Добрый день коллеги.
Достаточно продолжительное время пытаюсь решить, проблему с восстановление репликации между двумя КД.
Проблема, создает ряд сложностей в работе сети. Прошу помочь разобраться.
Предыстория следующая:
В наличие 2 сервера на WinServ 2003 SP2 (основной server и резервный servernn), оба являются КД espi. Из-за отсутствия канала доступа в интернет, репликация не проходила более двух месяцев. В настоящее время в сети начались проблемы связанные с авторизацией пользователей.
Предпринимал ряд мер, которые не помогли, а частично усугубили ситуацию (модификации, производимые через системный реестр для повторной инициализации службы репликации файлов BurFlags, D4 на pdc и D2 на bdc).
Выкладываю ipconfig /all и dcdiag на оба сервера.
ipconfig /all и dcdiag на pdc
Цитата:
Microsoft Windows [Версия 5.2.3790]
(С) Корпорация Майкрософт, 1985-2003.
C:\Documents and Settings\Администратор>ipconfig /all
Настройка протокола IP для Windows
Имя компьютера . . . . . . . . . : server
Основной DNS-суффикс . . . . . . : espi
Тип узла. . . . . . . . . . . . . : неизвестный
IP-маршрутизация включена . . . . : нет
WINS-прокси включен . . . . . . . : нет
Порядок просмотра суффиксов DNS . : espi
Подключение по локальной сети - Ethernet адаптер:
DNS-суффикс этого подключения . . :
Описание . . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Физический адрес. . . . . . . . . : 00-14-5E-A4-A5-E3
DHCP включен. . . . . . . . . . . : нет
IP-адрес . . . . . . . . . . . . : 192.168.10.1
Маска подсети . . . . . . . . . . : 255.255.255.0
Основной шлюз . . . . . . . . . . : 192.168.10.254
DNS-серверы . . . . . . . . . . . : 192.168.10.1
192.168.10.254
C:\Documents and Settings\Администратор>dcdiag
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SERVER
Starting test: Connectivity
......................... SERVER passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SERVER
Starting test: Replications
[Replications Check,SERVER] A recent replication attempt failed:
From SERVERNN to SERVER
Naming Context: CN=Schema,CN=Configuration,DC=espi
The replication generated an error (8524):
Операция DSA не смогла быть выполнена, т.к. произошла ошибка поиска
в DNS.
The failure occurred at 2012-01-05 19:07:42.
The last success occurred at 2012-01-05 18:50:20.
1 failures have occurred since the last success.
The guid-based DNS name 25595338-4c01-4912-b6ee-214c961f4de6._msdcs.
espi
is not registered on one or more DNS servers.
[Replications Check,SERVER] A recent replication attempt failed:
From SERVERNN to SERVER
Naming Context: DC=espi
The replication generated an error (8614):
Репликация Active Directory с этим сервером невозможна, поскольку вр
емя с момента последней репликации с этим сервером превышает время жизни захорон
ения.
The failure occurred at 2012-01-05 19:28:52.
The last success occurred at 2011-08-24 19:32:32.
9151 failures have occurred since the last success.
REPLICATION-RECEIVED LATENCY WARNING
SERVER: Current time is 2012-01-05 19:29:51.
DC=espi
Last replication recieved from SERVERNN at 2011-08-24 19:32:32.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
......................... SERVER passed test Replications
Starting test: NCSecDesc
......................... SERVER passed test NCSecDesc
Starting test: NetLogons
......................... SERVER passed test NetLogons
Starting test: Advertising
......................... SERVER passed test Advertising
Starting test: KnowsOfRoleHolders
......................... SERVER passed test KnowsOfRoleHolders
Starting test: RidManager
......................... SERVER passed test RidManager
Starting test: MachineAccount
......................... SERVER passed test MachineAccount
Starting test: Services
......................... SERVER passed test Services
Starting test: ObjectsReplicated
......................... SERVER passed test ObjectsReplicated
Starting test: frssysvol
......................... SERVER passed test frssysvol
Starting test: frsevent
......................... SERVER passed test frsevent
Starting test: kccevent
An Error Event occured. EventID: 0xC00007FA
Time Generated: 01/05/2012 19:21:42
(Event String could not be retrieved)
......................... SERVER failed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0xC0070023
Time Generated: 01/05/2012 19:04:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000423
Time Generated: 01/05/2012 19:06:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000423
Time Generated: 01/05/2012 19:08:02
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/05/2012 19:11:34
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/05/2012 19:11:35
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/05/2012 19:11:35
(Event String could not be retrieved)
......................... SERVER failed test systemlog
Starting test: VerifyReferences
......................... SERVER passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : espi
Starting test: CrossRefValidation
......................... espi passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... espi passed test CheckSDRefDom
Running enterprise tests on : espi
Starting test: Intersite
......................... espi passed test Intersite
Starting test: FsmoCheck
......................... espi passed test FsmoCheck
|
ipconfig /all и dcdiag на bdc
Цитата:
Microsoft Windows [Версия 5.2.3790]
(С) Корпорация Майкрософт, 1985-2003.
