Error 5 - Add Node to Cluster
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Error 5 - Add Node to Cluster

 
Post new topic   Reply to topic    Windows Server Forum Index -> Clustering
Author Message
Tammy
Guest
Posted: Mon Oct 03, 2005 8:50 pm    Post subject: Error 5 - Add Node to Cluster Reply with quote
Hello all,

I just setup a cluster on Node 1. When I try to add Node 2 to the cluster I
get an access denied. (Running GUI Admin tool from Node 1.)

When I try to open the cluster from Node 2 (Also running GUI admin tool), I
get access denied.

The only means to open the cluster through the GUI is using the "." for the
cluster from Node 1.

I have confirmed that I have name resolution by ping. I have also checked
nbtstat on both nodes, and they are getting proper resolution.

Are there specific permissions that the account running the cluster service
should have? Are there particular files that it needs to have permissions
against?

Any assistance is appreciated.
--
Tammy
Back to top
Rodney R. Fournier [MVP]
Guest
Posted: Mon Oct 03, 2005 8:50 pm    Post subject: Re: Error 5 - Add Node to Cluster Reply with quote
Check the Security of your cluster. You need to be in a group or listed on
the that page. Right-click on your cluster name in Cluster Administrator,
then look at the Security tab.

Cheers,

Rod

MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering Website
http://www.msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training


"Tammy" <Tammy@discussions.microsoft.com> wrote in message
news:167542D1-5C69-4ABE-96C6-52EA5455AD31@microsoft.com...
Quote:
Hello all,

I just setup a cluster on Node 1. When I try to add Node 2 to the cluster
I
get an access denied. (Running GUI Admin tool from Node 1.)

When I try to open the cluster from Node 2 (Also running GUI admin tool),
I
get access denied.

The only means to open the cluster through the GUI is using the "." for
the
cluster from Node 1.

I have confirmed that I have name resolution by ping. I have also checked
nbtstat on both nodes, and they are getting proper resolution.

Are there specific permissions that the account running the cluster
service
should have? Are there particular files that it needs to have permissions
against?

Any assistance is appreciated.
--
Tammy
Back to top
Tammy
Guest
Posted: Mon Oct 03, 2005 8:50 pm    Post subject: Re: Error 5 - Add Node to Cluster Reply with quote
Hi,

My account and the cluster service account are both members of groups that
have access to the cluster.

--
Tammy


"Rodney R. Fournier [MVP]" wrote:

Quote:
Check the Security of your cluster. You need to be in a group or listed on
the that page. Right-click on your cluster name in Cluster Administrator,
then look at the Security tab.

Cheers,

Rod

MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering Website
http://www.msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training


"Tammy" <Tammy@discussions.microsoft.com> wrote in message
news:167542D1-5C69-4ABE-96C6-52EA5455AD31@microsoft.com...
Hello all,

I just setup a cluster on Node 1. When I try to add Node 2 to the cluster
I
get an access denied. (Running GUI Admin tool from Node 1.)

When I try to open the cluster from Node 2 (Also running GUI admin tool),
I
get access denied.

The only means to open the cluster through the GUI is using the "." for
the
cluster from Node 1.

I have confirmed that I have name resolution by ping. I have also checked
nbtstat on both nodes, and they are getting proper resolution.

Are there specific permissions that the account running the cluster
service
should have? Are there particular files that it needs to have permissions
against?

Any assistance is appreciated.
--
Tammy


Back to top
Rodney R. Fournier [MVP]
Guest
Posted: Mon Oct 03, 2005 8:50 pm    Post subject: Re: Error 5 - Add Node to Cluster Reply with quote
Check DNS/WINS then.

Rod

"Tammy" <Tammy@discussions.microsoft.com> wrote in message
news:E6AE3A95-38CC-4E33-99C4-4CED3884A289@microsoft.com...
Quote:
Hi,

My account and the cluster service account are both members of groups that
have access to the cluster.

--
Tammy


"Rodney R. Fournier [MVP]" wrote:

Check the Security of your cluster. You need to be in a group or listed
on
the that page. Right-click on your cluster name in Cluster Administrator,
then look at the Security tab.

Cheers,

Rod

MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering Website
http://www.msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training


"Tammy" <Tammy@discussions.microsoft.com> wrote in message
news:167542D1-5C69-4ABE-96C6-52EA5455AD31@microsoft.com...
Hello all,

I just setup a cluster on Node 1. When I try to add Node 2 to the
cluster
I
get an access denied. (Running GUI Admin tool from Node 1.)

