[решено] проблема с репликацией после востановления DC из образа

[nigra]

Добрый день... сегодня совершил ужасную глупость. Востановил один конетролер домена SA01(из двух. второй f-server) с помощью акроникса. В итоге получаю ошибки при dcdiag на основном.... репликация не происходит(пишет что сервер отвергает запросы на репликацию). Что посоветуете?



Domain Controller Diagnosis



Performing initial setup:

Done gathering initial info.



Doing initial required tests



Testing server: Default-First-Site-Name\SA01

Starting test: Connectivity

......................... SA01 passed test Connectivity



Doing primary tests



Testing server: Default-First-Site-Name\SA01

Starting test: Replications

[Replications Check,SA01] Inbound replication is disabled.

To correct, run "repadmin /options SA01 -DISABLE_INBOUND_REPL"

[Replications Check,SA01] Outbound replication is disabled.

To correct, run "repadmin /options SA01 -DISABLE_OUTBOUND_REPL"

......................... SA01 failed test Replications

Starting test: NCSecDesc

......................... SA01 passed test NCSecDesc

Starting test: NetLogons

......................... SA01 passed test NetLogons

Starting test: Advertising

Warning: DsGetDcName returned information for \\F-SERVER.samauto.local, when we were trying to reach SA01.

Server is not responding or is not considered suitable.

......................... SA01 failed test Advertising

Starting test: KnowsOfRoleHolders

......................... SA01 passed test KnowsOfRoleHolders

Starting test: RidManager

......................... SA01 passed test RidManager

Starting test: MachineAccount

......................... SA01 passed test MachineAccount

Starting test: Services

NETLOGON Service is paused on [SA01]

......................... SA01 failed test Services

Starting test: ObjectsReplicated

......................... SA01 passed test ObjectsReplicated

Starting test: frssysvol

......................... SA01 passed test frssysvol

Starting test: frsevent

......................... SA01 passed test frsevent

Starting test: kccevent

An Error Event occured. EventID: 0xC025082F

Time Generated: 12/02/2009 23:14:34

(Event String could not be retrieved)

An Warning Event occured. EventID: 0x80000459

Time Generated: 12/02/2009 23:14:34

(Event String could not be retrieved)

An Warning Event occured. EventID: 0x8000045B

Time Generated: 12/02/2009 23:14:34

(Event String could not be retrieved)

An Error Event occured. EventID: 0xC00006A3

Time Generated: 12/02/2009 23:14:34

(Event String could not be retrieved)

......................... SA01 failed test kccevent

Starting test: systemlog

An Error Event occured. EventID: 0x00000456

Time Generated: 12/02/2009 22:29:12

(Event String could not be retrieved)

An Error Event occured. EventID: 0x00000456

Time Generated: 12/02/2009 22:29:15

(Event String could not be retrieved)

An Error Event occured. EventID: 0x00000456

Time Generated: 12/02/2009 22:56:39

(Event String could not be retrieved)

An Error Event occured. EventID: 0x00000456

Time Generated: 12/02/2009 22:56:40

(Event String could not be retrieved)

An Error Event occured. EventID: 0x00000455

Time Generated: 12/02/2009 22:56:48

(Event String could not be retrieved)

......................... SA01 failed test systemlog

Starting test: VerifyReferences

......................... SA01 passed test VerifyReferences



Running partition tests on : ForestDnsZones

Starting test: CrossRefValidation

......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom

......................... ForestDnsZones passed test CheckSDRefDom



Running partition tests on : DomainDnsZones

Starting test: CrossRefValidation

......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom

......................... DomainDnsZones passed test CheckSDRefDom



Running partition tests on : Schema

Starting test: CrossRefValidation

......................... Schema passed test CrossRefValidation

Starting test: CheckSDRefDom

......................... Schema passed test CheckSDRefDom



Running partition tests on : Configuration

Starting test: CrossRefValidation

......................... Configuration passed test CrossRefValidation

Starting test: CheckSDRefDom

......................... Configuration passed test CheckSDRefDom



Running partition tests on : samauto

Starting test: CrossRefValidation

......................... samauto passed test CrossRefValidation

Starting test: CheckSDRefDom

......................... samauto passed test CheckSDRefDom



Running enterprise tests on : samauto.local

Starting test: Intersite

......................... samauto.local passed test Intersite

Starting test: FsmoCheck

Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355

A Global Catalog Server could not be located - All GC's are down.

