TeamSite 6.5 iwtrace.log error question

Hello All-

I am working on an access issue in our TeamSite 6.5 environment running on Windows 2000 server. After searching the forums for info about an error message I saw in iwtrace.log, I added the verbose iwtrace logging to the [iw_server] section of iw.cfg. Below is some of the output of my iwtrace.log after making this change (the returned groups have been replaced with "..." for brevity. some DC names have been changed to protect the innocent.) Can anyone tell me what the meaning of the following error codes are in the context of TeamSite running in an Active Directory permissions environment?

NetUserGetGroups error=2221
NetUserGetGroups error=53

NetUserGetLocalGroups error=1722

some FYI about our AD permission structure:
-The teamsite server lives in the SSV domain
-The local groups assigned to the teamsite resources are hosted in the SSV domain
-The global groups controlling domain user access to the resources in teamsite are hosted in the user's domain. e.g. global groups that dis\susier is a member of exist in the DIS domain.

Any input, suggestions or observations are much appreciated. Thanks for your time.

Regards,

-Nathan
Washington State DIS
~~~

user: ssv\julia

Ask local system:
[Tue Mar 29 10:14:20 2005] Domain "SSV": pdc="\\SSVDCOLY03" confirmed.
NetUserGetLocalGroups( "NULL", "ssv\julia") ["Backup Operators" "Administrators" "Users" ]
Ask domain <SSV>:
NetUserGetGroups( "\\SSVDC03", "julia")[ ... ]
NetUserGetLocalGroups( "\\SSVDC03", "julia") [... ]
Ask domain <DIS>:
NetUserGetGroups( "\\DISDC61", "ssv\julia") failed, error=2221
NetUserGetLocalGroups( "\\DISDC61", "ssv\julia") [ ... ]
Ask domain <DSHS>:
NetUserGetGroups( "\\DSHSDC6030-T", "ssv\julia") failed, error=53
NetUserGetLocalGroups( "\\DSHSDC6030-T", "ssv\julia") failed, error=1722
Ask domain <DRS>:
NetUserGetGroups( "\\DRSGC02", "ssv\julia") failed, error=53
NetUserGetLocalGroups( "\\DRSGC02", "ssv\julia") failed, error=1722

groups = [ ... ]

user: dis\susier

Ask local system:
NetUserGetLocalGroups( "NULL", "dis\susier") []
Ask domain <SSV>:
NetUserGetGroups( "\\SSVDC03", "dis\susier") failed, error=2221
NetUserGetLocalGroups( "\\SSVDC03", "dis\susier") [... ]
Ask domain <DIS>:
NetUserGetGroups( "\\DISDC61", "susier") [ ... ]
NetUserGetLocalGroups( "\\DISDC61", "susier") [ ... ]
Ask domain <DSHS>:
NetUserGetGroups( "\\DSHSDC6030-T", "dis\susier") failed, error=53
NetUserGetLocalGroups( "\\DSHSDC6030-T", "dis\susier") failed, error=1722
Ask domain <DRS>:
NetUserGetGroups( "\\DRSGC02", "dis\susier") failed, error=53
NetUserGetLocalGroups( "\\DRSGC02", "dis\susier") failed, error=1722

groups = [ ... ]

user: dshs\colsoc

Ask local system:
NetUserGetLocalGroups( "NULL", "dshs\colsoc") []
Ask domain <SSV>:
NetUserGetGroups( "\\SSVDC03", "dshs\colsoc") failed, error=2221
NetUserGetLocalGroups( "\\SSVDC03", "dshs\colsoc") [ ... ]
Ask domain <DIS>:
NetUserGetGroups( "\\DISDC61", "dshs\colsoc") failed, error=2221
NetUserGetLocalGroups( "\\DISDC61", "dshs\colsoc") []
Ask domain <DSHS>:
NetUserGetGroups( "\\DSHSDC6030-T", "colsoc") failed, error=53
NetUserGetLocalGroups( "\\DSHSDC6030-T", "colsoc") failed, error=1722
Ask domain <DRS>:
NetUserGetGroups( "\\DRSGC02", "dshs\colsoc") failed, error=53
NetUserGetLocalGroups( "\\DRSGC02", "dshs\colsoc") failed, error=1722

groups = [ ... ]

user: drs\lylet

Ask local system:
NetUserGetLocalGroups( "NULL", "drs\lylet") failed, error=1722
Ask domain <SSV>:
NetUserGetGroups( "\\SSVDC03", "drs\lylet") failed, error=2221
NetUserGetLocalGroups( "\\SSVDC03", "drs\lylet") failed, error=1722
Ask domain <DIS>:
NetUserGetGroups( "\\DISDC61", "drs\lylet") failed, error=2221
NetUserGetLocalGroups( "\\DISDC61", "drs\lylet") failed, error=1722
Ask domain <DSHS>:
NetUserGetGroups( "\\DSHSDC6030-T", "drs\lylet") failed, error=53
NetUserGetLocalGroups( "\\DSHSDC6030-T", "drs\lylet") failed, error=1722
Ask domain <DRS>:
NetUserGetGroups( "\\DRSGC02", "lylet") failed, error=53
NetUserGetLocalGroups( "\\DRSGC02", "lylet") failed, error=1722

groups = []

Edited by NathansDIS on 03/29/05 11:09 AM (server time).

Find more posts tagged with

Comments

iwovGraduate

Theres a KB or two out there regarding this. Did you check the KBs ?
Also, these error codes are windows error codes. You might also want to search the Microsoft KBs for detailed explanation.

NathansDIS

Didn't find the KBs, but I find this in a doc that I got from support called 'Diagnosing Active Directory Permission Problems':

4. Look for error messages like “NetUserGetGroups failed with error=1722” “Error=1722” is Windows-speak for “RPC_SERVER_UNAVAILABLE” and indicates a problem with the domain mentioned in the error message. This indicates a network problem rather than a TeamSite problem. If there are more than a few of these messages in the log, there is probably a problem with the response time of one or more of the domains.

5. Ignore “NetUserGetGroups failed” with “error=2221” or “error=53” “Error=2221” means NERR_UserNotFound and error=53 means ERROR_BAD_NETPATH. In almost all cases, these errors have no significance and can be ignored. TeamSite asks all domains about all users, and if there are several domains in the system, there are bound to be redundant queries, which cause these kinds of failures.

Hope this helps someone. If anyone knows the KBs, please post. Thx,

-Nathan
WA DIS
~~~