[es] - Problem sa DC-om/DNS-om

boxikg
mašinski inženjer

Član broj: 178699
Poruke: 85
212.200.111.*

Profil

^{14.02.2011. u 10:27 - pre 160 meseci}

Imam sledeću situaciju (Forest i Domen funkcionalni nivo - Windows Server 2003, Active Directory integrisana DNS zona)

Zbog promene lokacije domen kontroler DC01 koji "drži" sve FSMO role i koji je istovremeno i DNS server (AD-I zona) je morao biti ugašen, kao i drugi domen kontroler (DNS server) DC02. DC01 je sam sebi primarni DNS server dok mu je DC02 sekundarni DNS server. Ostalih 6 domen kontrolera (DNS servera) nisu gašena. Svi domen kontroleri su takođe i GC serveri.

Nakon ponovnog paljenja servera DC01 uopšte nije moguće podići bilo koju od AD konzola (Users and Computers, Sites and Services, Domains and Trusts) a kad se podigne DNS konzola DC01 je označen crveno kao u situaciji kad nije startovan DNS servis, međutim servis je startovan.

Greške koje se javljaju su sledeće:

Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4000
Date: 13.2.2011
Time: 5:18:48
User: N/A
Computer: DC01
Description:
The DNS server was unable to open Active Directory. This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: f5 25 00 00 õ%..

Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4015
Date: 22.12.2010
Time: 7:53:23
User: N/A
Computer: DC01
Description:
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 51 00 00 00 Q...

Event Type: Error
Event Source: NTDS General
Event Category: Global Catalog
Event ID: 1126
Date: 13.2.2011
Time: 5:20:05
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: DC01
Description:
Active Directory was unable to establish a connection with the global catalog.

Additional Data
Error value:
1355 The specified domain either does not exist or could not be contacted.
Internal ID:
3200cf3

User Action:
Make sure a global catalog is available in the forest, and is reachable from this domain controller. You may use the nltest utility to diagnose this problem.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Restart DNS servisa, netlogon servisa kao i restart DC01 u celini nisu dali rezultate. Kao privremeno rešenje urađeno je sledeće: DC02 je upaljen nakon čega je DC01 restartovan. Nakon toga sve normalno radi, međutim ostaje pitanje zašto DC01 nije mogao da radi kako treba bez podignutog DC02 domen kontrolera.

Da li je neko imao sličan problem i kako ga je prevazišao? Unapred hvala!!

Odgovor na temu

valjan
Janko Valencik
Software Deployer
Schneider Electric
Novi Sad

Član broj: 158605
Poruke: 3531
*.ptt.rs.

+553 Profil

Re: Problem sa DC-om/DNS-om

^{14.02.2011. u 11:59 - pre 160 meseci}

Pa lepo ti kazu greske - DC ne moze da locira GlobalCatalogue jer mu ne radi DNS, a DNS ne moze da se startuje jer nema AD-a, pa si usao u beskonacnu petlju. Cini mi se da ti podesavanja u TCP/IP Properties na DC01 nisu odradjena kako treba, kad ne moze da pronadje samog sebe. Ovo se prakticno redovno desava prilikom restarta DC-a, ali bi on normalno trebalo sam da nadje izlaz iz ovoga, i cesto se DNS servis rucno postavlja da zavisi od NETLOGON servisa, kako bi se podigao kad je AD vec aktivan. Mozda jednostavno da dodas jedan obican zapis u hosts fajl, ako vec ne postoji, koji bi ukazivao da se DC01 nalazi na tom i tom IP-ju. Ako ga vec imas, onda pojma nemam kako nije mogao pronaci samog sebe...

Odgovor na temu