GetOnlineAttachmentFileSize 0x80010105 when opening archived mail

[jonc]

I have a customer running EV2007 v7.5.
After applying windows updates last night all users are suddenly unable able to open the original items when accessing archived mail messages.
The vaultserver displays the following event error in the EV event log:

Event Type: Warning
Event Source: Enterprise Vault
Event Category: Web Application (WP)
Event ID: 6287
Date: 30/06/2009
Time: 10:04:42 a.m.
User: N/A
Computer: SERVERNAME
Description:
Unable to fetch item from "evserver.internal.customer.co.nz".
Reason: The server threw an exception. [0x80010105]
Saveset Id: 261000000000000~200606062331580000~0~4D609DB3955A4C85A5B6EB993CDADB4
Archive Name: Shared Emails
Archive Folder Path: �Project Folders�10133 Toll Stage 2�Consultants�H&G�From
Reference: [GOAFS]

The user sees the following message in their browser:
GetOnlineAttachmentFileSize 0x80010105

Any ideas what the fix is?
The following updates were applied last night:
KB961501
KB961373
KB968537
KB960803
KB970238
KB970483
KB959426
KB969898
KB923561
KB956572
KB952004

[John_Chisari]

Are you able to open the item via Archive Explorer or Search.asp?

You might have MAPI issues on the EV server judging by that error.  run through this article - www-secure.symantec.com/connect/articles/mapi-issues - see how you go.
Also a re-install of the EV binaries may help.

What specific service pack are you using of Ev2007?

[MichelZ]

Hi there

Do you need any more assistance on this subject?
If not, could you please mark the solution to your Problem with the "Mark As Solution" Button?

Thanks & Cheers
Michel

[Ralfeus]

I have same problem. Mentioned about article didn't help. Only difference - before the error event mentioned above I have additional error event:

Event Type:    Error
Event Source:    Enterprise Vault
Event Category:    Web Application (WP)
Event ID:    6281
Date:        10/7/2009
Time:        4:35:59 PM
User:        N/A
Computer:    SEV3
Description:
Could not obtain the computer name on which to query for an IStorageOnlineOpns interface
The EnterpriseVault.DirectoryVault object reported an error.        [0xc00420c8]

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp

Event Type:    Warning
Event Source:    Enterprise Vault
Event Category:    Web Application (WP)
Event ID:    6287
Date:        10/7/2009
Time:        4:35:59 PM
User:        N/A
Computer:    SEV3
Description:
Unable to fetch item from "".
Reason: The EnterpriseVault.DirectoryVault object reported an error.        [0xc00420c8]
Saveset Id: 250000000000000~200902120428420000~1~FB7814B30EFD4F4E903E785407D7E69
Archive Name: <unavailable>
Reference: [GOAFS]

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp

[MichelZ]

Strange one.

Could you dtrace the storage service?
Have you changed computer names in the past? (EV)

Cheers
Michel

[Ralfeus]

I set StorageRestore to Verbose and tried to open direct URL of the saveset:
http://sevemea3/EnterpriseVault/Viewmessage.asp?vaultid=18E5AEFE7B3A3D1418C2F34553B68A4521110000EVEMEA&savesetid=250000000000000~200902120428420000~1~FB7814B30EFD4F4E903E785407D7E69

dtrace showed following:
1,102 16:47:36.744 [3,888] (w3wp) <8412> EV~E Event ID: 6281 Could not obtain the computer name on which to query for an IStorageOnlineOpns interface
The EnterpriseVault.DirectoryVault object reported an error.        [0xc00420c8]

1,103 16:47:36.869 [3,888] (w3wp) <8412> EV~W Event ID: 6287 Unable to fetch item from "(null)".
Reason: The EnterpriseVault.DirectoryVault object reported an error.        [0xc00420c8]
Saveset Id: 250000000000000~200902120428420000~1~FB7814B30EFD4F4E903E785407D7E69
Archive Name: <unavailable>
Reference: [GOAFS]

I checked the entry exists in the store database and DVS file is at the store disk. But neither archive search nor archive explorer showed this message.
I didn't change server name.

The problem occurs just for particular archived items. Most of items can be restored without any problem.

[GregRountree]

Were these items from a previous installation of EV?

[Ralfeus]

No, SEV was installed once and never reinstalled

[TonySterling]

How many EV Servers do you have?  At least 3 I would guess.

I would reboot them in order to see if that helps.

[Ralfeus]

We have 4 EV servers. Each of them serves mailboxes from one of 4 Exchange servers. I can't reboot them right now but I'll try this night.

[Ralfeus]

I have rebooted all 4 servers. This didn't help. Opened a case to Symantec, let's see what will happen.