Проблемы с заходом в локалку

dodger · Отправлено: **12:34, 26-11-2009** | #11

Где - как. Если рабочую станцю перезагрузить - то все заходит ок. Если на уже загруженной - то не пускает - запрашивает логин/пароль а потом пишет, что нет доступа.

Telepuzik · Отправлено: **13:55, 26-11-2009** | #12

Пропишите на машинах в качестве DNS сервера только 192.168.0.1 и перезагрузите машины.

monkkey · Отправлено: **14:37, 26-11-2009** | #13

Журнал событий на клиенте изучайте

dodger · Отправлено: **16:40, 26-11-2009** | #14

Запустил на сервере netdiag /fix:

Код:

..........................................

    Computer Name: LKI-AD
    DNS Host Name: LKI-AD.lenkor.local
    System info : Microsoft Windows Server 2003 (Build 3790)
    Processor : x86 Family 6 Model 15 Stepping 13, GenuineIntel
    List of installed hotfixes : 
        KB924667-v2
        KB925398_WMP64
        KB925902-v2
        KB930178
        KB931784
        KB932168
        Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

    Adapter : Local Area Connection 2

        Netcard queries test . . . : Passed

        Host Name. . . . . . . . . : LKI-AD
        IP Address . . . . . . . . : 192.168.0.2
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . : 192.168.0.254
        Primary WINS Server. . . . : 192.168.0.2
        Secondary WINS Server. . . : 192.168.0.1
        Dns Servers. . . . . . . . : 84.52.107.107
                                     195.177.123.1


        AutoConfiguration results. . . . . . : Passed

        Default gateway test . . . : Passed

        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.

        WINS service test. . . . . : Passed

    Adapter : Local Area Connection 1

        Netcard queries test . . . : Passed

        Host Name. . . . . . . . . : LKI-AD
        IP Address . . . . . . . . : 192.168.0.1
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . : 192.168.0.254
        Dns Servers. . . . . . . . : 84.52.107.107
                                     195.177.123.1


        AutoConfiguration results. . . . . . : Passed

        Default gateway test . . . : Passed

        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.
            No remote names have been found.

        WINS service test. . . . . : Skipped
            There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{BA23193B-2458-4349-B01E-A2973CDBA587}
        NetBT_Tcpip_{636D8FA5-3959-41D0-BD50-F786C3D20CA7}
    2 NetBt transports currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Failed
          [WARNING] Cannot find a primary authoritative DNS server for the name
            'LKI-AD.lenkor.local.'. [RCODE_SERVER_FAILURE]
            The name 'LKI-AD.lenkor.local.' may not be registered in DNS.
          [WARNING] Cannot find a primary authoritative DNS server for the name
            'LKI-AD.lenkor.local.'. [RCODE_SERVER_FAILURE]
            The name 'LKI-AD.lenkor.local.' may not be registered in DNS.
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.pdc._msdcs.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.gc._msdcs.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.ca4178f8-5653-4ab6-a5f7-d08c2dccae33.domains._msdcs.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry 6a4c9c2d-5c6b-4e1e-8ddb-13d699ff6b73._msdcs.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.dc._msdcs.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.dc._msdcs.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.Default-First-Site-Name._sites.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _gc._tcp.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _gc._tcp.Default-First-Site-Name._sites.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._udp.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kpasswd._tcp.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kpasswd._udp.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.DomainDnsZones.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.ForestDnsZones.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry gc._msdcs.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry DomainDnsZones.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry ForestDnsZones.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry gc._msdcs.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry DomainDnsZones.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry ForestDnsZones.lenkor.local. re-registeration on DNS server '84.52.107.107' failed. 
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Fix Failed: netdiag failed to re-register missing DNS entries for this DC on DNS server '84.52.107.107'.
    [FATAL] No DNS servers have the DNS records for this DC registered.


Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{BA23193B-2458-4349-B01E-A2973CDBA587}
        NetBT_Tcpip_{636D8FA5-3959-41D0-BD50-F786C3D20CA7}
    The redir is bound to 2 NetBt transports.

