Free Downloads, Community Forum,
FAQs and Developer Resources


Make /Tools Your Home | Link to us

Today's posts | Posts since last visit | Most Active Topics

All Forums Register Login Search Subscriptions My Profile Inbox
Tool Warehouse FAQs Resources Help Member List Address Book Logout

RPC: Port Mapper Failure

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [SFU / Interix / SUA Technology] >> SFU / Interix - Getting Started >> RPC: Port Mapper Failure Page: [1]
Login
Message << Older Topic   Newer Topic >>
RPC: Port Mapper Failure - Apr. 8, '04, 12:43:37 PM   
javacody

 

Posts: 17
Joined: Mar. 16, '04,
Status: offline
My install of SFU was working great for a couple of weeks, now I get the following in the event log:

Could not connect to Mapping Server at host localhost:while connecting :
RPC: Port mapper failure - RPC: Unable to receive

Any help?
Post #: 1
RE: RPC: Port Mapper Failure - Apr. 8, '04, 12:46:40 PM   
Rodney

 

Posts: 3728
Joined: Jul. 9, '02,
From: /Tools lab
Status: offline
Did you try a reboot ?

(in reply to javacody)
Post #: 2
RE: RPC: Port Mapper Failure - Apr. 8, '04, 1:01:29 PM   
javacody

 

Posts: 17
Joined: Mar. 16, '04,
Status: offline
Ha ha, I've been working with windows for years, that was the first thing I tried!

(in reply to Rodney)
Post #: 3
RE: RPC: Port Mapper Failure - Apr. 8, '04, 1:41:25 PM   
Rodney

 

Posts: 3728
Joined: Jul. 9, '02,
From: /Tools lab
Status: offline

Well, I had to ask.
I get working in the Interix environment and I tend to "forget"
about "Windows"...

If you do a netstat -a does it show another process camped
on it's port? I'm thinking there might be a conflict. If there is
a conflict (not trying to be scary here) some viruses are known to
grab this port. Could it be that, maybe, two portmappers are running?

(in reply to javacody)
Post #: 4
RE: RPC: Port Mapper Failure - Apr. 15, '04, 1:49:29 PM   
javacody

 

Posts: 17
Joined: Mar. 16, '04,
Status: offline
Which ports should I be looking at? Are we talking the Microsoft RPC ports?

(in reply to Rodney)
Post #: 5
RE: RPC: Port Mapper Failure - Apr. 16, '04, 11:15:38 AM   
Rodney

 

Posts: 3728
Joined: Jul. 9, '02,
From: /Tools lab
Status: offline
There should be output from netstat for both TCP and UDP
that has a label or part of a label that has "rpc" in it, or
are port 111 (TCP & UDP).

(in reply to javacody)
Post #: 6
RE: RPC: Port Mapper Failure - Apr. 22, '04, 11:26:44 AM   
Celestial

 

Posts: 16
Joined: Apr. 22, '04,
Status: offline
Rodney is correct, such an error usually means something like blaster worm

W32.Blaster.Worm is a worm that exploits the DCOM RPC vulnerability (first described in Microsoft Security Bulletin MS03-026)(users are recommended to patch this vulnerability by applying Microsoft Security Bulletin MS03-039) using TCP port 135. The worm targets only Windows 2000 and Windows XP machines. While Windows NT and Windows 2003 Server machines are vulnerable to the aforementioned exploit (if not properly patched), the worm is not coded to replicate to those systems. This worm attempts to download the msblast.exe file to the %WinDir%\system32 directory and then execute it. W32.Blaster.Worm does not have a mass-mailing functionality.

Additional information and an alternate site from which to download the Microsoft patch is available in the Microsoft article, "What You Should Know About the Blaster Worm and Its Variants."

We recommend that you block access to TCP port 4444 at the firewall level, and then block the following ports, if you do not use the following applications:


TCP Port 135, "DCOM RPC"
UDP Port 69, "TFTP"

The worm also attempts to perform a Denial of Service (DoS) on the Microsoft Windows Update Web server (windowsupdate.com). This is an attempt to prevent you from applying a patch on your computer against the DCOM RPC vulnerability.

Click here for more information on the vulnerability that this worm exploits, and to find out which Symantec products can help mitigate risks from this vulnerability.

NOTE: Virus definitions will detect this threat having:
Defs Version: 50811s
Sequence Number: 24254
Extended Version: 8/11/2003, rev. 19

Symantec Security Response has developed a removal tool to clean the infections of W32.Blaster.Worm.

(in reply to javacody)
Post #: 7
RE: RPC: Port Mapper Failure - Mar. 30, '05, 7:10:39 AM   
coredump

 

Posts: 2
Joined: Mar. 29, '05,
Status: offline
Hi!

