Проблемы с репликацией Windows 2003...

[AlexStud]

На одной паре контролеров домена репликация идет в одну сторону.
Есть 3 контролера домена (DC), все глобальные каталоги, два в головном офисе в одной подсети (SPANIEL и BLADE22) и 1 DC в удаленном офисе (V-DC-SRV01).
Между двумя DC в головном офисе репликация идет без проблем в обе стороны.
Проблемы между V-DC-SRV01 и SPANIEL. От SPANIEL на V-DC-SRV01 репликация идет без проблем, обратно никак (виснут оснастки, причем на прямую из удаленного офиса (между офисами сеть 100МБит, но разные подсети) через mstsc залогиниться никак не получается, захожу на SPANIEL, но рабочий стол не грузится, хотя логин и пароль вводятся успешно).

Началось все примерно неделю назад. Аппаратно засбоил BLADE22 (непредсказуемо зависал), было решено перенести роли FSMO на сервер SPANIEL, что и было сделано. Через день или два стали наблюдаться тормоза в сети, долго логинился в домен компьютер, долго открывались сетевые шары,

посыпались Warning'и в EventViewer'e на V-DC-SRV01:

========================================================================

Event Type: Warning
Event Source: NtFrs
Event Category: None
Event ID: 13509
Date: 08.10.2007
Time: 21:45:51
User: N/A
Computer: V-DC-SRV01
Description:
The File Replication Service has enabled replication from SPANIEL to V-DC-SRV01 for c:\windows\sysvol\domain after repeated retries.

For

more information, see Help and Support Center at ...

-----------------------------------------------------------------------

Event Type: Warning
Event Source: NtFrs
Event Category: None
Event ID: 13508
Date: 08.10.2007
Time: 21:18:07
User: N/A
Computer: V-DC-SRV01
Description:
The File Replication Service is having trouble enabling replication from BLADE22 to V-DC-SRV01 for c:\windows\sysvol\domain using the DNS

name blade22.club.local. FRS will keep retrying.
Following are some of the reasons you would see this warning.

[1] FRS can not correctly resolve the DNS name blade22.club.local from this computer.
[2] FRS is not running on blade22.club.local.
[3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.

This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that

the connection has been established.

For more information, see Help and Support Center at ...
Data:
0000: ba 06 00 00 ?...

-----------------------------------------------------------------------
Event Type: Warning
Event Source: NTDS Replication
Event Category: DS RPC Client
Event ID: 1232
Date: 08.10.2007
Time: 18:36:32
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: V-DC-SRV01
Description:
Active Directory attempted to perform a remote procedure call (RPC) to the following server. The call timed out and was cancelled.

Server:
891a6302-72e1-408c-884d-c8de7b990093._msdcs.club.local
Call Timeout (Mins):
5
Thread ID:
df4

Additional Data
Internal ID:
5001047

For more information, see Help and Support Center at ...

-----------------------------------------------------------------------
Event Type: Warning
Event Source: NTDS Replication
Event Category: DS RPC Client
Event ID: 1188
Date: 08.10.2007
Time: 14:58:57
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: V-DC-SRV01
Description:
A thread in Active Directory is waiting for the completion of a RPC made to the following domain controller.

Domain controller:
891a6302-72e1-408c-884d-c8de7b990093._msdcs.club.local
Operation:
get changes
Thread ID:
df4
Timeout period (minutes):
5

Active Directory has attempted to cancel the call and recover this thread.

User Action
If this condition continues, restart the domain controller.

For more information, see Help and Support Center at ...
-----------------------------------------------------------------------



В это время, на клиентах в удаленном офисе:
-----------------------------------------------------------------------
Тип события: Ошибка
Источник события: NETLOGON
Категория события: Отсутствует
Код события: 5719
Дата: 08.10.2007
Время: 10:42:19
Пользователь: Н/Д
Компьютер: MXXXXXXXXXXXXV-A
Описание:
Для домена CLUB нет доступного контроллера домена. Ошибка:
Неизвестный интерфейс. .
Убедитесь в том, что компьютер подключен к сети и повторите попытку. Если ошибка повторяется, обратитесь к сетевому администратору.
Данные:
0000: 12 00 02 c0 ...A

========================================================================



На сервере V-DC-SRV01 при попытке просмотра ролей FSMO в остнастке вижу error, там где должен быть SPANIEL...