When I try to open the cluster from Node 2 (Also running GUI admin
tool),
I
get access denied.

The only means to open the cluster through the GUI is using the "." for
the
cluster from Node 1.

I have confirmed that I have name resolution by ping. I have also
checked
nbtstat on both nodes, and they are getting proper resolution.

Are there specific permissions that the account running the cluster
service
should have? Are there particular files that it needs to have
permissions
against?

Any assistance is appreciated.
--
Tammy


Back to top
Russ Kaufmann [MVP]
Guest
Posted: Tue Oct 04, 2005 12:50 am    Post subject: Re: Error 5 - Add Node to Cluster Reply with quote
"Tammy" <Tammy@discussions.microsoft.com> wrote in message
news:167542D1-5C69-4ABE-96C6-52EA5455AD31@microsoft.com...
Quote:
Hello all,

I just setup a cluster on Node 1. When I try to add Node 2 to the cluster
I
get an access denied. (Running GUI Admin tool from Node 1.)

When I try to open the cluster from Node 2 (Also running GUI admin tool),
I
get access denied.

The only means to open the cluster through the GUI is using the "." for
the
cluster from Node 1.

If you can't open it from Node2 and you can't open it from Node1 using the
clustername, then that just screams that you have a NetBIOS resolution
problem.

Quote:
I have confirmed that I have name resolution by ping. I have also checked
nbtstat on both nodes, and they are getting proper resolution.

This does not confirm NetBIOS resolution. Try downloading and using nblookup
(yep "nb") from the Microsoft download site.
Back to top
Tammy
Guest
Posted: Tue Oct 04, 2005 8:50 pm    Post subject: Re: Error 5 - Add Node to Cluster Reply with quote
Hi,

I downloaded the nblookup tool. From Node1, all hosts resolved correctly,
including node1, node2 and clustername.

Is there any permissions issue that I should be concerned with? I still get
an error 5, access denied error. I work in a facility that includes a
security template, but another engineer claims to have gotten this to work.


I have reimaged both nodes with our company standard image, but still have
the same results. I am considering rebuilding these from a Win2003 CD and
starting from scratch with no security applied, but was hoping to find out
what permissions, or file access might be required.

Thanks.

--
Tammy


"Russ Kaufmann [MVP]" wrote:

Quote:
"Tammy" <Tammy@discussions.microsoft.com> wrote in message
news:167542D1-5C69-4ABE-96C6-52EA5455AD31@microsoft.com...
Hello all,

I just setup a cluster on Node 1. When I try to add Node 2 to the cluster
I
get an access denied. (Running GUI Admin tool from Node 1.)

When I try to open the cluster from Node 2 (Also running GUI admin tool),
I
get access denied.

The only means to open the cluster through the GUI is using the "." for
the
cluster from Node 1.

If you can't open it from Node2 and you can't open it from Node1 using the
clustername, then that just screams that you have a NetBIOS resolution
problem.

I have confirmed that I have name resolution by ping. I have also checked
nbtstat on both nodes, and they are getting proper resolution.

This does not confirm NetBIOS resolution. Try downloading and using nblookup
(yep "nb") from the Microsoft download site.


Back to top
Russ Kaufmann [MVP]
Guest
Posted: Wed Oct 05, 2005 12:50 am    Post subject: Re: Error 5 - Add Node to Cluster Reply with quote
"Tammy" <Tammy@discussions.microsoft.com> wrote in message
news:54694BC8-94C8-407A-873E-CBEE9C83EA40@microsoft.com...
Quote:
Hi,

I downloaded the nblookup tool. From Node1, all hosts resolved correctly,
including node1, node2 and clustername.

What about from node2?

Quote:
Is there any permissions issue that I should be concerned with? I still
get
an error 5, access denied error. I work in a facility that includes a
security template, but another engineer claims to have gotten this to
work.

Error 5 leads me to believe that you don't have the proper credentials.

Remember, the cluster service account must be a local administrator
equivilant on both nodes and it needs to be a domain user account with both
nodes part of the domain.

Quote:
I have reimaged both nodes with our company standard image, but still have
the same results. I am considering rebuilding these from a Win2003 CD and
starting from scratch with no security applied, but was hoping to find out
what permissions, or file access might be required.

If they are images, it is possible that you have a SID issue. Have you run
newside.exe or some other kind of SID generation tool on the nodes?