    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{636D8FA5-3959-41D0-BD50-F786C3D20CA7}
        NetBT_Tcpip_{BA23193B-2458-4349-B01E-A2973CDBA587}
    The browser is bound to 2 NetBt transports.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
    No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

    Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

Как я понимаю, проблема в том, что у меня на двух сетевухах на сервере в DNS прописаны IP-провайдера? А реально туда надо прописать нечто другое?

Telepuzik · Отправлено: **17:10, 26-11-2009** | #15

Цитата dodger:

Как я понимаю, проблема в том, что у меня на двух сетевухах на сервере в DNS прописаны IP-провайдера? »

Да, как уже писал отключите вторую сетевуху, а на первой пропишите в качестве DNS сервера 127.0.0.1.

dodger · Отправлено: **09:08, 27-11-2009** | #16

Я вчера решил поэкспериментировать и сделал следующее.
На первой сетевухе прописал в ДНС1: сетевая 2, ДНС2:сетевая1, во второй - ДНС1: сетевая 1, ДНС2: сетевая 2 - и netdiag смог все пофиксить и выдал только одну ошибку, над которой и буду сейчас корпеть.

Код:

DNS test . . . . . . . . . . . . . : Failed
    [FIX] re-register DC DNS entry 'lenkor.local.' on DNS server '192.168.0.1' succeed.
    [FIX] re-register DC DNS entry 'gc._msdcs.lenkor.local.' on DNS server '192.168.0.1' succeed.
    [FIX] re-register DC DNS entry 'DomainDnsZones.lenkor.local.' on DNS server '192.168.0.1' succeed.
    [FIX] re-register DC DNS entry 'ForestDnsZones.lenkor.local.' on DNS server '192.168.0.1' succeed.
    FIX PASS - netdiag re-registered missing DNS entries for this DC successfully on DNS server '192.168.0.1'.
    [FATAL] No DNS servers have the DNS records for this DC registered.

Хочется, чтобы все это хозяйство заработало именно на двух сетевых картах.

Ivan Bardeen · Отправлено: **09:10, 27-11-2009** | #17

Цитата dodger:

Хочется, чтобы все это хозяйство заработало именно на двух сетевых картах. »

А зачем, если не секрет?

dodger · Отправлено: **09:22, 27-11-2009** | #18

Такс, запустил netdiag /debug. Все хорошо, за исключением двух позиций:

Код:

********** * ********** * ********** * ********** * ********** *
* CHECK NAME gc._msdcs.lenkor.local. on DNS server 192.168.0.2
********** * ********** * ********** * ********** * ********** *

The Record is different on DNS server '192.168.0.2'.
DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.
Your DC entry is one of them on DNS server '192.168.0.2', no need to re-register.

+------------------------------------------------------+
The record on your DC is: 
DNS NAME = gc._msdcs.lenkor.local.
DNS DATA = 
            A  192.168.0.1

The record on DNS server 192.168.0.2 is:
DNS NAME = gc._msdcs.lenkor.local
DNS DATA = 
            A  192.168.0.1
            A  192.168.0.2
+------------------------------------------------------+

На 192.168.0.1 пишет тоже самое. Как это победить?

И второе:

Код:

NetBT name test. . . . . . . . . . : Passed
   No NetBT scope defined
    [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.

Telepuzik · Отправлено: **09:22, 27-11-2009** | #19

Цитата dodger:

Хочется, чтобы все это хозяйство заработало именно на двух сетевых картах. »

Использование двух сетевых с ip адресами из одной подсети - пользы не даст, а вот проблемы может создать.

dodger · Отправлено: **09:24, 27-11-2009** | #20

Цитата:

Использование двух сетевых с ip адресами из одной подсети - пользы не даст, а вот проблемы может создать.

Я вроде как читал, что таким образом разделяются локалка и внешняя сети. Повышается защищенность. Или это не так?