Windows 2003 SBS high memory usage sqlservr.exe culprit SBSMonitoring

sqlservr.exe high memory usage for SBSMonitoring process

 

This seems to be a common issue with my SBS2003 installs. The administrative user will get an E-mail entitled: Allocated Memory Alert on ‘ServerName’ which directs you to the process table to find the culprit. In most of my cases I see two hogs. store.exe (Exchange) and sqlservr.exe. We will cover the issues surrounding store.exe in a later post, but for know here are my finding for the sqlservr.exe process. I found the fix in this thread on DogRiley (c/p verbatim)

First verify that the sqlservr process at fault is in fact the SBSMonitoring one. First open Windows Task Manager, choose the processes tab, click the view menu and choose Select Columns. Check the PID column. This will show you the process ID of the entries in the process table. Sort this list by Mem Usage column and get the PID of the offending sqlservr.exe process. The to confirm the PID is SBSMonitoring at a command prompt type:

tasklist /svc

Look for the PID that matches your memory hog. It will look something like this. My PID was 376:

sqlservr.exe 376 MSSQL$SBSMONITORING

If this is the case, you can alter the memory settings for SBSMonitoring process with the following commands from the command line. (Thanks to David Copland)

osql -E -S servername\sbsmonitoring

sp_configure ‘show advanced options’,1
reconfigure with override
go
sp_configure ‘max server memory’, nnnn
reconfigure with override
go

My session looked like this:

C:\Documents and Settings\Administrator>osql -E -S file-server\sbsmonitoring
1> sp_configure ‘show advanced options’,1
2> reconfigure with override
3> go
DBCC execution completed. If DBCC printed error messages, contact your system
administrator.
Configuration option ‘show advanced options’ changed from 0 to 1. Run the
RECONFIGURE statement to install.
1> sp_configure ‘max server memory’,100
2> reconfigure with override
3> go
DBCC execution completed. If DBCC printed error messages, contact your system
administrator.
Configuration option ‘max server memory (MB)’ changed from 2147483647 to 100.
Run the RECONFIGURE statement to install.
1> quit

I set my server to use a maximum of 100MB of memory, and so far all seems well with it. I am planning on adding this to the normal maintenance cycle for all of our supported SBS2003 servers.

Till Next Time,

 

Blackberry Vendor ID’s

Help Screen Blackberry : alt + aA (Shift) +H

100 T-Mobile US
101 AWS
102 Cingular Wireless
103 Nextel
104 Sprint PCS
105 Verizon
106 Alltel
107 Rogers
109 BWA (Aliant/Sasktel)
111 MM02 DE
113 Telfort
114 T-Mobile DE/AU
115 TIM
116 Hutchison
117 Bouygues
118 SFR
119 Orange_France
120 VODAFONE (UK)
121 Telcel
122 Telstra
123 T-Mobile (UK)
124 Vodafone Germany
125 MM02 UK/IRL/NL
126 Telus
127 SMART
128 Starhub
129 Telefonica
130 Swisscom
131 Cable & Wireless
132 Vodafone (IT)
133 Vodafone (ES)
134 T-Mobile (NL)
135 Cincinnati Bell
136 Telefonica_LAM
137 Vodafone Austria
138 Vodafone Australia
139 Vodafone Ireland
140 Vodafone Sweden
141 CSL
142 Orange UK
143 Vodafone New Zealand
144 SingTel
145 Globe
146 Optus
147 Orange Mobistar
148 Vodafone_HU
149 Bharti
150 KPN
151 TIM_Greece
152 Proximus
153 Vodafone_Portugal
154 TIM_Brazil
155 BT_Mobile
156 Earthlink
158 E-Plus
159 BASE
160 Dobson
161 Vodafone_Egypt
162 Orange_Switzerland
164 Triton
165 Maxis
166 Vodafone_Denmark_ (TDC)
167 MobileOne_(Voda_ Singapore)
168 Vodacom
169 T-Mobile_PO
170 T-Mobile_CZ
171 T-Mobile_HU
173 MTN
174 Entel
175 Amena
176 SmarTone
177 TCS
178 Avea
179 F100
180 Turkcell
181 Partner
183 Orange_Global
186 Telkomsel
188 Vodafone_Greece
189 USCC
190 Mobilink
194 Voda_Luxembourg
195 Voda_Iceland
198 Vodafone_CZ
204 China_Mobile
205 Movilnet
209 Sympac
210 TIM_Argentina
212 Etisalat
214 AMX
215 Telefonica_Venezuela
217 Orange Romania
218 KTP
222 Mobitel Bulgaria
224 PCCW/Sunday
227 Mobily
229 Eurotel
230 Hutchison India (Hutchison Essar)236 Reliance
237 Verizon
238 Vodafone Turkey
239 Telefonica Morocco (Meditel)
240 Indosat
241 Alcatel Shanghai Bell
245 3-UK/3-Italy/ 3-Sweden/ 3-Denmark/ 3-Austria
247 Vodafone Essar
248 Centennial Wireless/Centennial PR
250 T-Mobile AT (8110 Post HW)
254 Oi Brazil
255 Telecom New Zealand
258 3-Australia (H3GA)
259 Cable Wireless TSTT/TSTT Trinidad and Tobago
269 TATA India
271 T-Mobile Croatia – 4.6 and post/T-Mobile Macedonia/T- Mobile Montenegro
273 BT Italy
274 11
277 MTS Mobility
278 Virgin Mobile
280 Orange Slovakia – 8120 Post
282 Taiwan Mobile
285 Orange Austria (ONE) (Full Launch)286 Vodafone Malta
288 BASE (JiM)
295 CMCC Peoples
298 Digitel (FULL LAUNCH)
300 Solo (Bell)
301 Carphone Warehouse Spain/Carphone Warehouse UK/Carphone Warehouse France/Carphone Warehouse NL
302 Cable & Wireless UK/20:20 UK/20:20 France/20:20 Germany/Brightpoint Germany/Brightpoint UK/Brightstar AZLAN DE/LuxGSM/Brightstar AZLAN UK/Brightstar AZLAN FR/Poste Mobile
303 Iusacell Mexico
308 XL Indonesia
309 Fido Solutions
310 Wind Italy
315 Metro PCS
316 Nextel International – Mexico
317 Nextel International – Peru
318 Nextel International – Brazil
319 Nextel International – Argentina
322 Vodafone Qatar
324 Etisalat Misr
326 Brightpoint Australia
327 Axis
331 Bell Mobility
332 Telus
335 STC Saudi Arabia
336 Q-Tel
337 Phone House France
339 Phone House Germany
340 Phone House Netherlands
352 3-Indonesia
353 Millicom (TIGO) – Bolivia/Millicom (TIGO) – Honduras/Millicom (TIGO) – Guatemala/Millicom (TIGO)-El Salvador/Millicom (TIGO) – Colombia/Millicom (TIGO) – Paraguay
369 3-Italy
370 Globalive
373 Digicel
375 Orange Dominicana
376 DTAC
377 IDEA
378 HK Regional PRD
381 Virgin Mobile UK
382 AMX Comcel Colombia
383 AMX Porta Ecuador
384 AMX Claro Argentina
385 AMX Claro Brazil
388 3-Austria
389 Boost Mobile
392 Virgin Mobile
395 BR Regional PRD
416 VE Regional PRD
600 Wataniya Kuwait/GO Mobile/Mobinil/Warid/Etisalat Nigeria/Oman Mobile/Zain Jordan/Telenor Pakistan/Mobilecom/Zain Nigeria/Zain Malawi/Cellplus/Batelco/GeoCell/Zain Kuwait/Ufone/EMS/Emtel/Nawras
601 Zain Madagascar/20:20 France/Brightpoint France/Zain Congo
602 AzerCell
603 Jersey Telecom/Trigcom/Telenor Serbia/Siminn/Brightpoint UK/Sonofon/Mobitel/Telenor Hungary/Brightpoint Netherlands/Brightstar AZLAN UK/Cable & Wireless UK/20:20 UK/Globul/Polkomtel/Optimus/TMN Portugal/Telenor Norway
604 Sunrise/Brightstar_AZLAN DE (Gemini Onwards)/20:20 Germany/Brightpoint Germany
605 Cosmote Greece
609 MPulse/DiGi/Docomo Pacific
610 AIS Thailand/True Move
611 Aircel/Redington/MTNL/Loop Mobile/BSNL
612 Mobility/West Central Wireless/SETAR/Celluar One/UTS
613 brightpoint/TAM

