialsofauser thatcanlogintothe domain.
Purpose:Monitor informationand consistencyofdata restoredintotheDNS zonesintegratedwith theActiveDirectory
v Makesuretheendpointbeingdistributedto,is
therightonefortheDomainControllertargeted
v
Makesuretheperformanceobjectsusedbythis
resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)
v Searchinthesection″ErrorHandling″,forthe
correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.
Table7.ActiveDirectoryresourcemodelsummaryandconfigurationtips (continued) Category Name
Distributiontarget&
purpose Configurationtips
DHCP Windows2000DHCP Serverperformanceand Windows2003DHCP Serverperformance
InternalName:
TMW_DHCPPerformance
Distributiontarget:
Windows2000DHCP ServerandWindows 2003DHCPServer
Purpose:Monitor DHCPserviceand PerformanceofDHCP traffic
v
Makesuretheendpointbeingdistributedto,is
therightonefortheDomainControllertargeted
v
Makesuretheperformanceobjectsusedbythis
resourcemodelareloaded,ifthewdmlseng outputshows″MissedPrereq″forthisresource model.(Formoredetail,see“Installingthe TMW_DCs_Perfresourcemodel’sprerequisite: Microsoftdatabaseperformanceobject”onpage 5.)
v Searchinthesection″ErrorHandling″,forthe
correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.
Trusts DomainTrusts
Internalname:
TMW_DCs_Trusts
Distributiontarget:
oneormoredomain controllersper domain
Purpose:VerifyTrust relationshipsand sendeventsregarding addedtrusts,dropped trusts,andfailing trusts
v Makesuretheendpointbeingdistributedto,is
therightonefortheDomainControllertargeted
v Searchinthesection″ErrorHandling″,forthe
correspondingnumbershowninthewdmlseng outputforthisresourcemodel.Performthe″User Action″listed.
Error
handling
Thissectionlists errorcodes thatresourcemodelscangeneratewhentheyarenot
in a″Running″state. Table10onpage25theerrorconditionsanduser actionsto
resolve theseconditions.
Errorhandling functionality: Whena resourcemodelisrunthroughtheTivoli
Monitoringapplication,theactiontheenginecantakedependsonthestateofthe
resourcemodel.Thepossiblestatesareeither assignedautomaticallybytheengine,
or specifiedbytheuserinthemonitoringalgorithmscript.Theresourcemodel
states aredisplayedtogetherwith themonitoringresults,bythecommandline,
TivoliMonitoringWebHealthConsole, orTivoliBusinessSystemsManager,when
enabled. Thefollowingtable showsthestatesthattheengine automaticallyassigns,
theexternal causesfromwhichthestatesresult,and therelatedactionsthatthe
engine takes.
Table8.Statesofresourcemodels
State CauseoftheState ActionTakenbytheEngine
Running Resourcemodelrunningsuccessfully None Stopped Userstoppedtheresourcemode,orit
hassuccessfullyfinishedrunning.
None
Disabled Useraction. None
Scheduled Userhasscheduledresourcemodelfora latertime.
None
Error Anerrorispreventingtheresource modelfromrunning.
Every3minutestheengineautomatically triestorerunit.
Table8.Statesofresourcemodels (continued)
State CauseoftheState ActionTakenbytheEngine
NotCompiled AnerrorinVisualBasicorJavaScript code
None
Itispossibletochangeresourcemodelstatebyusingreturncodes duringthe
monitoringalgorithm executionaswell.Youcanprogramtheresourcemodel
states duringmonitoringalgorithmexecutionbymakingVisitTree(),Init()or
SetDefaultConfiguration()toreturn acertaincode.Thesection ″ResourceModel
Troubleshooting″of″WorkbenchUser Guide″describesthisindetail. Depending
onthestate, theengine willperform adifferentaction.Thefollowingtable
describes whichstatecanbe triggeredbywhichreturncode(″CauseoftheState″
column) andthecorrespondingengineaction:
Table9.Statescodesforresourcemodels
Statecode CauseoftheState ActionTakenbytheEngine
Failed1-200.Theresource modelhasfailed
VisitTreereturncode:201-400 None
Failing1-200.Theresource modelhasanerror
VisitTreereturncode:401-600 Theengineautomaticallyretriesevery threeminutestoruntheresourcemodel. Retrying1-200.Theresourceis
running
VisitTreereturncode:601-800 Retries3timesineachcycletime, indefinitely,toruntheresourcemodel Unabletostart1-200.The
resourcemodelisunableto start.Assumedmissed prerequisites
Init,orSetDefaultConfigurationReturn code:801-1000
None
Recovering1-200.Theresource modelisrunning
VisitTreereturncode:1001-1100 Oncepercycle,forthreecyclesonly, triestoreruntheresourcemodel.After threeunsuccessfulattemptsinterprets theresourcemodelasfailed.
Failedafterrecovery Theresourcemodelfailedinthree successivecycles.Interpretedasfailed
None
Return codesofselectedresourcemodels: Table10contains alistingofthemost
currentresourcemodelreturn codes,theirdescription,and actionsforresolving
eachcode.Thereturn codenumberisdisplayedintheIBMTivoliMonitoringWeb
HealthConsolestatusfield.Youcanalsodisplayit usingthewdmlsengcommand.
Table10.Resourcemodelreturncodes
Code Description Resourcemodel
Statusof resource
model Useraction
1 TheOperating Systemwherethe resourcemodelis runningisnota Windows2000.
All Unableto Start
Checkthattheendpointwheretheresource modelisrunningisasupportedversionof Windows.See“Supportedoperatingsystemsfor endpoints”onpage5.IntheTmw2k.logfileon theendpointtheerrormessagescarriesthe Windowsversionlevel.