......................... samauto.local failed test FsmoCheck





на втором (f-server)



Domain Controller Diagnosis



Performing initial setup:

Done gathering initial info.



Doing initial required tests



Testing server: Default-First-Site-Name\F-SERVER

Starting test: Connectivity

......................... F-SERVER passed test Connectivity



Doing primary tests



Testing server: Default-First-Site-Name\F-SERVER

Starting test: Replications

[Replications Check,F-SERVER] A recent replication attempt failed:

From SA01 to F-SERVER

Naming Context: DC=ForestDnsZones,DC=samauto,DC=local

The replication generated an error (8456):

?б室*л© бҐаўҐа ў **бв®пйЁ© ¬®¬Ґ*⠮⢥аЈ*Ґв §*Їа®бл ** ९«ЁЄ*жЁо.

The failure occurred at 2009-12-02 22:59:44.

The last success occurred at 2009-12-02 21:59:44.

1 failures have occurred since the last success.

Replication has been explicitly disabled through the server options.

[Replications Check,F-SERVER] A recent replication attempt failed:

From SA01 to F-SERVER

Naming Context: DC=DomainDnsZones,DC=samauto,DC=local

The replication generated an error (8456):

?б室*л© бҐаўҐа ў **бв®пйЁ© ¬®¬Ґ*⠮⢥аЈ*Ґв §*Їа®бл ** ९«ЁЄ*жЁо.

The failure occurred at 2009-12-02 22:59:44.

The last success occurred at 2009-12-02 21:59:44.

4 failures have occurred since the last success.

Replication has been explicitly disabled through the server options.

[Replications Check,F-SERVER] A recent replication attempt failed:

From SA01 to F-SERVER

Naming Context: CN=Schema,CN=Configuration,DC=samauto,DC=local

The replication generated an error (8456):

?б室*л© бҐаўҐа ў **бв®пйЁ© ¬®¬Ґ*⠮⢥аЈ*Ґв §*Їа®бл ** ९«ЁЄ*жЁо.

The failure occurred at 2009-12-02 22:59:44.

The last success occurred at 2009-12-02 21:59:44.

1 failures have occurred since the last success.

Replication has been explicitly disabled through the server options.

[Replications Check,F-SERVER] A recent replication attempt failed:

From SA01 to F-SERVER

Naming Context: CN=Configuration,DC=samauto,DC=local

The replication generated an error (8456):

?б室*л© бҐаўҐа ў **бв®пйЁ© ¬®¬Ґ*⠮⢥аЈ*Ґв §*Їа®бл ** ९«ЁЄ*жЁо.

The failure occurred at 2009-12-02 23:14:49.

The last success occurred at 2009-12-02 21:59:44.

8 failures have occurred since the last success.

Replication has been explicitly disabled through the server options.

[Replications Check,F-SERVER] A recent replication attempt failed:

From SA01 to F-SERVER

Naming Context: DC=samauto,DC=local

The replication generated an error (8456):

?б室*л© бҐаўҐа ў **бв®пйЁ© ¬®¬Ґ*⠮⢥аЈ*Ґв §*Їа®бл ** ९«ЁЄ*жЁо.

The failure occurred at 2009-12-02 23:26:44.

The last success occurred at 2009-12-02 22:00:15.

37 failures have occurred since the last success.

Replication has been explicitly disabled through the server options.

......................... F-SERVER passed test Replications

Starting test: NCSecDesc

......................... F-SERVER passed test NCSecDesc

Starting test: NetLogons

......................... F-SERVER passed test NetLogons

Starting test: Advertising

......................... F-SERVER passed test Advertising

Starting test: KnowsOfRoleHolders

......................... F-SERVER passed test KnowsOfRoleHolders

Starting test: RidManager

......................... F-SERVER passed test RidManager

Starting test: MachineAccount

......................... F-SERVER passed test MachineAccount

Starting test: Services

......................... F-SERVER passed test Services

Starting test: ObjectsReplicated

......................... F-SERVER passed test ObjectsReplicated

Starting test: frssysvol

......................... F-SERVER passed test frssysvol

Starting test: frsevent

......................... F-SERVER passed test frsevent

Starting test: kccevent

......................... F-SERVER passed test kccevent

Starting test: systemlog

An Error Event occured. EventID: 0x00000456

Time Generated: 12/02/2009 22:35:48

(Event String could not be retrieved)

