none
Issue Adding ComputeNode to existing Cluster (Access Denied)

    Question

  • I am just getting started working with HPC 2008, and am running into an issue... We are running HPC Server 2008 with all nodes (including HeadNode) Windows 2008 R2. I needed to reload a server (OS, etc) using Altiris (I haven't setup WIM yet).  

    I removed the node from the cluster and uninstalled HPC and removed the server from the domain.  I then reinstalled the node's OS, and reinstalled the HPC Pack (specifying the correct headnode).  The node shows up as Unknown in Node Management, and when I try to apply a template, it goes to provisioning and then back to unknown.

    the hpcdsm log shows the following (I substituted the actual domain name and server name of the computenode with domain\servername for privacy):

    2010/07/30 08:10:44 [19][Warn ][HpcSdm  ]  Event AccessDeniedToUser: Access denied to user domain\servername$.

    2010/07/30 08:10:44 [19][Error][HpcSdm  ]  Exception:

    System.Security.SecurityException: Access denied to user domain\servername$.

       at Microsoft.SystemDefinitionModel.Service.SdmStore.CheckUserIsKnown()

       at Microsoft.SystemDefinitionModel.Service.SdmStore.QueryDocuments(String filter)

    The Zone of the assembly that failed was:

    MyComputer


    The server is named the same as it was before, so I assume this is related to the computer account (although I am not having any...    I am able connect in both directions (HeadNode to ComputeNode) without any permisisons issues.  

    Any ideas where to check from here?


    Friday, July 30, 2010 1:48 PM

Answers

  • Couple of points of clarification....

    I presume you are running HPC Server 2008 R2 on Windows Server 2008 R2?  If not they you may have issues as a Head Node running HPC Server 2008 (as opposed to HPC Server 2008 R2) is not supported to be running on Windows Server 2008 R2.

    As for the errors you are seeing - what installation (or deployment) credentials did you use on your head node with the "To-Do-List"  - this account needs permission to create / validate and check Machine Accounts on the Active Directory server. 

    With the first step of the Template Assignment it checks that it can communicate with the Active Directory server - it looks like your credentials is failing.  Are these the same credentials that you joined your compute node to the domain with?

    Mark

    Friday, July 30, 2010 6:52 PM