========================================================================


ipconfig /all на v-dc-srv01:


Windows IP Configuration

Host Name . . . . . . . . . . . . : v-dc-srv01
Primary Dns Suffix . . . . . . . : club.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : club.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
Physical Address. . . . . . . . . : 00-18-FE-86-AB-96
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.101.10.2
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . : 10.101.10.1
DNS Servers . . . . . . . . . . . : 10.101.10.2
Primary WINS Server . . . . . . . : 10.101.10.2

-----------------------------------------------------------------------

...

...

[AlexStud]

Dcdiag с V-DC-SRV01:


Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine v-dc-srv01, is a DC.
* Connecting to directory service on server v-dc-srv01.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 3 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\V-DC-SRV01
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... V-DC-SRV01 passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\V-DC-SRV01
Starting test: Replications
* Replications Check
[Replications Check,V-DC-SRV01] A recent replication attempt failed:
From SPANIEL to V-DC-SRV01
Naming Context: DC=ForestDnsZones,DC=club,DC=local
The replication generated an error (1726):
Win32 Error 1726
The failure occurred at 2007-10-08 14:47:10.
The last success occurred at 2007-10-05 08:54:35.
85 failures have occurred since the last success.
The replication RPC call executed for too long at the server and
was cancelled.
Check load and resouce usage on SPANIEL.
[Replications Check,V-DC-SRV01] A recent replication attempt failed:
From SPANIEL to V-DC-SRV01
Naming Context: DC=DomainDnsZones,DC=club,DC=local
The replication generated an error (1726):
Win32 Error 1726
The failure occurred at 2007-10-08 14:17:26.
The last success occurred at 2007-10-05 17:27:44.
75 failures have occurred since the last success.
The replication RPC call executed for too long at the server and
was cancelled.
Check load and resouce usage on SPANIEL.
[Replications Check,V-DC-SRV01] A recent replication attempt failed:
From SPANIEL to V-DC-SRV01
Naming Context: CN=Schema,CN=Configuration,DC=club,DC=local
The replication generated an error (1726):
Win32 Error 1726
The failure occurred at 2007-10-08 15:06:31.
The last success occurred at 2007-10-05 08:54:35.
79 failures have occurred since the last success.
The replication RPC call executed for too long at the server and
was cancelled.
Check load and resouce usage on SPANIEL.
[Replications Check,V-DC-SRV01] A recent replication attempt failed:
From SPANIEL to V-DC-SRV01
Naming Context: CN=Configuration,DC=club,DC=local
The replication generated an error (1818):
Win32 Error 1818
The failure occurred at 2007-10-08 15:11:31.
The last success occurred at 2007-10-05 17:31:17.
190 failures have occurred since the last success.
[Replications Check,V-DC-SRV01] A recent replication attempt failed:
From SPANIEL to V-DC-SRV01
Naming Context: DC=club,DC=local
The replication generated an error (1818):
Win32 Error 1818
The failure occurred at 2007-10-08 14:58:57.
The last success occurred at 2007-10-05 20:19:08.
601 failures have occurred since the last success.
V-DC-SRV01: There are 17 replication work items in the queue.
The first job has been executing for 3:23.
* Replication Latency Check
CN=Schema,CN=Configuration,DC=club,DC=local
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer

replicating this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=club,DC=local
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer

replicating this nc. 0 had no latency information (Win2K DC).
DC=club,DC=local
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer

replicating this nc. 0 had no latency information (Win2K DC).
* Replication Site Latency Check
......................... V-DC-SRV01 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC V-DC-SRV01.
* Security Permissions Check for
DC=ForestDnsZones,DC=club,DC=local
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=club,DC=local
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=club,DC=local
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=club,DC=local
(Configuration,Version 2)
* Security Permissions Check for
DC=club,DC=local
(Domain,Version 2)
......................... V-DC-SRV01 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Unable to connect to the NETLOGON share! (\\V-DC-SRV01\netlogon)
[V-DC-SRV01] An net use or LsaPolicy operation failed with error 1203, Win32 Error 1203.
......................... V-DC-SRV01 failed test NetLogons
Starting test: Advertising
The DC V-DC-SRV01 is advertising itself as a DC and having a DS.
The DC V-DC-SRV01 is advertising as an LDAP server
The DC V-DC-SRV01 is advertising as having a writeable directory
The DC V-DC-SRV01 is advertising as a Key Distribution Center
The DC V-DC-SRV01 is advertising as a time server
The DS V-DC-SRV01 is advertising as a GC.
......................... V-DC-SRV01 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SPANIEL,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=club,DC=local
[SPANIEL] LDAP bind failed with error 1053,
Win32 Error 1053.
Warning: SPANIEL is the Schema Owner, but is not responding to LDAP Bind.
Role Domain Owner = CN=NTDS Settings,CN=SPANIEL,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=club,DC=local
Warning: SPANIEL is the Domain Owner, but is not responding to LDAP Bind.
Role PDC Owner = CN=NTDS Settings,CN=SPANIEL,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=club,DC=local
Warning: SPANIEL is the PDC Owner, but is not responding to LDAP Bind.
Role Rid Owner = CN=NTDS Settings,CN=SPANIEL,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=club,DC=local
Warning: SPANIEL is the Rid Owner, but is not responding to LDAP Bind.
Role Infrastructure Update Owner = CN=NTDS

Settings,CN=SPANIEL,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=club,DC=local
Warning: SPANIEL is the Infrastructure Update Owner, but is not responding to LDAP Bind.
......................... V-DC-SRV01 failed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 5103 to 1073741823
* spaniel.club.local is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 4103 to 4602
* rIDPreviousAllocationPool is 4103 to 4602
* rIDNextRID: 4136
......................... V-DC-SRV01 passed test RidManager
Starting test: MachineAccount
Checking machine account for DC V-DC-SRV01 on DC V-DC-SRV01.
* SPN found :LDAP/v-dc-srv01.club.local/club.local
* SPN found :LDAP/v-dc-srv01.club.local
* SPN found :LDAP/V-DC-SRV01
* SPN found :LDAP/v-dc-srv01.club.local/CLUB
* SPN found :LDAP/7e0b2dda-c21d-464a-9f7e-5b6b22d6f7e9._msdcs.club.local
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7e0b2dda-c21d-464a-9f7e-5b6b22d6f7e9/club.local
* SPN found :HOST/v-dc-srv01.club.local/club.local
* SPN found :HOST/v-dc-srv01.club.local
* SPN found :HOST/V-DC-SRV01
* SPN found :HOST/v-dc-srv01.club.local/CLUB
* SPN found :GC/v-dc-srv01.club.local/club.local
......................... V-DC-SRV01 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... V-DC-SRV01 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
V-DC-SRV01 is in domain DC=club,DC=local
Checking for CN=V-DC-SRV01,OU=Domain Controllers,DC=club,DC=local in domain DC=club,DC=local on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=V-DC-SRV01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=club,DC=local in