2 BindingtorootDSE objectfailed. Allexcept: TMW_DNS_Perfand TMW_DHCP_Perf Unableto Start
Checkthattheendpointwheretheresource modelisrunningisasupportedversionof Windows.See“Supportedoperatingsystemsfor endpoints”onpage5.
Table10.Resourcemodelreturncodes (continued)
Code Description Resourcemodel
Statusof resource
model Useraction
3 Errorloading IADsToolsDLL. DMfADresource model,usethe IADsToolsCOM objectprovidedinto Windows2000 SupportTools Component. Allexcept: TMW_DNS_Perfand TMW_DHCP_Perf Unableto Start
CheckthatWindows2000or2003SupportTools ComponentisinstalledontheDomainController wheretheresourcemodelhasbeendistributed.
5 Thecall
DsGetSiteName,for retrievingthesite nameofthedomain controller,failed.
TMW_DCs_Avail TMW_InterSite_Repl
Unableto Start
CheckDNSnamingresolutionfromtheDCtarget ofdistribution
8 Thecall
GetDefaultNaming\ Context,for
retrievingthedefault namingcontextof thedomain
controllerwherethe resourcemodelis running,failed.
TMW_DCs_Avail Unableto Start
-CheckthattheDNSserverconfigurationis correct.
-ChecktheconfigurationofActiveDirectoryon thedomaincontrollerwheretheresourcemodelis running.
-CheckiftheDirectoryServiceloghaslogged anyerrorsontheeventviewer.
TMW_DNS_AD \ Integrated
Failing
9 Thecall
GetNamingContexts, forretrievingthe3 defaultnaming contextsofthe domaincontrolleron whichtheresource modelisrunning, failed. TMW_IntraSite_Repl and TMW_InterSIte_Repl Unableto Start
-CheckthattheDNSserverconfigurationis correct.
-ChecktheconfigurationofActiveDirectoryon thedomaincontrollerwheretheresourcemodelis running.
-CheckiftheDirectoryServiceloghaslogged anyerrorsontheeventviewer.
10 Thecall
GetPartialNaming\ Context,for retrievingtheother namingcontexts storedonthedomain controlleronwhich theresourcemodelis running,failed. TMW_IntraSite_Repl and TMW_InterSIte_Repl Unableto Start
-CheckthattheDNSserverconfigurationis correct.
-ChecktheconfigurationofActiveDirectoryon thedomaincontrollerwheretheresourcemodelis running.
-CheckiftheDirectoryServiceloghaslogged anyerrorsontheeventviewer.
11 Namingresolution problemsonthe domaincontroller wheretheresource modelisrunning
TMW_DCs_Avail Failing -CheckthattheDNSisproperlyconfigured.
-Checkthatnslookupcancorrectlyresolvenames whenrunsonthedomaincontrollerwherethe resourcemodelisrunning.
Table10.Resourcemodelreturncodes (continued)
Code Description Resourcemodel
Statusof resource
model Useraction
12 Thecall
GetSiteLinks,for retrievingthe numberofsitelinks inthesitewherethe domaincontrolleris placed,failed.
TMW_InterSite_Repl Unableto start
-CheckthattheDNSserverconfigurationis correct.
-ChecktheconfigurationofActiveDirectoryon thedomaincontrollerwheretheresourcemodelis running.
-CheckiftheDirectoryServiceloghaslogged anyerrorsontheeventviewer.
13 Thecall
GetBridgeHeads\ InSite,forretrieving thenumberof bridgeheadservers inthesitewherethe domaincontrolleris placed,failed.
TMW_InterSite_Repl Unableto start
-CheckthattheDNSserverconfigurationis correct.
-ChecktheconfigurationofActiveDirectoryon thedomaincontrollerwheretheresourcemodelis running.
-CheckiftheDirectoryServiceloghaslogged anyerrorsontheeventviewer.
15 Theerrormaybe issuedbythe Inter-sitereplication resourcemodelif thereisno
authorizationtoread therequested replicationstate.
TMW_InterSite_Repl Unableto start
IftheresourcemodelistheInter-sitereplication resourcemodelandyouhavedistributedthe resourcemodeltoadomaincontrollerendpoint whichisnotabridgeheadserver,youmustrun thewlcftapcommandtoenableTivolitoaccess theremoteresources.Alternatively,youcan distributethisresourcemodeltoanydomain controlleractingasbridgeheadserverinyour domain.
16 Thecall
GetDirectPartnersEx, forretrievingthe numberof
replicationpartners oftheserver,failed.
TMW_InterSite_Repl and TMW_IntraSite_Repl Recovering andFailed after Recovering
-CheckthattheDNSserverconfigurationis correct.
-ChecktheconfigurationofActiveDirectoryon thedomaincontrollerwheretheresourcemodelis running.
-CheckiftheDirectoryServiceloghaslogged anyerrorsontheeventviewer.
17 Thiserrormightbe issuedbytheDNS ActiveDirectory integratedresource modelifabindingto theGlobalCatalog objectandabinding totheconfiguration Containerreturna differentnumberof domainsinthe forest.
TMW_DNS_AD \ Integrated
Unableto start
-CheckthattheDNSserverconfigurationis correct.
-ChecktheconfigurationofActiveDirectoryon thedomaincontrollerwheretheresourcemodelis running.
-CheckiftheDirectoryServiceloghaslogged anyerrorsontheeventviewer.