Проблемы с репликацией и DNS

Проблемы с репликацией и DNS

masyaka

Пользователь

Сообщения: 106
Благодарности: 1

Изображения

	UK16.JPG
(37.9 Kb, 3 просмотров)

Доброго времени суток!
Вот решил немного разобраться с журналами событий на своих серверах. Проблем есть несколько, но основной мой вопрос, в какую сторону начинать смотреть.
Есть домен, два контроллера домена основной и резервный оба на MWS2003 EE.
Основной выполняет роли File server, Application server, DC(Active Directory), DNS, DHCP, WINS.
Резервный выполняет роль File server, Application server,DC(Active Directory), DNS, DHCP, WINS.

Журнал основного контроллера:

В журнале DNS вот такие ошибки.

Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4015
Date: 18.01.2010
Time: 13:11:03
User: N/A
Computer: NOU
Description:
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 51 00 00 00 Q...

Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 7055
Date: 15.01.2010
Time: 0:33:57
User: N/A
Computer: NOU
Description:
The DNS server accept() function failed. The event data contains the error.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 26 27 00 00 &'..

Event Type: Warning
Event Source: DNS
Event Category: None
Event ID: 3000
Date: 14.01.2010
Time: 23:16:55
User: N/A
Computer: NOU
Description:
The DNS server has encountered numerous run-time events. To determine the initial cause of these run-time events, examine the DNS server event log entries that precede this event. To prevent the DNS server from filling the event log too quickly, subsequent events with Event IDs higher than 3000 will be suppressed until events are no longer being generated at a high rate.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

В журнале File Replication Service.

Event Type: Warning
Event Source: NtFrs
Event Category: None
Event ID: 13508
Date: 19.03.2010
Time: 10:50:19
User: N/A
Computer: NOU
Description:
The File Replication Service is having trouble enabling replication from UPDATE to NOU for d:\windows\sysvol\domain using the DNS name update.mesi.org. FRS will keep retrying.
Following are some of the reasons you would see this warning.

[1] FRS can not correctly resolve the DNS name update.mesi.org from this computer.
[2] FRS is not running on update.mesi.org.
[3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.

This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: d5 04 00 00 Õ...

В журнале System

Event Type: Warning
Event Source: W32Time
Event Category: None
Event ID: 12
Date: 19.03.2010
Time: 11:03:06
User: N/A
Computer: NOU
Description:
Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: TermServDevices
Event Category: None
Event ID: 1111
Date: 19.03.2010
Time: 10:51:33
User: N/A
Computer: NOU
Description:
Driver HP LaserJet P2015 Series PCL 5e required for printer HP LaserJet P2015 Series PCL 5e is unknown. Contact the administrator to install the driver before you log in again.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 12 0d 00 00 ........

Event Type: Error
Event Source: TermServDevices
Event Category: None
Event ID: 1111
Date: 19.03.2010
Time: 10:51:32
User: N/A
Computer: NOU
Description:
Driver HP LaserJet P2015 Series PCL 6 required for printer HP LaserJet P2015 Series PCL 6 is unknown. Contact the administrator to install the driver before you log in again.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 12 0d 00 00 ........

Event Type: Error
Event Source: TermServDevices
Event Category: None
Event ID: 1111
Date: 19.03.2010
Time: 10:51:32
User: N/A
Computer: NOU
Description:
Driver HP LaserJet 1018 required for printer !!Tsitnikova!HP LaserJet 1018 is unknown. Contact the administrator to install the driver before you log in again.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 12 0d 00 00 ........

