cancel
Showing results for 
Search instead for 
Did you mean: 

Event Id 6281 and Web Application with Hexcode (0x80072afc)

SheldonDsouza
Level 4
Certified

Hello Everyone,

I am managing an Enterprise Vault 10.0.4 Environment running in a Microsoft Cluster (N+1). What I see in the Event Viewer is not environment specific (No I have not been on as many environments to make such comment), but I am pretty certain it is not related to the Cluster Setup.

In the Event Viewer, I am seeing a lot of Errors with Event Id 6281 for the Web Application. The Exact message reads as follows...

"

Could not obtain the computer name on which to query for an IStorageOnlineOpns interface

The requested name is valid, but no data of the requested type was found. (0x80072afc)

"

Tried searching the KB, but not much luck. help from the community (even if it is a pointer will do) will be highly appreciated

Regards,
Sheldon Dsouza
7 REPLIES 7

Pradeep-Papnai
Level 6
Employee Accredited Certified

The error looks similar as discussed in following thread.

http://www.symantec.com/connect/forums/event-6281-istorageonlineopns-0x80072afc

 

 

 

SheldonDsouza
Level 4
Certified

Hello Pradeep,

Thanks for pointing me to the Thread. A lot of information there... will check the logs (IIS and backtrace).

I will update this thread accordingly.

Thanks once again.

Regards,
Sheldon Dsouza

SheldonDsouza
Level 4
Certified

Enabled logging of w3wp process in Dtrace and came across these strings…

 

3837 17:54:49.717  [24356] (w3wp) <16664> EV:L {CClientAuthenticate::GenAuthString:#361} Generating auth string...

3838 17:54:49.717  [24356] (w3wp) <16664> EV:M ClientAuthHelperImpl::GenAuthString Authentication Type: Currently impersonated user Client:(null) ==> AuthToken:##.##.##.## kaPY*****

3841 17:54:49.936  [24356] (w3wp) <11848> EV:L {VaultCoCreateInstanceEx} Attempt [1] to create COM object failed. CLSID [{F4D3EB5B-C7C5-11D1-90DB-0000F879BE6A}] Server Name [EVSERVER01 (2)] Elapsed [2.288s] Result [The RPC server is unavailable.  (0x800706ba)]

3844 17:54:52.432  [24356] (w3wp) <11848> EV:H VaultCoCreateInstanceEx GetMachineNameUsingHostNameHelper failed. Server Name [EVSERVER01 (2)] Error [The requested name is valid, but no data of the requested type was found.  (0x80072afc)]

3845 17:54:52.432  [24356] (w3wp) <11848> EV:M CBaseDirectoryServiceWrapper::CreateDirectoryService() failed.|Hr: 0x80072afc|Retries: 0|TryLocal: false|Directory Name: EVSERVER01 (2)|

3846 17:54:52.432  [24356] (w3wp) <11848> EV:H {CBaseDirectoryServiceWrapper::GetInterface} HRXEX fn trace : Error [0x80072afc], ref(1): [EVSERVER01 (2)], [.\DirectoryServiceWrapper.cpp, lines {629,656,680}, built Jul 10 17:51:39 2013].

3848 17:54:52.432  [24356] (w3wp) <11848> EV:L {VaultCoCreateInstanceEx} CLSID [{F4D3EB5B-C7C5-11D1-90DB-0000F879BE6A}] Server Name [(null)] Used Server Name [(null)] Num of attempts [1] Total elapsed [0.001s] Result [Success  (0)]

3849 17:54:52.432  [24356] (w3wp) <11848> EV~E Event ID: 6281 Could not obtain the computer name on which to query for an IStorageOnlineOpns interface|The requested name is valid, but no data of the requested type was found.  (0x80072afc) |

 

Referring Scenario 2 in TECH202843 as Deletion of Orphaned Shortcuts is enabled.

 

From <https://support.symantec.com/en_US/article.TECH202843.html>

Everything seems to be ok on that count.

On checking the IIS Log at the time of the occurence of the event (as on August 12, 2015), there is nothing evident.