C:\Documents and Settings\Администратор.espi>ipconfig /all
Настройка протокола IP для Windows
Имя компьютера . . . . . . . . . : servernn
Основной DNS-суффикс . . . . . . : espi
Тип узла. . . . . . . . . . . . . : неизвестный
IP-маршрутизация включена . . . . : нет
WINS-прокси включен . . . . . . . : нет
Порядок просмотра суффиксов DNS . : espi
Подключение по локальной сети - Ethernet адаптер:
DNS-суффикс этого подключения . . :
Описание . . . . . . . . . . . . : VMware Accelerated AMD PCNet Adapter
Физический адрес. . . . . . . . . : 00-0C-29-68-37-B9
DHCP включен. . . . . . . . . . . : нет
IP-адрес . . . . . . . . . . . . : 192.168.20.1
Маска подсети . . . . . . . . . . : 255.255.255.0
Основной шлюз . . . . . . . . . . : 192.168.20.254
DNS-серверы . . . . . . . . . . . : 192.168.10.1
C:\Documents and Settings\Администратор.espi>dcdiag
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SERVERNN
Starting test: Connectivity
......................... SERVERNN passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SERVERNN
Starting test: Replications
[SERVER] DsBindWithSpnEx() failed with error -2146893022,
Главное конечное имя неверно..
[Replications Check,SERVERNN] A recent replication attempt failed:
From SERVER to SERVERNN
Naming Context: DC=espi
The replication generated an error (8614):
Репликация Active Directory с этим сервером невозможна, поскольку вр
емя с момента последней репликации с этим сервером превышает время жизни захорон
ения.
The failure occurred at 2012-01-05 19:32:01.
The last success occurred at 2011-09-30 11:00:32.
9122 failures have occurred since the last success.
REPLICATION-RECEIVED LATENCY WARNING
SERVERNN: Current time is 2012-01-05 19:33:45.
DC=espi
Last replication recieved from SERVER at 2011-09-30 11:00:32.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
......................... SERVERNN passed test Replications
Starting test: NCSecDesc
......................... SERVERNN passed test NCSecDesc
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\SERVERNN\netlogon)
[SERVERNN] An net use or LsaPolicy operation failed with error 1203, Ни
одна из служб доступа к сети не смогла обработать заданный сетевой путь..
......................... SERVERNN failed test NetLogons
Starting test: Advertising
......................... SERVERNN passed test Advertising
Starting test: KnowsOfRoleHolders
Warning: SERVER is the Schema Owner, but is not responding to DS RPC Bi
nd.
[SERVER] LDAP bind failed with error 8341,
Произошла ошибка службы каталогов..
Warning: SERVER is the Schema Owner, but is not responding to LDAP Bind
.
Warning: SERVER is the Domain Owner, but is not responding to DS RPC Bi
nd.
Warning: SERVER is the Domain Owner, but is not responding to LDAP Bind
.
Warning: SERVER is the PDC Owner, but is not responding to DS RPC Bind.
Warning: SERVER is the PDC Owner, but is not responding to LDAP Bind.
Warning: SERVER is the Rid Owner, but is not responding to DS RPC Bind.
Warning: SERVER is the Rid Owner, but is not responding to LDAP Bind.
Warning: SERVER is the Infrastructure Update Owner, but is not respondi
ng to DS RPC Bind.
Warning: SERVER is the Infrastructure Update Owner, but is not respondi
ng to LDAP Bind.
......................... SERVERNN failed test KnowsOfRoleHolders
Starting test: RidManager
......................... SERVERNN failed test RidManager
Starting test: MachineAccount
......................... SERVERNN passed test MachineAccount
Starting test: Services
......................... SERVERNN passed test Services
Starting test: ObjectsReplicated
......................... SERVERNN passed test ObjectsReplicated
Starting test: frssysvol
......................... SERVERNN passed test frssysvol
Starting test: frsevent
......................... SERVERNN passed test frsevent
Starting test: kccevent
An Error Event occured. EventID: 0xC00007FA
Time Generated: 01/05/2012 19:28:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 01/05/2012 19:28:55
(Event String could not be retrieved)
......................... SERVERNN failed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x40000004
Time Generated: 01/05/2012 18:42:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 01/05/2012 18:42:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000164A
Time Generated: 01/05/2012 18:46:50
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 01/05/2012 18:47:41
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 01/05/2012 18:49:58
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/05/2012 18:50:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/05/2012 18:50:01
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/05/2012 18:50:02
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 01/05/2012 18:50:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 01/05/2012 18:50:47
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 01/05/2012 19:13:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 01/05/2012 19:13:04
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 01/05/2012 19:21:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002719
Time Generated: 01/05/2012 19:21:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 01/05/2012 19:33:46
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 01/05/2012 19:33:46
(Event String could not be retrieved)
......................... SERVERNN failed test systemlog
Starting test: VerifyReferences
......................... SERVERNN passed test VerifyReferences
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : espi
Starting test: CrossRefValidation
......................... espi passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... espi passed test CheckSDRefDom
Running enterprise tests on : espi
Starting test: Intersite
......................... espi passed test Intersite
Starting test: FsmoCheck
......................... espi passed test FsmoCheck
|