В журналах резервного контроллера:

В журнале Application:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 19.03.2010
Time: 13:07:36
User: NT AUTHORITY\SYSTEM
Computer: UPDATE
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 19.03.2010
Time: 13:07:36
User: NT AUTHORITY\SYSTEM
Computer: UPDATE
Description:
Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=mesi,DC=org. The file must be present at the location <\\mesi.org\sysvol\mesi.org\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Access is denied. ). Group Policy processing aborted.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

В журнале Directory service

Event Type: Error
Event Source: NTDS Replication
Event Category: DS RPC Client
Event ID: 2087
Date: 19.03.2010
Time: 10:17:31
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: UPDATE
Description:
Active Directory could not resolve the following DNS host name of the source domain controller to an IP address. This error prevents additions, deletions and changes in Active Directory from replicating between one or more domain controllers in the forest. Security groups, group policy, users and computers and their passwords will be inconsistent between domain controllers until this error is resolved, potentially affecting logon authentication and access to network resources.

Source domain controller:
NOU
Failing DNS host name:
b1f131d8-08ac-47f9-aebc-6971a884c380._msdcs.mesi.org

NOTE: By default, only up to 10 DNS failures are shown for any given 12 hour period, even if more than 10 failures occur. To log all individual failure events, set the following diagnostics registry value to 1:

Registry Path:
HKLM\System\CurrentControlSet\Services\NTDS\Diagnostics\22 DS RPC Client

User Action:

1) If the source domain controller is no longer functioning or its operating system has been reinstalled with a different computer name or NTDSDSA object GUID, remove the source domain controller's metadata with ntdsutil.exe, using the steps outlined in MSKB article 216498.

2) Confirm that the source domain controller is running Active directory and is accessible on the network by typing "net view \\<source DC name>" or "ping <source DC name>".

3) Verify that the source domain controller is using a valid DNS server for DNS services, and that the source domain controller's host record and CNAME record are correctly registered, using the DNS Enhanced version of DCDIAG.EXE available on http://www.microsoft.com/dns

dcdiag /test:dns

4) Verify that that this destination domain controller is using a valid DNS server for DNS services, by running the DNS Enhanced version of DCDIAG.EXE command on the console of the destination domain controller, as follows:

dcdiag /test:dns

5) For further analysis of DNS error failures see KB 824449:
http://support.microsoft.com/?kbid=824449

Additional Data
Error value:
11004 The requested name is valid, but no data of the requested type was found.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: NTDS Replication
Event Category: Replication
Event ID: 1083
Date: 19.03.2010
Time: 9:00:00
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: UPDATE
Description:
Active Directory could not update the following object with changes received from the domain controller at the following network address because Active Directory was busy processing information.

Object:
CN=Исаев Максим Владимирович,OU=domain_admins,DC=mesi,DC=org
Network address:
b1f131d8-08ac-47f9-aebc-6971a884c380._msdcs.mesi.org

This operation will be tried again later.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

В журнале DNS:

Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 16.10.2009
Time: 5:31:16
User: N/A
Computer: UPDATE
Description:
The DNS server was unable to complete directory service enumeration of zone mesi.org. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00 *#..

В журнале File replication service:

Event Type: Error
Event Source: NtFrs
Event Category: None
Event ID: 13568
Date: 19.03.2010
Time: 10:26:36
User: N/A
Computer: UPDATE
Description:
The File Replication Service has detected that the replica set "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR.

Replica set name is : "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)"
Replica root path is : "c:\windows\sysvol\domain"
Replica root volume is : "\\.\C:"
A Replica set hits JRNL_WRAP_ERROR when the record that it is trying to read from the NTFS USN journal is not found. This can occur because of one of the following reasons.

[1] Volume "\\.\C:" has been formatted.
[2] The NTFS USN journal on volume "\\.\C:" has been deleted.
[3] The NTFS USN journal on volume "\\.\C:" has been truncated. Chkdsk can truncate the journal if it finds corrupt entries at the end of the journal.
[4] File Replication Service was not running on this computer for a long time.
[5] File Replication Service could not keep up with the rate of Disk IO activity on "\\.\C:".
Setting the "Enable Journal Wrap Automatic Restore" registry parameter to 1 will cause the following recovery steps to be taken to automatically recover from this error state.
[1] At the first poll, which will occur in 5 minutes, this computer will be deleted from the replica set. If you do not want to wait 5 minutes, then run "net stop ntfrs" followed by "net start ntfrs" to restart the File Replication Service.
[2] At the poll following the deletion this computer will be re-added to the replica set. The re-addition will trigger a full tree sync for the replica set.

