gui login problem

[Former Member]

dear all, there is an urgent problem with GUI.

symptom:the server is in Germany, in an another country, our colleagues are using load balancing logon groups to access the server. In one building of the plant, they can login the server, but in an another building, they failed with same accounts and laptops. We set different IP address ranges for the two buildings. In the problematic building, I can ping the message sever. I know there is issue with the network, but what's it?

thank you !

[Former Member]

the problem has been solved.

reason:the relevant IP range is blocked by an ACL

thank you!

[Former Member]

Hi Steve

First - Are the Windows Services files (c:\windows\system32\drivers\etc\services) the same on all PCs? All have the sapmsXXX message server entries?

Check the network like this:

From the client PC, open a DOS window and use command:

telnet <message server> <message server port>

(eg. telnet host1.domain.com 3600) assuming the system # is 00

If you get a 'failure' message then the network is blocking the connection (the port probably). If you get a sort-of blank screen then the connection went through (you can use Ctrl-] to escape) and the network is not actually blocking the connection (although it may still be flakey). Similarly, you can try to connect to the instance dispatcher on the 3200 port (assuming the system # is 00). The problem with 'ping' is that it uses the one port only - using 'telnet' in this unconventional manner, you can force the connection onto the specific port you want to test.

If the network is not blocking, use the NIPING tool for further diagnosis. Search SMP for a Note on how to use NIPING (I don't remember the Note # right now).

Regards,

- Dean

[Former Member]

thank you Dean.

the related service files are ok.

i have telneted the message server, the net connection went throug.

i am looking for some note about how to use NIPING.

thanks again/steve

[Former Member]

I have started niping as 'niping -c -H xx.xxx.xxx.xxx', then i got the result as below:

C:\steve>niping -c -H 10.105.192.118

Tue Jan 02 12:01:38 2007

***LOG Q0I=> NiPConnect2: SO_ERROR (10061: WSAECONNREFUSED: Connection refused)

[ninti.c 976]

• ERROR => NiTClientLoop: NiConnect (rc=-10) [nixxtst.c 1851]

*****************************************************************************

*

• ERROR partner not reached (host xx.xxx.xxx.xxx, service 3298)

*

• TIME Tue Jan 02 12:01:38 2007

• RELEASE 620

• COMPONENT NI (network interface)

• VERSION 36

• RC -10

• MODULE ninti.c

• LINE 976

• DETAIL NiPConnect2

• SYSTEM CALL SO_ERROR

• ERRNO 10061

• ERRNO TEXT WSAECONNREFUSED: Connection refused

• COUNTER 1

*

*****************************************************************************

so what's the meaning?

[Matt_Fraser]

Steve,

Niping requires that an niping server be started on the remote host you are pinging. That's one possible problem. So, you must have someone start 'niping -s' on the server before you try to test the connection from the client. Also, note that the niping server won't run forever. If not clients connect after about 5 minutes, then niping shuts down on the server.

The second possible issue is that by default niping uses port 3298. If you think that port 3200 (for instance) is open but that 3298 might be blocked by the firewall, you can configure niping to use a different port with the -S option (remember to do this on both client and server).

Best regards,

Matt

[Former Member]

Hi Steve,

Now as you said there are two IP address range for two buildings and these servers are based in Germany, i believe you are not in the same premises.

On network, i am sure you must be using a firewall. Now, the IP address range should be added to the rule along with the message server ports as 36XX where "XX" is the System No. of the system. So eg:- if the System No. is 20, then the port on which the Message Server or load balancing will communicate will be 3620... so this needs to be enabled on your firewall and the subsequently the 32XX ports to be opened for the other application servers..

let me know if this solves your problem or you need any more inputs on the same.

Regards,

Abhijeet Bhagat

[Former Member]

thank you Abhijeet.

in fact, we can't access the system in the problematic building after a net connection switching. But our firewall is a transparent model. we don't need to change any configration.

[Former Member]

Hi,

what kind of error message you are getting,

did you made entry in services file(as you are saying you use logon groups)

Samrat

[Former Member]

hello Samrat,

a popup screen shows "connection to partner broken".

I have configed the services files for message server.

thanks!

merry X'mas!

steve

[Former Member]

Hi,

Try to look whether the system is up or not.If system is not up try to start the system.

kiran kumar.v

[Former Member]

hi kiran, i am sure the system is working.