Problems with Cluster Management

[SelbyGlenn]

Anyone else tried installing this yet?

I'm 95% there. Validating the congfig returns no critical errors yet winthin the CLuster Core Resources the cluster name has failed. Name is in DNS so not a dns issue.

I get the following error:

Cluster network name resource 'TestCluster01FS' failed to create its associated computer object in domain '***.com' for the following reason: Unable to bind to a domain controller.

The text for the associated error code is: Access is denied.


Please work with your domain administrator to ensure that:
- The cluster identity 'TESTCLUSTER01B$' can create computer objects. By default all computer objects are created in the 'Computers' container; consult the domain administrator if this location has been changed.
- The quota for computer objects has not been reached.
- If there is an existing computer object, verify the Cluster Identity 'TESTCLUSTER01B$' has 'Full Control' permission to that computer object using the Active Directory Users and Computers tool.

Does this make sence to anyone? I'm new to clustering so starting out in 2008 probably isn't the best move!

I cannot find TESTCLUSTER01B$ anywhere? What is it?

Thanks in advance for any help


Glenn
BEng MCSE CCA

 

[mrdenny]

The TESTCLUSTER01B$ identity is actually the TESTCLUSTER01B computer account. The error appears fairly straight forward. Either your domain account or the servers account doesn't have the right to create a computer account in the Computers container on the domain. Try delegating it the right to create the account, or try creating the account manually and try setting up the cluster again.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

My Blog

 

[SelbyGlenn]

Thanks for the reply Denny.

I did what you said and that worked! The cluster is now on-line.

However, I have now added a File Server Service to the cluster and I am receving a very similar error:

Cluster network name resource 'TESTClustFS01B' failed to create its associated computer object in domain '****.com' for the following reason: Unable to create computer account.

The text for the associated error code is: The account already exists.


Please work with your domain administrator to ensure that:
- The cluster identity 'TESTCLUSTER01B$' can create computer objects. By default all computer objects are created in the 'Computers' container; consult the domain administrator if this location has been changed.
- The quota for computer objects has not been reached.
- If there is an existing computer object, verify the Cluster Identity 'TESTCLUSTER01B$' has 'Full Control' permission to that computer object using the Active Directory Users and Computers tool.

I've done excatly what it asks above but I still get the error! Any ideas?

Thanks


Glenn
BEng MCSE CCA

 

[mrdenny]

Are you trying to setup a new virtual server, or using the existing virutal server that you already have setup?

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

My Blog

 

[SelbyGlenn]

It's a new Virtual Server

Glenn
BEng MCSE CCA

 

[mrdenny]

Is there already a computer object with that name?

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

My Blog

 

[SelbyGlenn]

I've got a little further now. There was some confusion as we have more than one COMPUTERS OU. Reason for this is we host serveral companies within the one domain. Therefore we have the default COMPUTERS OU and at the same level we have several company OUs. Each company OU has its own COMPUTERS OU.

The two physical servers reside in a SERVERS OU under our company OU

When the cluster computer account is created, it is created in the top level COMPUTERS OU. However, the Cluster Network Name fails to come on line until the computer account is moved down to the companies COMPUTERS OU.

When the File System Cluster is created, it fails to create the corresponding computer account. Even if I manually create this account and give the cluster server FC of it, I still get the same error. I am wondering if the problem has something to do with the Cluster Server computer object residing in a different COMPUTERS OU?

Moving the physical server objects in AD makes no difference.

Any ideas?


Glenn
BEng MCSE CCA

 

[SelbyGlenn]

Some more testing reveals:

After giving the cluster computer account security access to the top level COMPUTERS OU, it can now create the FSCluster computer account. The FSCluster fails to come on line with error: Unable to create Computer account – Account already exists.

I moved the account to the companys COMPUTERS OU and receive the following error: Unable to update password for computer account – Access Denied. The Cluster server has full control of the FSCluster and the OU so I don’t understand why this is happening?


Glenn
BEng MCSE CCA

 

[mrdenny]

What rights have been deligated to the User Account which runs the cluster?

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

My Blog

 

[slashdot]

I am in a similar stage, but the error is not the same. The initial cluster validation throws one error saying " operating system is not SKU compatible". Thats the only error i have to pass/rectify to build the cluster. Can somebody help?

FYI: This is a windows 2008 cluster setup with a Fibre channel JBOD attached. No SCSI reservation issues.

Thanks.
Slashdot

 

[kmcferrin]

Glenn,

If I understand you correctly you are creating an account in the default Computers container, then moving it to a Computers OU under a company name OU, and then trying to create another account with the same name in the default Computers container. If that's the case it's no wonder it's failing. Each account has to have a name that is unique across the domain.

________________________________________
CompTIA A+, Network+, Server+, Security+
MCP, MCSA:Security 2003

 

[mrdenny]

slashdot, sounds like you are trying to cluster with Standard or Web edition.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

My Blog