SCOM 2019 ACS Forwarder Calling Disconnect() with error 0x00002746.

ElHajjElie-7670 1 Reputation point
2022-06-02T12:07:10.72+00:00

Hey Guys!

We are currently running a SCOM 2019 with ACS collector.
I got a couple of forwarders in DMZ that have stopped reporting.
The SCOM Agent is green and the alerts is working as normal.
I've double checked all the certificates.
Ports are all open.

Any help is appriciated.

Here is my logs
[20220602 132002,613][Info ]* Agent starting up *
[20220602 132002,614][Info ]AgentLdr: ServiceMain(0x2A8C).
[20220602 132002,615][Debug ]AgentLdr: LoaderTask 'EvtLogStartup' completed successfully.
[20220602 132002,615][Info ]ReadEventLogLoggingLevel(): The eventlog logging level is 0x00000002
[20220602 132002,616][Debug ]AgentLdr: LoaderTask 'InitializeState' completed successfully.
[20220602 132002,624][Debug ]AgentLdr: LoaderTask 'OpenProtocol' completed successfully.
[20220602 132002,625][Debug ]AgentLdr: LoaderTask 'IdentifyVersion' completed successfully.
[20220602 132002,627][Debug ]AgentLdr: LoaderTask 'LoadCertificate' completed successfully.
[20220602 132002,641][Debug ]AgentLdr: LoaderTask 'OpenPackage' completed successfully.
[20220602 132002,641][Debug ]AgentLdr: LoaderTask 'CreateQueueHi' completed successfully.
[20220602 132002,641][Debug ]AgentLdr: LoaderTask 'CreateQueueLo' completed successfully.
[20220602 132002,641][Debug ]AgentLdr: LoaderTask 'OpenReader' completed successfully.
[20220602 132002,641][Debug ]AgentLdr: LoaderTask 'OpenIocp' completed successfully.
[20220602 132002,642][Debug ]AgentLdr: LoaderTask 'CreateAgentSrv' completed successfully.
[20220602 132002,643][Debug ]AgentLdr: LoaderTask 'OpenAgentSrv' completed successfully.
[20220602 132002,643][Info ]IoServer::Run(0x2FF0): Worker thread starting up.
[20220602 132002,643][Debug ]AgentLdr: LoaderTask 'OpenConnection' completed successfully.
[20220602 132002,643][Debug ]AgentRun(): Entering Run function.
[20220602 132002,643][Debug ]AgentRun(): Waiting for 0 ms.
[20220602 132002,643][Debug ]AgentRun(): Wait: Timeout.
[20220602 132002,643][Debug ]StringToServerDesc(): input: server.contoso.local
fqdn: server.contoso.local
port: 51909
priority: 0
weight: 100
[20220602 132002,643][Info ]LookupServersReg(): Found server.contoso.local:51909.
[20220602 132002,643][Debug ]Connection attempt to server server.contoso.local:51909.
[20220602 132002,646][Debug ]SspiPackage::OpenPackage(): fCapabilities: 0x004107B3 cbMaxToken: 24576 wRPCID: 14 Name: Microsoft Unified Security Protocol Provider
[20220602 132002,646][Debug ]CertPackage::InitializeSecurityContext():
recv: 0
send: 163
flags: 0x0000489E
result: 0x00090312
spn: AdtServer/server.contoso.local
[20220602 132002,657][Debug ]CertPackage::InitializeSecurityContext():
recv: 2229
send: 2147
flags: 0x0000489E
result: 0x00090312
spn: AdtServer/server.contoso.local
[20220602 132002,672][Debug ]CertPackage::InitializeSecurityContext():
recv: 51
send: 0
flags: 0x0000489E
result: 0x00000000
spn: AdtServer/server.contoso.local
[20220602 132002,672][Debug ]SspiPackage::QueryPackageInfo(): fCapabilities: 0x004107B3 cbMaxToken: 24576 wRPCID: 14 Name: Schannel
[20220602 132002,672][Error ]IoContext(0x17D35DAF600)::OnRecvComplete(): Disconnecting: dwIo = 0, dwError = 0x00000000.
[20220602 132002,672][Error ]IoContext(0x17D35DAF600)::OnSendComplete(): Disconnecting: dwIo = 0, dwError = 0x000004D4.
[20220602 132002,672][Warning]IoContext(0x17D35DAF600)::OnRecvComplete(): Disconnecting.
[20220602 132002,672][Error ]AgentClient::Connect(): Connection status 0x00002746.
[20220602 132002,672][Warning]ConnectToServer(): Calling Disconnect() with error 0x00002746.

Operations Manager
Operations Manager
A family of System Center products that provide infrastructure monitoring, help ensure the predictable performance and availability of vital applications, and offer comprehensive monitoring for datacenters and cloud, both private and public.
1,419 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. SChalakov 10,266 Reputation points MVP
    2022-06-02T12:19:52.957+00:00

    Hi,

    I would say that you have an issue with authentication (certificates), but this is impossible if you have a "green" status and those agents are alerting. Did you try restarting the relevant services?
    Are there any related events in the event log on this system or on the Management Server it reports to?
    The error "0x00002746" is a ConnectionReset Socket error and points to a problem with the communication (either because of networking issues, or because of authentication problems). Maybe that will help you find the culprit.

    Thanks and Regards,
    Stoyan

  2. ElHajjElie-7670 1 Reputation point
    2022-06-07T07:27:55.713+00:00

    Very odd issue.

    I re-created all certificates for our DMZ machines and imported it again.
    Connection successful.