Symantec Management Platform (Notification Server)

Hey team,

The following 5 entries have been filling up our logs lately.

"17/06/2010 10:21:13 AM","Unable to discover SID details for Domain User Group a83de05e-bd20-4469-88f5-8e4f2126639b : Exception=Arellia.SMP.Resource.Exceptions.AeXDuplicatePendingResourceKeyException: Unable to add pending resource type key via DataClass d5ce79d1-8550-48f9-8220-582a83d9790d : 60F8E3C320DF0D2A9A51FEF1F556133E ---> System.Data.SqlClient.SqlException: Cannot insert the value NULL into column 'Name', table 'Symantec_CMDB.dbo.Inv_Global_Domain_Details'; column does not allow nulls. INSERT fails.
The statement has been terminated.
   at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)
   at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)
   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
   at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
   at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
   at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async)
   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, DbAsyncResult result)
   at System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(DbAsyncResult result, String methodName, Boolean sendToPipe)
   at System.Data.SqlClient.SqlCommand.ExecuteNonQuery()
   at Arellia.SMP.Resource.ResourceDataTable2.InternalSave()
   at Arellia.SMP.Resource.ResourceDataTable2.Altiris.Resource.IResourceDataTable.Save()
   at Arellia.SMP.Resource.ResourceTypeKeyResolver.CreatePendingResourceTypeKey(ResourceTypeKeyReference key, Guid ProposedResourceGuid, Guid PendingKeySession, Boolean CreateDataClassRow)
   --- End of inner exception stack trace ---
   at Arellia.SMP.Resource.ResourceTypeKeyResolver.CreatePendingResourceTypeKey(ResourceTypeKeyReference key, Guid ProposedResourceGuid, Guid PendingKeySession, Boolean CreateDataClassRow)
   at Arellia.SMP.Resource.ResourceResolver.CreatePendingResourceTypeKey(ResourceTypeKeyReference key, Guid ProposedResourceGuid, Boolean CreateDataclassRows)
   at Arellia.SMP.Resource.Discovery.DomainUserGroupServerDiscoverer.DiscoverResource(Guid ResourceGuid)","Arellia.SMP.Resource.Discovery.DomainUserGroupServerDiscoverer.DiscoverResource","AtrsHost","103"

"17/06/2010 10:21:13 AM","ResourceResolver being disposed with Pending ResourceTypeKeys","ResourceResolver","AtrsHost","103"

"17/06/2010 10:21:13 AM","Unable to add pending resource type key via DataClass d5ce79d1-8550-48f9-8220-582a83d9790d : 60F8E3C320DF0D2A9A51FEF1F556133E","Arellia.SMP.Dataloading","AtrsHost","103"
"17/06/2010 10:21:13 AM","An unexpected SQL exception has occured (GUID: {794e465b-1624-4657-b749-9cfc93bbb6ed}, DataClassTable: Inv_Global_Domain_Details, SqlErrorNumber: 515, Exception: System.Data.SqlClient.SqlException: Cannot insert the value NULL into column 'Name', table 'Symantec_CMDB.dbo.Inv_Global_Domain_Details'; column does not allow nulls. INSERT fails.
The statement has been terminated.
   at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)
   at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)
   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
   at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
   at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
   at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async)
   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, DbAsyncResult result)
   at System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(DbAsyncResult result, String methodName, Boolean sendToPipe)
   at System.Data.SqlClient.SqlCommand.ExecuteNonQuery()
   at Arellia.SMP.Resource.ResourceDataTable2.InternalSave())","Arellia.SMP.ResourceDataTable2","AtrsHost","103"

"17/06/2010 10:21:13 AM","Creating Domain Resource PRODUCTION - SID= S-1-5-21-1812313140-23586534-3256013527, (794e465b-1624-4657-b749-9cfc93bbb6ed)","Arellia.SMP.Resource.Discovery.DomainUserGroupServerDiscoverer.DiscoverResource","AtrsHost","103"

Looks like its having issues resolving things in our production domain.

I've not much experience in this end of things. Could anyone point me in the right direction to have a poke around the NS settings?

We do scheduled AD imports which work no problems.

Please let me know if you need any more info.

Cheers,
Rhys

I know they just announced support for NS7 back in April, but I haven't seen or used the newer version. The explanation is pretty clear about trying to insert a null value into a column that doesn't allow it, but as to why Arellia would cause this is perplexing.

At first glance it looks like it is trying to create a record for a machine where one or more of the columns are NULL:

Cannot insert the value NULL into column 'Name', table 'Symantec_CMDB.dbo.Inv_Global_Domain_Details'; column does not allow nulls. INSERT fails.

Try running the following in SQL Mgmt Studio/Query Analyzer:
SELECT * FROM vItem WHERE Guid = 'a83de05e-bd20-4469-88f5-8e4f2126639b'

The way I'm reading it, maybe you have a group in the domain that doesn't have all of its fields populated (i.e. maybe the Legacy Pre-W2K group name is defined, but not the regular AD group name)?  I'm not an AD whiz by any stretch, but maybe there are tools out there to scan your domain for corrupt/invalid objects?  Maybe you could query your AD to show the "proper" AD name and the legacy name using something like Softerra LDAP Browser or similar tool (be sure to get the Browser and not the Administrator which is not free).

Thanks for the replies guys.

Here is the SQL output:

Guid: A83DE05E-BD20-4469-88F5-8E4F2126639B 
ClassGuid: 9C8915A5-71DD-475D-A7B0-77CE8D0550B7 
Name: [User in our Active Directory]
Description: BLANK
OwnerNSGuid: DC87EE89-EB29-4903-BE33-DE0752D491C1 
ProductGuid: D0E33520-C160-11D2-8612-00104B74A9DF 
SecurityGuid: A83DE05E-BD20-4469-88F5-8E4F2126639B 
Attributes: 0  
Alias: BLANK
CreatedBy: PRODUCTION\[Our Altiris Service Account]
ModifiedBy: PRODUCTION\[Our Altiris Service Account]
CreatedDate: 2010-05-21 14:40:06.563 
ModifiedDate: 2010-05-21 14:40:06.563 
State: NULL

Just to stress, the bolded part is always the same in the error: It's the GUID in brackets (+italics) after that changes each time.

"17/06/2010 10:51:39 AM"
"Creating Domain Resource PRODUCTION - SID= S-1-5-21-1812313140-23586534-3256013527, (06ea80b1-513c-4b6e-a0b9-61ae802f1393)"
,"Arellia.SMP.Resource.Discovery.DomainUserGroupServerDiscoverer.DiscoverResource",
"AtrsHost"
,"335"

Maybe there is something freaky with that SID? I used a little SIDToName tool and yeah, it references 'PRODUCTION' which is our 'production' environment/domain.

It looks up a different user each time though (hence the different GUIDs after the SID). I could be looking at this the wrong way though.

We just upgraded from AD 2003 to 2008 R2 so I don't doubt that it is something weird with AD and NS.

Jharings: I'll have a chat to the other (more experienced) Altiris Admin about that. Thanks for the info.

AD 2008 R2 eh?  What version/SP/Update of SMP are you on?  You may want to run SIM (in your test environment of course!) and try upgrading.  Does your test environment also have its AD running on 2008 R2?  I'm not much on NS7 yet, but I believe you need to be on the very latest update for the core platform to support AD 2008 R2; I know they added it to NS 6.x in the April release.

No updates as of yet.

We applied some patches eairler and managed to nuke our database - so we're in the process of re-building a new test environment.

Our test enviornment does have AD 2008 R2. I'll run the same tests and see how we go.

Thanks for all your help!

(I'll update this thread when we get some results)