Announcement

Collapse
No announcement yet.

TimeOut Errors AD

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • TimeOut Errors AD

    Once in a while we get the following error mesages when the application is trying to authenticate users using AD.

    Status: Error 51 . 00002024: LdapErr: DSID-0C060597, comment: No other operations may be performed on the connection while a bind is outstanding., data 0, v1db0.

    Could not find anything interesting searching for this message.

    Any suggestions will be appreciated.

  • #2
    Re: TimeOut Errors AD

    Well, let's start 20 questions with

    What application are you referring to?
    Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

    Comment


    • #3
      Re: TimeOut Errors AD

      Application is called SiteMinder it is a SSO application that uses AD as the user store and i am querying AD servers acting as Global Catalogs.

      This application will use a bind id/service account to make connection with AD.

      Comment


      • #4
        Re: TimeOut Errors AD

        q2: have you spoken to the vendor ?
        Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

        Comment


        • #5
          Re: TimeOut Errors AD

          Yes we have..as per them this is a AD error message and is coming most probably because of a network problem.

          I was hoping it could find some more information based on the error message.

          Comment


          • #6
            Re: TimeOut Errors AD

            It's good to know that you've spoken to the vendor, even if they've passed the buck. We're down to 18 remaining questions.

            Alright - we're going to go out on a limb here and ask several questions at once.

            Don't worry, I'll be able to cope with the influx of information.

            Q3: You report the issue as occuring intermittently. Is there any particular time frame you can trap when it defnitely occurs?


            Q4: has the program ALWAYS generated these errors, or has it only started occuring recently ?
            Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

            Comment


            • #7
              Re: TimeOut Errors AD

              I wud say most of the times i see these messages early in the morning around 80% of the time but i have noticed these messages and TimeOut messages in the afternoon also. I am also going to check with the corporate AD guys to see if any of the DC's are getting rebooted at that time.

              Started noticing these messages a couple of months ago..

              Comment


              • #8
                Re: TimeOut Errors AD

                16 questions remaining.

                Q5: And when you say in the morning, do you mean during the peak logon/log off period?


                Q6: how many domain controllers do you have

                q7: what operating systems do they run

                q8: what functional level do you have

                q9: what changed prior to the problem starting?

                q10: Is there any specific users it happens with?
                Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

                Comment


                • #9
                  Re: TimeOut Errors AD

                  Ans5 : It is before the peak login/logoff time between 6-7 am.

                  Ans6 : Not sure of the exact DC's in the forest ( but my application is configured to talk to 4.

                  Ans7 : Windows 2008

                  Ans8 : I do not have any access to the DC's i use a Read only account to query DC's.

                  Ans9 : No idea if anything changed.

                  Ans10 : It happens to all the user requests during that time frame.

                  Comment


                  • #10
                    Re: TimeOut Errors AD

                    11) have you run any network traces
                    12) have people who do have access to the DCs reviewed the event logs?
                    13) can you tie it to any particular DC?) 11 might help with this)
                    Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

                    Comment


                    • #11
                      Re: TimeOut Errors AD

                      To be honest whilst I agree that this shouldn't really be happening in a healthy network, I can't help thinking the application should handle it better and the vendor should do more than just say it is a network problem. It seems like the application is trying to do something with an AD object before actually validating that it has successfully completed the bind to it. Without seeing their code its impossible to say if it is down to bad design/coding or if its something that they cannot do anything about, but it seems odd to me.

                      Anyway, I think you should get whoever looks after the DCs to take a good look at the load that is being placed on them (e.g checking how much processing power, memory, bandwidth they are using during peak times) and go through the event logs to see if there is any record of them being too busy.
                      Software for IT Pros that I've written: http://www.cjwdev.co.uk/Software.html

                      My blog: http://cjwdev.wordpress.com

                      Comment


                      • #12
                        Re: TimeOut Errors AD

                        Originally posted by chris128 View Post
                        To be honest whilst I agree that this shouldn't really be happening in a healthy network, I can't help thinking the application should handle it better and the vendor should do more than just say it is a network problem. It seems like the application is trying to do something with an AD object before actually validating that it has successfully completed the bind to it. Without seeing their code its impossible to say if it is down to bad design/coding or if its something that they cannot do anything about, but it seems odd to me.

                        Anyway, I think you should get whoever looks after the DCs to take a good look at the load that is being placed on them (e.g checking how much processing power, memory, bandwidth they are using during peak times) and go through the event logs to see if there is any record of them being too busy.
                        they're all good points. HOwever to be fair, one of the responses was that this happens prior to peak logon/off periods - I'd suspect that if this behaviour is caused by load, they'd be seeing it then as well, and probably more so than with siteminder.
                        Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

                        Comment


                        • #13
                          Re: TimeOut Errors AD

                          Oh sorry I must have misread something then, I thought I read that it was mostly happening at peak times. Even so, still certainly worth checking the load on the DCs anyway - if they all look like they are not doing a lot then perhaps checking the network speed between the machine that is throwing this error and the DCs, because binding to an AD object should be an extremely quick operation and if its taking too long then I would say it has to be one of four things:
                          1. Problem with the DCs performance
                          2. Problem with the network connection performance between the DC and the machine running the application experiencing the problem
                          3. Problem with the machine running the application's performance
                          4. Problem with the way the application is written
                          Software for IT Pros that I've written: http://www.cjwdev.co.uk/Software.html

                          My blog: http://cjwdev.wordpress.com

                          Comment

                          Working...
                          X