An Error Event occured. EventID: 0x00000456

Time Generated: 12/02/2009 22:35:51

(Event String could not be retrieved)

An Error Event occured. EventID: 0x00000456

Time Generated: 12/02/2009 22:36:38

(Event String could not be retrieved)

An Error Event occured. EventID: 0x00000456

Time Generated: 12/02/2009 22:36:41

(Event String could not be retrieved)

......................... F-SERVER failed test systemlog

Starting test: VerifyReferences

......................... F-SERVER passed test VerifyReferences



Running partition tests on : ForestDnsZones

Starting test: CrossRefValidation

......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom

......................... ForestDnsZones passed test CheckSDRefDom



Running partition tests on : DomainDnsZones

Starting test: CrossRefValidation

......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom

......................... DomainDnsZones passed test CheckSDRefDom



Running partition tests on : Schema

Starting test: CrossRefValidation

......................... Schema passed test CrossRefValidation

Starting test: CheckSDRefDom

......................... Schema passed test CheckSDRefDom



Running partition tests on : Configuration

Starting test: CrossRefValidation

......................... Configuration passed test CrossRefValidation

Starting test: CheckSDRefDom

......................... Configuration passed test CheckSDRefDom



Running partition tests on : samauto

Starting test: CrossRefValidation

......................... samauto passed test CrossRefValidation

Starting test: CheckSDRefDom

......................... samauto passed test CheckSDRefDom



Running enterprise tests on : samauto.local

Starting test: Intersite

......................... samauto.local passed test Intersite

Starting test: FsmoCheck



выручайте. сутки на работе голова не варит уже

[Dimas_83]

Цитата nigra:



Replications Check,SA01] Inbound replication is disabled.

To correct, run "repadmin /options SA01 -DISABLE_INBOUND_REPL"

[Replications Check,SA01] Outbound replication is disabled.

To correct, run "repadmin /options SA01 -DISABLE_OUTBOUND_REPL"

[решено] проблема с репликацией после востановления DC из образа

Всё же написано. Да и на форуме уже ху...миллиард раз писалось. Пользуйтесь поиском.



Решение: включите репликацию через repadmin /options

[nigra]

Цитата Dimas_83:



Решение: включите репликацию через repadmin /options

[решено] проблема с репликацией после востановления DC из образа

это я пробовал. все равно не работает. точнее работает но потом автоматически возвращает параметры на место после ошибки.



источник: NTDS Replication код: 2095

"...Поскольку удаленный контроллер домена считает, что он имеет более новую базу данных Active Directory чем локальный DC, удаленный DC не будет применять будущие изменения, исходящие от этого локального DC, к своей копии базы данных Active Directory или реплицировать их своим прямым и косвенным партнерам репликации.."



сейчас прошло немного времени и на контролере домена получил предупреждения:



источник: NTDS Replication код: 2092

"Этот сервер является владельцем следующей роли FSMO, но не считает назначение правильным. Для раздела, содержащего FSMO, этот сервер не выполнил успешной репликации ни с одним из партнеров репликации с момента перезапуска этого сервера. Ошибки репликации мешают выполнению проверки для этой роли....."

[Dimas_83]

Включите репликацию repadmin/options

Выключите Strict Replication Consistency в реесте HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters

Принудительно запустите репикацию или подождите.



Ошибки выложите сюда, будем дальше копать.

[Dimas_83]

Произошел откат USN... посоветуйте что можно сделать в этом случае. есть образы акроникса на оба сервера... но нету одновременного(



ЗЫ восстановить можно любую версию АД.( то есть не критично что на f-server она в более актуальном состоянии)

[monkkey]

dcpromo /forceremoval на сбойном контроллере домена. Потом поднимете заново, всё восстановится. При необходимости ntdsutil - захват ролей и очистка сведений о старом DC в AD.

[nigra]

monkkey

спасибо. так и сделали. напоследок спрошу, как избежать такое проблемы? если бы оба образа(акорниксом) были одновременными +- 10 минут, то такой проблемы бы не возникло? или необходимо пользоваться другими средствами для создание резервной копии АД... просто там еще сервер терминалов и файл сервер.

[monkkey]

Поднимите третий DC в виртуалке, например, если есть возможность. Не вижу особого смысла в бэкапе AD. Если только делать его каждые пару часов... Это сильно увеличит нагрузку. Вообще-то минимум два DC и нужны для таких случаев.