--
Russ Kaufmann

MVP - Windows Server - Clustering
http://www.clusterhelp.com - Cluster Website
http://msmvps.com/clusterhelp - New Blog
http://spaces.msn.com/members/russkaufmann - Old Blog
Back to top
Tammy
Guest
Posted: Wed Oct 05, 2005 4:50 pm    Post subject: Re: Error 5 - Add Node to Cluster Reply with quote
We use sysprep for the images. Since we do all our images this way, I don't
believe it's a sid issue.

Update: I took node 1 and rebuilt it from scratch and did not have the same
problem. I believe there is something in the security guidelines/permission
settings that is applied to the image causing my problem. If anyone has info
on permissions/security settings that are needed when setting up a cluster.

I'm trying to work through my internal channels as well, but there is a lot
of red tape internally so I'm trying ot have enough info to go to our
security office and explain what is causing the problem and how it can be
resolved.

Thanks for all your help,
--
Tammy


"Russ Kaufmann [MVP]" wrote:

Quote:
"Tammy" <Tammy@discussions.microsoft.com> wrote in message
news:54694BC8-94C8-407A-873E-CBEE9C83EA40@microsoft.com...
Hi,

I downloaded the nblookup tool. From Node1, all hosts resolved correctly,
including node1, node2 and clustername.

What about from node2?

Is there any permissions issue that I should be concerned with? I still
get
an error 5, access denied error. I work in a facility that includes a
security template, but another engineer claims to have gotten this to
work.

Error 5 leads me to believe that you don't have the proper credentials.

Remember, the cluster service account must be a local administrator
equivilant on both nodes and it needs to be a domain user account with both
nodes part of the domain.

I have reimaged both nodes with our company standard image, but still have
the same results. I am considering rebuilding these from a Win2003 CD and
starting from scratch with no security applied, but was hoping to find out
what permissions, or file access might be required.

If they are images, it is possible that you have a SID issue. Have you run
newside.exe or some other kind of SID generation tool on the nodes?


--
Russ Kaufmann

MVP - Windows Server - Clustering
http://www.clusterhelp.com - Cluster Website
http://msmvps.com/clusterhelp - New Blog
http://spaces.msn.com/members/russkaufmann - Old Blog


Back to top
Tammy
Guest
Posted: Wed Oct 05, 2005 8:50 pm    Post subject: Re: Error 5 - Add Node to Cluster Reply with quote
Thanks everyone for your help. It turns out that this was a security setting.

Under HKLM\System\CurrentControlSet\Control\LSA\LMCompatabilityLevel was set
to "1" on the system that did not work. When I changed this to "2", my issue
was resolved.


--
Tammy


"Tammy" wrote:

Quote:
We use sysprep for the images. Since we do all our images this way, I don't
believe it's a sid issue.

Update: I took node 1 and rebuilt it from scratch and did not have the same
problem. I believe there is something in the security guidelines/permission
settings that is applied to the image causing my problem. If anyone has info
on permissions/security settings that are needed when setting up a cluster.

I'm trying to work through my internal channels as well, but there is a lot
of red tape internally so I'm trying ot have enough info to go to our
security office and explain what is causing the problem and how it can be
resolved.

Thanks for all your help,
--
Tammy


"Russ Kaufmann [MVP]" wrote:

"Tammy" <Tammy@discussions.microsoft.com> wrote in message
news:54694BC8-94C8-407A-873E-CBEE9C83EA40@microsoft.com...
Hi,

I downloaded the nblookup tool. From Node1, all hosts resolved correctly,
including node1, node2 and clustername.

What about from node2?

Is there any permissions issue that I should be concerned with? I still
get
an error 5, access denied error. I work in a facility that includes a
security template, but another engineer claims to have gotten this to
work.

Error 5 leads me to believe that you don't have the proper credentials.

Remember, the cluster service account must be a local administrator
equivilant on both nodes and it needs to be a domain user account with both
nodes part of the domain.

I have reimaged both nodes with our company standard image, but still have
the same results. I am considering rebuilding these from a Win2003 CD and
starting from scratch with no security applied, but was hoping to find out
what permissions, or file access might be required.

If they are images, it is possible that you have a SID issue. Have you run
newside.exe or some other kind of SID generation tool on the nodes?


--
Russ Kaufmann

MVP - Windows Server - Clustering
http://www.clusterhelp.com - Cluster Website
http://msmvps.com/clusterhelp - New Blog
http://spaces.msn.com/members/russkaufmann - Old Blog


Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Clustering All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB