Event Id 6281 and Web Application with Hexcode (0x80072afc)

The error looks similar as discussed in following thread.

http://www.symantec.com/connect/forums/event-6281-istorageonlineopns-0x80072afc

Hello Pradeep,

Thanks for pointing me to the Thread. A lot of information there... will check the logs (IIS and backtrace).

I will update this thread accordingly.

Thanks once again.

Enabled logging of w3wp process in Dtrace and came across these strings…

3837 17:54:49.717  [24356] (w3wp) <16664> EV:L {CClientAuthenticate::GenAuthString:#361} Generating auth string...

3838 17:54:49.717  [24356] (w3wp) <16664> EV:M ClientAuthHelperImpl::GenAuthString Authentication Type: Currently impersonated user Client:(null) ==> AuthToken:##.##.##.## kaPY*****

3841 17:54:49.936  [24356] (w3wp) <11848> EV:L {VaultCoCreateInstanceEx} Attempt [1] to create COM object failed. CLSID [{F4D3EB5B-C7C5-11D1-90DB-0000F879BE6A}] Server Name [EVSERVER01 (2)] Elapsed [2.288s] Result [The RPC server is unavailable.  (0x800706ba)]

3844 17:54:52.432  [24356] (w3wp) <11848> EV:H VaultCoCreateInstanceEx GetMachineNameUsingHostNameHelper failed. Server Name [EVSERVER01 (2)] Error [The requested name is valid, but no data of the requested type was found.  (0x80072afc)]

3845 17:54:52.432  [24356] (w3wp) <11848> EV:M CBaseDirectoryServiceWrapper::CreateDirectoryService() failed.|Hr: 0x80072afc|Retries: 0|TryLocal: false|Directory Name: EVSERVER01 (2)|

3846 17:54:52.432  [24356] (w3wp) <11848> EV:H {CBaseDirectoryServiceWrapper::GetInterface} HRXEX fn trace : Error [0x80072afc], ref(1): [EVSERVER01 (2)], [.\DirectoryServiceWrapper.cpp, lines {629,656,680}, built Jul 10 17:51:39 2013].

3848 17:54:52.432  [24356] (w3wp) <11848> EV:L {VaultCoCreateInstanceEx} CLSID [{F4D3EB5B-C7C5-11D1-90DB-0000F879BE6A}] Server Name [(null)] Used Server Name [(null)] Num of attempts [1] Total elapsed [0.001s] Result [Success  (0)]

3849 17:54:52.432  [24356] (w3wp) <11848> EV~E Event ID: 6281 Could not obtain the computer name on which to query for an IStorageOnlineOpns interface|The requested name is valid, but no data of the requested type was found.  (0x80072afc) |

Referring Scenario 2 in TECH202843 as Deletion of Orphaned Shortcuts is enabled.

From <https://support.symantec.com/en_US/article.TECH202843.html>

Everything seems to be ok on that count.

On checking the IIS Log at the time of the occurence of the event (as on August 12, 2015), there is nothing evident.

Anything I am missing.

It looks there are some client request that is looking for server name “EVSERVER01(2)” but the actual server name is “EVSERVER01”, so the “(02)” adding incorrectly. The last instance I know it was because of corrupt MDC file (Ex the file name was “ …EVSERVER01(2)”). May be you can post IIS logs if you can OR create a support case to analyze it further.

Hello Pradeep,

Pasting an extract of the IIS Log which matches up with the Date/Timestamp of the Dtrace I shared earlier. Nothing in here points to the Vault Cache (.MDC files).

<For Security Reasons, I have hid the users' names and the IP Addresses>

2015-08-07 17:54:29 ##.##.##.## GET /EnterpriseVault/Slot.aspx ArchiveID=17AB9A1FEEFE5C549874735A606E596761110000evserver01&TimeOut=0 80 <Domain\Username1> ##.##.##.##EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 51932
2015-08-07 17:54:31 ##.##.##.## GET /EnterpriseVault/SyncPoint.aspx Slot=0a3fda32-033e-4c2f-a01b-ff4483f3b26f&ArchiveID=17AB9A1FEEFE5C549874735A606E596761110000evserver01&SyncPoint=4352&SiteID=1B1A3798240C102499DCE0301C19D2F231d10000evserver01 80 VF-ROOT\<username> ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 733
2015-08-07 17:54:31 ##.##.##.## GET /EnterpriseVault/GetArchiveFolderHierarchy.aspx archiveId=17AB9A1FEEFE5C549874735A606E596761110000evserver01 80 <Domain\Username1> ##.##.##.##EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 655
2015-08-07 17:54:32 ##.##.##.## GET /EnterpriseVault/Slot.aspx ArchiveID=17AB9A1FEEFE5C549874735A606E596761110000evserver01&Slot=0a3fda32-033e-4c2f-a01b-ff4483f3b26f&release=true&MSt=0&CSt=3&Ls=2015-08-07T17:55:29&Ci=18230&Td=0 80 <Domain\Username1> ##.##.##.##EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 577
2015-08-07 17:54:32 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 <Domain\Username1> ##.##.##.##EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 530
2015-08-07 17:54:34 ##.##.##.## GET /EnterpriseVault/ClientDiagnostics.aspx P=2&MSt=0&CSt=3&Ci=18230&Td=0&Fa=0&Host=INKAGULLT0161.int.vodafone.in&AId=17AB9A1FEEFE5C549874735A606E596761110000evserver01&OLVer=14.0.0.6117 80 <Domain\Username1> ##.##.##.##EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 780
2015-08-07 17:54:45 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 <Domain\Username2> ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 0
2015-08-07 17:54:51 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 - ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 401 2 5 31
2015-08-07 17:54:51 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 - ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 401 2 5 15
2015-08-07 17:54:51 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 <Domain\Username3> ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 78
2015-08-07 17:54:51 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 <Domain\Username3> ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 140
2015-08-07 17:54:51 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 - ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 401 2 5 31
2015-08-07 17:54:51 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 <Domain\Username3> ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 234
 

Anything other information, you require? Is there something I am missing?

What it looks to me, the time of a d-trace is always where the server is based on (timezone) but IIS log stamp UTC time, so you may need to convert the time of d-trace to UTC and check if you get anything with status code 500.

Hi,

Attaching the IIS Logging Setting in the thread. Just let me know if it would create an issue as you pointed out or not.