Can Amer Freight

Just thought I’d throw a shout out to a shipping/receiving company I use in Blaine, Washington. Just a hop skip and a jump to pick up your parcels that you purchased online from ebay, etc. It is so much cheaper to have it shipped within USA then have it shipped across the border. Not to mention if your package gets held up at customs, good luck with that.. this way you have a pretty good chance of driving it back personally. I have never once lied to the border guards, and always get through without any charges -taxes or duties..
the place I use is called:

Can Amer Freight (aka Can Amer Shipping & Receiving)
1927 Boblett St
Blaine, Washington 98230
Phone: 360-332-6525

I put this on my blog as mostly all websites, even yellowpages.com still show their old address on yew st. You should update your records.

Blackberry Administration Service Page not found

New installation of BES-X on SBS 2003 Server.

Installation all went through OK, however cannot administer the BES-X server as IE admin page blank.

Discovered the The BlackBerry Administration Service – Application Server service keeps failing.

It will start and chew up lots of CPU time & memory but then stop after approx. 1 minute, (BAS-AS.exe will disappear from task manager).

Event Viewer says:

The BlackBerry Administration Service – Application Server service terminated unexpectedly.

BBAS-AS logs mention these which may be of note:

[WARN] Problem starting service jboss:service=RIM_BES_BAS_HA_33879984_SBSSVR
org.jgroups.ChannelException: failed to start protocol stack (03/30 12:39:17:843):{main} [org.jboss.system.ServiceController] [WARN] Problem starting service jboss.cache:service=EJB3EntityTreeCache
org.jgroups.ChannelException: failed to start protocol stack

Resolution:

Although I have found four or five different issues that can cause this, the resolutuion below was hardly documented anywhere on the internet.

I got this working by going into the registry and reserving the following ports: 48858, 48857, 48855, 45588, 49955, 45599

Click Start, click Run, type regedit, and then click OK.

Locate and then click the following subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

Right-click ReservedPorts, and then click Modify.

Paste the following at the bottom

1433-1434
3443-3443
4070-4071
48855-48858
45588-45588
49955-49955
45599-45599

Restart the server

I found this after a complete uninstall and reinstall of Blackberry Enterprise Express 5.0.2.

How to configure BlackBerry MDS Connection Service to perform certificate searches using LDAPS

How to configure the BlackBerry MDS Connection Service to enable certificate searching using Lightweight Directory Access Protocol (LDAP) certificate server.

Task 1 – Configure the MDS Connection Service

 

BlackBerry Enterprise Server 4.1

  1. Enter the LDAP certificate server host name.
  2. Enter the LDAP certificate server port configured on the LDAP certificate server. The default is 636.
  3. Enter the Microsoft® Active Directory® account and password that has permission to query the LDAP certificate server.
  4. Enter a default base query.
  5. Amend the query limit and data compression settings if necessary.

