OpsMgr 2007 : 에이전트가 이벤트 ID 21016과 함께 중단되는 경우
???? : OpsMgr 2007: Agents stuck in Pending Management with Event ID 21016
??? ???? ??? ?? ? ??? ? ?? ???? ? ????. ??? ?? ??? ???? ?? ??? ??? ????? ????.
==========
?? ???? ???? System Center Operations Manager 2007 Agent? ????, ??? ????? ????? ???? ???? ??? "??? ???"??? ????. ???? ???? ???? ??? ????, ????? ??? ???? ?????. ??? ???? ??? ??? ? ????. ???? ???? ???? ????, ????? OpsMgr Health Service? ???? ???? ?? ?????.
????? ?? OpsMgr Health Service? ??????, Operations Manager? ??? ?? ???? ?????.
Event Type: Error
Event Source: OpsMgr Connector
Event Category: None
Event ID: 21016
Date:
Time:
User: N/A
Computer: AGENT
Description: OpsMgr was unable to set up a communications channel to OPSMGRMS.momv3.local and there are no failover hosts. Communication will resume when OPSMGRMS.momv3.local is both available and allows communication from this computer.
In this scenario, if you install an agent manually, the manually installed agent logs the OpsMgr Connector 21016 event, but never appears in the Operations Console. This occurs even when you have enabled the option to review or automatically approve manually installed agents.
??
???? ??? ???? ????? ??????, ????? ??? ? ?? ?????. ? ???? ?? ??? ??? ??? ? ??(push install?? ?????) ??? ????? ????? ?? ??? ???? ????. ????? ?? ??? ? ??? ??????, ?? ???? Kerberos ??? ?? ?? ????.
? ??? ?? ?? HealthService? SPN(ServicePrincipalName)? ???? ???? ??? ???? ???? ?????(?? ?? ???? SPN? ?? ??). ??? ??????? OpsMgr Connector 21016 ??? ??? ??? ?? ??? ???? ?? ????.
Event Type: Error
Event Source: OpsMgr Connector
Event Category: None
Event ID: 20057
Date:
Time:
User: N/A
Computer: AGENT
Description: Failed to initialize security context for target MSOMHSvc/OPSMGRMS.momv3.local The error returned is 0x80090303(The specified target is unknown or unreachable). This error can apply to either the Kerberos or the SChannel package.
Event Type: Error
Event Source: OpsMgr Connector
Event Category: None
Event ID: 21001
Date:
Time:
User: N/A
Computer: AGENT
Description: The OpsMgr Connector could not connect to MSOMHSvc/OPSMGRMS.momv3.local because mutual authentication failed. Verify the SPN is properly registered on the server and that, if the server is in a separate domain, there is a full-trust relationship between the two domains.
KB 262177? ?? ??? ?? ????? Kerberos ??? ??? ?????, ???? ??? ??? ??? ??? ???? ?? ????.
Event Type: Error
Event Source: Kerberos
Event Category: None
Event ID: 3
Date:
Time:
User: N/A
Computer: AGENT
Description:
A Kerberos Error Message was received:
on logon session
Client Time:
Server Time:
Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
Extended Error:
Client Realm:
Client Name:
Server Realm: MOMV3.LOCAL
Server Name: MSOMHSvc/opsmgrms.momv3.local
Target Name: MSOMHSvc/opsmgrms.momv3.local@MOMV3.LOCAL
Error Text:
File: 9
Line: ae0
Error Data is in record data.
???? ??? ?? KDC??? ???? ???? 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN ??? ?? ????. ? ??? ???? HealthService? SPN ?? ??? ?? ?? ?????. SPN ??? ????? Windows Server 2003 Support Tools? ?? setspn.exe? ?????. ? ??? ???? ?? ???? ????? ?? ????.
To list SPNs for a computer or user account, use the following syntax:
??? ?? ??? ??? SPN? ????? ??? ?? ?????.
setspn -L computername
-??-
setspn -L username
????? OpsMgr Health Service ??? ??? ?? ?????, HealthService SPN? AD? ??? ???? ?????. ????? OpsMgr Health Service ??? ??? ?????(????? ?? ??), HealthService SPN? ??? ???? ?????. OpsMgr Health Service ??? ??? ????? ?? ??? ???? ?????. ??? ??? ???, Services MMC ???? ??, OpsMgr Health Service? ?? ???? ????? ?????.
HealthService SPNs? ??? ??? ???.
MSOMHSvc/FQDN
MSOMHSvc/COMPUTERNAME
Example setspn -L output
==================================================================
OpsMgr Health Servic ??? ???? ?? ???? ???? ?? :
CN=OPSMGRMS,CN=Computers,DC=momv3,DC=local?? SPN? ??????
MSOMHSvc/OPSMGRMS
MSOMHSvc/OPSMGRMS.momv3.local
HOST/OPSMGRMS
HOST/OPSMGRMS.momv3.localset
??? ?? ????? OpsMgr Health Service ??? ??? ??? ???? ???? ?? :
CN=hservice_acct,CN=Users,DC=momv3,DC=local?? SPN? ??????
MSOMHSvc/OPSMGRMS1
MSOMHSvc/OPSMGRMS1.momv3.local
MSOMHSvc/OPSMGRMS2
MSOMHSvc/OPSMGRMS2.momv3.local
MSOMHSvc/OPSMGRMS3
MSOMHSvc/OPSMGRMS3.momv3.local
==================================================================
OpsMgr Health Service? ?????? ?? SPN ??? ???? ?? ?????. ?? SPN ??? ????, ???? ??? ??? Active Directory?? SPN? ???? ?? ??? ??? ?????. ? ???? setspn -A? ?? ???? SPN? ??? ? ????. ??? ??? ??? ??? ???? ? ??? ???? ???. ?? ?? OpsMgr Health Service ??? ???? ?? ???? ???? opsmgrms.momv3.local?? ??? ????? HealthService SPN? ????? ?? ??? ?????.
setspn -A MSOMHSvc/OPSMGRMS opsmgrms
setspn -A MSOMHSvc/OPSMGRMS.momv3.local opsmgrms
??? ???? ????.
Michael Sadoff | Support Escalation Engineer