WARNING: During the recovery process data in the replica tree may be unavailable. You should reset the registry parameter described above to 0 to prevent automatic recovery from making the data unexpectedly unavailable if this error condition occurs again.

To change this registry parameter, run regedit.

Click on Start, Run and type regedit.

Expand HKEY_LOCAL_MACHINE.
Click down the key path:
"System\CurrentControlSet\Services\NtFrs\Parameters"
Double click on the value name
"Enable Journal Wrap Automatic Restore"
and update the value.

If the value name is not present you may add it with the New->DWORD Value function under the Edit Menu item. Type the value name exactly as shown above.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

В журнале System:
Event Type: Error
Event Source: TermServDevices
Event Category: None
Event ID: 1111
Date: 19.03.2010
Time: 11:18:45
User: N/A
Computer: UPDATE
Description:
Driver HP LaserJet P2015 Series PCL 5e required for printer HP LaserJet P2015 Series PCL 5e is unknown. Contact the administrator to install the driver before you log in again.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 12 0d 00 00 ........

Ipconfig/all c основного контроллера

Windows IP Configuration
Host Name . . . . . . . . . . . . : NOU
Primary Dns Suffix . . . . . . . : mesi.org
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : mesi.org
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Marvell Yukon 88E8056 PCI-E Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 00-1F-C6-8D-C0-23
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.5
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.4
192.168.0.5

Ipconfig/all c резервного контроллера

Windows IP Configuration
Host Name . . . . . . . . . . . . : update
Primary Dns Suffix . . . . . . . : mesi.org
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mesi.org
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8168/8111 PCI-E Gigabit Ethernet NIC
Physical Address. . . . . . . . . : 00-18-F3-09-9A-3C
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.4
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.5
192.168.0.4

Dcdiag с основного контроллера

Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests

Testing server: Default-First-Site\NOU
Starting test: Connectivity
......................... NOU passed test Connectivity

Doing primary tests

Testing server: Default-First-Site\NOU
Starting test: Replications
......................... NOU passed test Replications
Starting test: NCSecDesc
......................... NOU passed test NCSecDesc
Starting test: NetLogons
......................... NOU passed test NetLogons
Starting test: Advertising
......................... NOU passed test Advertising
Starting test: KnowsOfRoleHolders
......................... NOU passed test KnowsOfRoleHolders
Starting test: RidManager
......................... NOU passed test RidManager
Starting test: MachineAccount
......................... NOU passed test MachineAccount
Starting test: Services
......................... NOU passed test Services
Starting test: ObjectsReplicated
......................... NOU passed test ObjectsReplicated
Starting test: frssysvol
......................... NOU passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the

SYSVOL has been shared. Failing SYSVOL replication problems may cause

Group Policy problems.
......................... NOU failed test frsevent
Starting test: kccevent
......................... NOU passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x000009B1
Time Generated: 03/19/2010 10:47:10
Event String: The UPS service is not configured correctly.
An Error Event occured. EventID: 0xC0001B6E
Time Generated: 03/19/2010 10:48:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 03/19/2010 10:48:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/19/2010 10:48:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6F
Time Generated: 03/19/2010 10:48:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B70
Time Generated: 03/19/2010 10:48:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6F
Time Generated: 03/19/2010 10:48:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 03/19/2010 10:51:32
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 03/19/2010 10:51:32
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 03/19/2010 10:51:33
(Event String could not be retrieved)
......................... NOU failed test systemlog
Starting test: VerifyReferences
......................... NOU passed test VerifyReferences

Running partition tests on : TAPI3Directory
Starting test: CrossRefValidation
......................... TAPI3Directory passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... TAPI3Directory passed test CheckSDRefDom

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : mesi
Starting test: CrossRefValidation
......................... mesi passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... mesi passed test CheckSDRefDom

Running enterprise tests on : mesi.org
Starting test: Intersite
......................... mesi.org passed test Intersite
Starting test: FsmoCheck
......................... mesi.org passed test FsmoCheck

Netdiag с основного контроллера
.....................................