 

BlackBerry Enterprise Server version 5.0

  1. Open the BlackBerry Administration Service.
  2. Navigate to BlackBerry Solution topology > BlackBerry Domain > Component view > Edit (MDS Connection Service) > LDAP.
  3. Enter the LDAP certificate server host name and port in the Service URL field in the format:
    • Hostname:Port
  4. Set Secure connection enabled to Yes.
  5. Click Save All.
  6. Navigate to BlackBerry Solution topology > BlackBerry Domain > Component view > Edit (MDS Connection Service) > Configuration sets.
  7. Add the LDAP configuration to a new or existing configuration set.
  8. Click Save all.
  9. Navigate to each BlackBerry MDS Connection Service instance in BlackBerry Solution topology > BlackBerry Domain > Component view > MDS Connection Service > Edit (Servername_MDS-CS_x) > Component Configuration Sets and specify the configuration set that a BlackBerry MDS Connection Service instance will use.
  10. Click Save all.

 

Task 2 – Amend rimpublic.property file

  1. In C:\Program Files\Research In Motion\BlackBerry Enterprise Server\MDS\Servers\<SERVER_NAME>\config, open rimpublic.property.
  2. Add Adding application.handler.ldap.DEFAULT_USE_SSL_TLS=true.
  3. Save.

Task 3 – Restart the BlackBerry MDS Connection Service to allow the changes to MDS_CS and rimpublic.property to apply.

Task 4 – Import company root certificate to the MDS keystore.

Refer to KB11623 – How to add a certificate for the web server to the BlackBerry MDS or BlackBerry MDS Keystore – and add the root certificate to the BlackBerry MDS keystore.

If the root certificate does not contain a CRL distribution point entry it will be necessary to add Intermediate certificates to the BlackBerry MDS keystore.

—————————————————————–

How to add a certificate for the web server to the BlackBerry Mobile Data Service or BlackBerry MDS keystore

CollapseOverview

The cacerts file is a keystore with certificate authority (CA) certificates, and it includes multiple trusted root CA certificates, such as VeriSign®. For the BlackBerry® Mobile Data System (MDS) or BlackBerry MDS Connection Service to trust a web server, the BlackBerry MDS Connection Service must check that the web server certificate with the certificate authority. If the web server certificate is purchased from a trusted certificate authority, the check is successful because the issuer’s root CA certificate is in the cacerts file by default. If a private certificate authority is used to issue the web site certificate, the check fails and access to the website from the BlackBerry smartphone is either denied or a prompt to trust the certificate appears on the BlackBerry smartphone screen. Any of the following can be done in order to change this behaviour and to allow the BlackBerry smartphone to access the website successfully:

  • Import the private certificate authority’s root CA certificate and any relevant intermediate certificates into the cacerts file.
  • Import the web server certificate into the cacerts file.

Note: The BlackBerry MDS is included with BlackBerry Enterprise Server 3.6 to 4.0. BlackBerry MDS Connection Service is included with BlackBerry Enterprise Server 4.1 to 4.1 SP7.

To import the certificate into the cacerts file, complete the following tasks:

Task 1 – Check which version of JRE is used by the BlackBerry MDS or BlackBerry MDS Connection Service

As multiple versions of the JRE can be installed on a server, it is necessary to check which version is currently in use by the BlackBerry MDS or BlackBerry MDS Connection Service.

Perform the following steps to do so:

  1. Open the Windows Services® snap-in.
  2. Open properties of the BlackBerry MDS Connection Service.
  3. On General tab in Path to executable find the value of jvmpath parameter. It is populated with a path to the JRE in use. See the following example:jvmpath=”C:\Program Files\Java\jre1.6.0_15\bin\client\jvm.dll”
  4. Write down part of the path which points to the JRE installation directory. See the following example:C:\Program Files\Java\jre1.6.0_15

Task 2 – Add a certificate to the BlackBerry MDS or BlackBerry MDS-CS certificate store

Note: The default keystore password is changeit. The aliasname used in the following commands must be unique.