Anything I am missing.

 

Regards,
Sheldon Dsouza

Pradeep-Papnai
Level 6
Employee Accredited Certified

It looks there are some client request that is looking for server name “EVSERVER01(2)” but the actual server name is “EVSERVER01”, so the “(02)” adding incorrectly. The last instance I know it was because of corrupt MDC file (Ex the file name was “ …EVSERVER01(2)”). May be you can post IIS logs if you can OR create a support case to analyze it further.

SheldonDsouza
Level 4
Certified

Hello Pradeep,

Pasting an extract of the IIS Log which matches up with the Date/Timestamp of the Dtrace I shared earlier. Nothing in here points to the Vault Cache (.MDC files).

<For Security Reasons, I have hid the users' names and the IP Addresses>

2015-08-07 17:54:29 ##.##.##.## GET /EnterpriseVault/Slot.aspx ArchiveID=17AB9A1FEEFE5C549874735A606E596761110000evserver01&TimeOut=0 80 <Domain\Username1> ##.##.##.##EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 51932
2015-08-07 17:54:31 ##.##.##.## GET /EnterpriseVault/SyncPoint.aspx Slot=0a3fda32-033e-4c2f-a01b-ff4483f3b26f&ArchiveID=17AB9A1FEEFE5C549874735A606E596761110000evserver01&SyncPoint=4352&SiteID=1B1A3798240C102499DCE0301C19D2F231d10000evserver01 80 VF-ROOT\<username> ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 733
2015-08-07 17:54:31 ##.##.##.## GET /EnterpriseVault/GetArchiveFolderHierarchy.aspx archiveId=17AB9A1FEEFE5C549874735A606E596761110000evserver01 80 <Domain\Username1> ##.##.##.##EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 655
2015-08-07 17:54:32 ##.##.##.## GET /EnterpriseVault/Slot.aspx ArchiveID=17AB9A1FEEFE5C549874735A606E596761110000evserver01&Slot=0a3fda32-033e-4c2f-a01b-ff4483f3b26f&release=true&MSt=0&CSt=3&Ls=2015-08-07T17:55:29&Ci=18230&Td=0 80 <Domain\Username1> ##.##.##.##EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 577
2015-08-07 17:54:32 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 <Domain\Username1> ##.##.##.##EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 530
2015-08-07 17:54:34 ##.##.##.## GET /EnterpriseVault/ClientDiagnostics.aspx P=2&MSt=0&CSt=3&Ci=18230&Td=0&Fa=0&Host=INKAGULLT0161.int.vodafone.in&AId=17AB9A1FEEFE5C549874735A606E596761110000evserver01&OLVer=14.0.0.6117 80 <Domain\Username1> ##.##.##.##EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 780
2015-08-07 17:54:45 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 <Domain\Username2> ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 0
2015-08-07 17:54:51 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 - ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 401 2 5 31
2015-08-07 17:54:51 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 - ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 401 2 5 15
2015-08-07 17:54:51 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 <Domain\Username3> ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 78
2015-08-07 17:54:51 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 <Domain\Username3> ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 140
2015-08-07 17:54:51 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 - ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 401 2 5 31
2015-08-07 17:54:51 ##.##.##.## GET /EnterpriseVault/clienttest.gif - 80 <Domain\Username3> ##.##.##.## EnterpriseVaultOutlookExt-V10.0.3.1169 200 0 0 234
 

Anything other information, you require? Is there something I am missing?

 

Regards,
Sheldon Dsouza

Pradeep-Papnai
Level 6
Employee Accredited Certified

What it looks to me, the time of a d-trace is always where the server is based on (timezone) but IIS log stamp UTC time, so you may need to convert the time of d-trace to UTC and check if you get anything with status code 500.

SheldonDsouza
Level 4
Certified

Hi,

Attaching the IIS Logging Setting in the thread. Just let me know if it would create an issue as you pointed out or not.

IIS_Logging_Setting_01.jpg

 

IIS_Logging_Setting_02.jpg

Regards,
Sheldon Dsouza