domain CN=Configuration,DC=club,DC=local on 1 servers
Object is up-to-date on all servers.
......................... V-DC-SRV01 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... V-DC-SRV01 passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... V-DC-SRV01 passed test frsevent
Starting test: kccevent
* The KCC Event log test
An Warning Event occured. EventID: 0x800004A4
Time Generated: 10/08/2007 15:04:01
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800004D0
Time Generated: 10/08/2007 15:04:01
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800004A4
Time Generated: 10/08/2007 15:11:31
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800004D0
Time Generated: 10/08/2007 15:11:31
(Event String could not be retrieved)
......................... V-DC-SRV01 failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x0000164A
Time Generated: 10/08/2007 14:35:33
Event String: The Netlogon service could not create servershareC:\WINDOWS\SYSVOL\sysvol\club.local\SCRIPTS. Thefollowing error

occurred: %%5
......................... V-DC-SRV01 failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference) CN=V-DC-SRV01,OU=Domain Controllers,DC=club,DC=local and backlink on

CN=V-DC-SRV01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=club,DC=local are correct.
The system object reference (frsComputerReferenceBL) CN=V-DC-SRV01,CN=Domain System Volume (SYSVOL share),CN=File

Replication Service,CN=System,DC=club,DC=local and backlink on CN=V-DC-SRV01,OU=Domain Controllers,DC=club,DC=local are

correct.
The system object reference (serverReferenceBL) CN=V-DC-SRV01,CN=Domain System Volume (SYSVOL share),CN=File Replication

Service,CN=System,DC=club,DC=local and backlink on CN=NTDS

Settings,CN=V-DC-SRV01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=club,DC=local are correct.
......................... V-DC-SRV01 passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : club
Starting test: CrossRefValidation
......................... club passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... club passed test CheckSDRefDom

Running enterprise tests on : club.local
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope provided by the command line arguments provided.
......................... club.local passed test Intersite
Starting test: FsmoCheck
GC Name: \\v-dc-srv01.club.local
Locator Flags: 0xe00001fc
PDC Name: \\spaniel.club.local
Locator Flags: 0xe00003fd
Time Server Name: \\v-dc-srv01.club.local
Locator Flags: 0xe00001fc
Preferred Time Server Name: \\spaniel.club.local
Locator Flags: 0xe00003fd
KDC Name: \\v-dc-srv01.club.local
Locator Flags: 0xe00001fc
......................... club.local passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS

-----------------------------------------------------------------------

Netdiag пытался сделать виснет, пробовал менять версии виснет все-равно...

-----------------------------------------------------------------------

При попытке передать файлы по сети с spaniel на v-dc-srv01 и наоборот, пишет, что сетевое имя больше недоступно...


И еще момент на spaniel и на v-dc-srv01 нет папки netlogon... Хотя должна быть...

Во вложении - ipconfig, dcdiag, netdiag, repadmin и скриншоты с упомянутых серверов.

[monkkey]

v-dc-srv01
Что за маска сети 254.0 ? У вас явно не один хост в подсетке.

[AlexStud]

Вы правы, у нас их 510. Возможных.

[monkkey]

Я и говорю - откуда маска такая? Получается, у Вас один хост в подсети 10.101.10.0

[AlexStud]

Не совсем понимаю почему такой интерес к маске...
Есть 3 контролера домена (DC), все глобальные каталоги, два в головном офисе в одной подсети (SPANIEL и BLADE22) и 1 DC в удаленном офисе (V-DC-SRV01). »
У первых двух в главном офисе сеть 10.0.0.0/16, в удаленном - 10.101.10.0/23

[monkkey]

http://ru.wikipedia.org/wiki/IP-%D0%B0%D0%B4%D1%80%D0%B5%D1%81
ЕЩЕ РАЗ:
ПРИ ТАКОЙ МАСКЕ ПОДСЕТИ У ВАС В НЕЙ МОЖЕТ БЫТЬ ТОЛЬКО один компьютер.
Когда исправите, попробуйте принудительную репликацию утилитой replmon.exe изи Support tools

[AlexStud]

ПРИ ТАКОЙ МАСКЕ ПОДСЕТИ У ВАС В НЕЙ МОЖЕТ БЫТЬ ТОЛЬКО один компьютер. »
- не согласен... (см. вложенный файл 10.101.10.0.gif)