I have the same problem on some machines. It is a standard unattended installation.
No additional software installed and no changed configuration settings.
Maybe it is a port number used by another process? But i have no idea wich port number...
Which port numbers are used by SFU? (Default settings)

When i start the C Shell i get an error message:
=============================================================
WARNING: One or more events have been logged in the Event Log
that the system administrator should investigate.
=============================================================

Eventlog message:
------------------------------------------------------------------------
Could not connect to Mapping Server at host localhost:while connecting :
RPC: Port mapper failure - RPC: Unable to receive
------------------------------------------------------------------------


--
Never eat yellow snow!

(in reply to javacody)
Post #: 8
RE: RPC: Port Mapper Failure - Mar. 30, '05, 9:42:08 AM   
markfunk

 

Posts: 673
Joined: Mar. 31, '03,
Status: offline
You get this warning if the file /var/adm/SystemWarning exists.
The event log you refer to (Mapping Server) is not an event that would cause
the SystemWarning file to be created.

You should be looking for an event generated by the Interix subsystem.

Normally this warning file is created when the Interix subsystem cannot
resolve a uid or gid from the Windows' SecurityID.

(in reply to coredump)
Post #: 9
RE: RPC: Port Mapper Failure - Apr. 1, '05, 7:57:44 AM   
coredump

 

Posts: 2
Joined: Mar. 29, '05,
Status: offline
quote:

ORIGINAL: markfunk
You should be looking for an event generated by the Interix subsystem.

Normally this warning file is created when the Interix subsystem cannot
resolve a uid or gid from the Windows' SecurityID.


Interix is the source of this entry...

But i found a warning entry(Mapping Server was an error entry)
-----------------------------------------------------------------------------
Had to synthesize Posix Offset for SID S-1-5-21-3090795412-787856844-3540091451, machine . See Knowledge Base article Q306552 to determine if this is a concern in your configuration.
-----------------------------------------------------------------------------

This SID does not exist.
The knowledge base article says i can ignore this event ID message.
Will it reappear when i delete /var/adm/SystemWarning?

We want to do an unattended install of SFU on 600 Windows Server 2003.
Do i have to delete after reboot every /var/adm/SystemWarning file?


_____________________________

--
Never eat yellow snow!

(in reply to markfunk)
Post #: 10
RE: RPC: Port Mapper Failure - Apr. 1, '05, 9:01:21 AM   
markfunk

 

Posts: 673
Joined: Mar. 31, '03,
Status: offline
I see this happen once in a while (I have one domain and 6 machines).
Not very often. Maybe twice a year.
Not often enough for me to try to track down the reason for
the event log entry.
I just remove the SystemWarning file and continue.

(in reply to coredump)
Post #: 11
RE: RPC: Port Mapper Failure - Jun. 28, '06, 12:41:06 AM   
samahita

 

Posts: 22
Joined: Mar. 17, '06,
Status: offline
I also consistently at startup get in event viewer (application):

Interix error:
Could not connect to Mapping Server at host localhost:
while connecting : RPC: Port mapper failure - RPC: Unable to receive

no blaster worm with symantec scan

XP-SP2 (no need for blasterworm patch)

any ideas?

_____________________________

Friendship is the Greatest!
http://What-Buddha-Said.net/
Bhikkhu Samahita, Sri Lanka

(in reply to javacody)
Post #: 12
RE: RPC: Port Mapper Failure - Jun. 28, '06, 2:36:25 PM   
Rodney

 

Posts: 3728
Joined: Jul. 9, '02,
From: /Tools lab
Status: offline
So you're using the Username Mapping (UNM) I assume for NFS.
Is/are the NFS mounted drive(s) showing working okay?
I'm wondering that if it manages to connect later, quietly, and things are
working that you can ignore the message.

(in reply to samahita)
Post #: 13
RE: RPC: Port Mapper Failure - Jun. 29, '06, 12:23:43 AM   
samahita

 

Posts: 22
Joined: Mar. 17, '06,
Status: offline
Everything seems to be working allright.
No files or drives are unavailable.
Just noticed this error in the event log.

_____________________________

Friendship is the Greatest!
http://What-Buddha-Said.net/
Bhikkhu Samahita, Sri Lanka

(in reply to Rodney)
Post #: 14
Page:   [1]
All Forums >> [SFU / Interix / SUA Technology] >> SFU / Interix - Getting Started >> RPC: Port Mapper Failure Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Search All Forums -

Advanced search


SPONSORS



Forum Software © ASPPlayground.NET Advanced Edition 2.5 ANSI

0.063