To add a certificate to the BlackBerry MDS or BlackBerry MDS Connection Service certificate store, complete the following steps:

  1. Copy the certificatename.cer file to <PATH_FROM_TASK1_STEP4>\lib\security
  2. Type the following commands in the command prompt:cd <PATH_FROM_TASK1_STEP4>\bin

    keytool -import -trustcacerts -alias aliasname -file ..\lib\security\certificateName.cer -keystore ..\lib\security\cacerts

  3. Check that the cacerts file contains the updated information for the new alias and certificate:

    keytool -list -v -keystore ..\lib\security\cacerts

  4. Restart the BlackBerry MDS or BlackBerry MDS Connection Service for the changes to take effect.
ExpandEnvironment

  • BlackBerry® Enterprise Server 3.6 to 5.0 SP1
  • Java® Runtime Environment (JRE)
CollapseAdditional Information

If the following error message appears in the BlackBerry MDS or the BlackBerry MDS log file after accessing an HTTPS site from a BlackBerry smartphone, it might be caused by the web server’s certificate not being added to the cacerts file:

BlackBerry Enterprise Server 3.6 to 4.1 SP5

<MDS-CS_1>:<DEBUG>:<LAYER = IPPP, URL [https://testsite/test.css] SSLException
[sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]>

BlackBerry Enterprise Server 4.1 SP6 to 4.1 SP7

<MDS-CS_SERVERNAME_MDS-CS_1>:<DEBUG>:<LAYER = IPPP, Access Denied: Insecure SSL Request>

*information was provided by blackberry technical solution center.

kb20197 and kb11623

Windows 2003 + Active Directory Support Tools

I was looking for ways to show domain controller information and or changing domain controller name and came across a few pages on the net that helped me achieve this.

You can download the kit from windows here:

http://download.microsoft.com/download/3/e/4/3e438f5e-24ef-4637-abd1-981341d349c7/WindowsServer2003-KB892777-SupportTools-x86-ENU.exe

other tools in the kit:

http://technet.microsoft.com/en-us/library/cc773354%28WS.10%29.aspx

this site is awesome for windows related support and how-to’s:

http://www.petri.co.il/windows_2003_domain_rename.htm

http://www.petri.co.il/download_windows_2003_sp1_support_tools.htm

Honestly, this is just for my reference 🙂

MS Windows 2003 SBS pop3 connector / Blackberry Enterprise Server Express

I have built a new server on VMWare to accommodate the new Blackberry Enterprise Server Express 5.0.1 that was just recently released. I was quite ecstatic to hear RIM was giving this up for free. Since I had a 5 CAL license for Windows 2003 Small Business Server, I setup this on my VM, which also included Exchange Server 2003. Setup was easy, did all the updates to this ancient OS. Then setup the BESX on the same server. Since I only plan to host personal/SOHO domain, this is totally acceptable. Blackberry suggests I can have upto 75 users on this server. The server itself is pretty decent – Xeon, 4GB ECC Ram, Raid5.

Blackberry has this great video tutorial that shows how to set the BESX up in a jiffy.

you can view the video here

Going forward, I had redirected my domains email to the exchange server, this entailed me to purchase anti spam software as it was getting ridiculous with out it.

What I decided to do is activate POP3 Connector which comes with the SBS 2003 OS. The downside was that it only polls every 15 minimum. Boo! Doesnt that defeat having push email to the blackberry?

Well I found a reg edit hack that will accelerate the polling.

You can set the polling interval in the GUI if you view the properties of
the POP3 Connector Manager, and then click the “Scheduling” tab. To set the
polling interval so that polling occurs more frequently than every 15
minutes, you must configure the ScheduleAccelerator registry entry.

1. Locate and then click the following registry subkey:

“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SmallBusinessServer\Network\POP3
Connector”

2. On the “Edit” menu, point to “New”, and then click “DWORD Value”.

3. Type “ScheduleAccelerator” (without the quotation marks) as the entry
name, and then press ENTER.

5. On the “Edit” menu, click “Modify”.

6. In the “Value data” box, click decimal, type the value that you want, and then click
“OK”. To determine the polling interval, the value that is configured on the
“Scheduling” tab in the GUI is divided by the value that you type for the
ScheduleAccelerator entry. For example, if a 15 minute interval is specified
in the GUI and you set the value of the ScheduleAccelerator entry to 3, the
connector will poll ever five minutes.

7. Quit Registry Editor