Computer Name: NOU
DNS Host Name: NOU.mesi.org
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 6 Model 23 Stepping 6, GenuineIntel
List of installed hotfixes :
KB921503
KB923561
KB924667-v2
KB925398_WMP64
KB925876
KB925902
KB926122
KB927891
KB929123
KB930178
KB931784
KB932168
KB933566
KB933729
KB933854
KB935839
KB935840
KB935966
KB936021
KB936357
KB936782
KB938127
KB938127-IE7
KB938464
KB938759-v4
KB941202
KB941568
KB941569
KB941644
KB941672
KB941693
KB942615
KB942763
KB942830
KB942831
KB942840
KB943055
KB943460
KB943484
KB943485
KB943729
KB944338-v2
KB944533
KB944653
KB945553
KB946026
KB947864
KB948496
KB948590
KB948881
KB949014
KB950759-IE7
KB950762
KB950974
KB951066
KB951072-v2
KB951698
KB951746
KB951748
KB952004
KB952069
KB952954
KB953298
KB953838
KB953839
KB954155
KB954211
KB954550-v5
KB954600
KB955069
KB955759
KB955839
KB956390-IE7
KB956391
KB956572
KB956744
KB956802
KB956803
KB956841
KB956844
KB957095
KB957097
KB958215-IE7
KB958644
KB958687
KB958690
KB958869
KB959426
KB960225
KB960714-IE7
KB960715
KB960803
KB960859
KB961063
KB961064
KB961118
KB961260-IE7
KB961371-v2
KB961373
KB961501
KB963027-IE7
KB967715
KB967723
KB968389
KB968537
KB968816
KB969059
KB969805
KB969883
KB969897-IE7
KB969898
KB969947
KB970238
KB970430
KB970483
KB970653-v3
KB971032
KB971468
KB971486
KB971513
KB971557
KB971633
KB971657
KB971737
KB971961
KB971961-IE8
KB972260-IE7
KB972260-IE8
KB972270
KB973037
KB973346
KB973354
KB973507
KB973525
KB973540
KB973687
KB973815
KB973825
KB973869
KB973874-IE8
KB973904
KB973917
KB973917-v2
KB974112
KB974318
KB974392
KB974455-IE8
KB974571
KB975025
KB975364-IE8
KB975467
KB975560
KB975713
KB976098-v2
KB976325-IE8
KB976662-IE8
KB976749-IE8
KB977165
KB977290
KB977914
KB978037
KB978207-IE8
KB978251
KB978262
KB978506-IE8
KB978706
KB979306
Q147222

Netcard queries test . . . . . . . : Passed
Per interface results:
Adapter : Local Area Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : NOU
IP Address . . . . . . . . : 192.168.0.5
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.0.1
Dns Servers. . . . . . . . : 192.168.0.4
192.168.0.5
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{F182196B-9DDA-46CC-8BBF-D5C2B433C92F}
1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.0.4' and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '192.168.0.5' and other DCs also have some of the names registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{F182196B-9DDA-46CC-8BBF-D5C2B433C92F}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{F182196B-9DDA-46CC-8BBF-D5C2B433C92F}
The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully

Еще обнаружил вот что. Есть рабочая станция WinXPPro в свойствах объекта типа Computer в оснастке Active Directory Users and Computers вместо Workstation or server в поле Role написано Domain controller, хотя это рядовая рабочая станция
[IMG][img]UK16.jpg[/img][/IMG]

поделитесь ссылками где можно почитать про то как с помощью команд dcdiag и netdiag анализировать состояние серверов, желательно чтобы на русском было

Отправлено: 11:04, 19-03-2010