[ActiveDir] A replication mess

[Andrew Wagg]

I am seeing some interesting AD replication related errors on two of my servers.   I recently added a DC to this domain and AD replication seems to be working reasonable well (I can make changes to users in the new dc, and they show up in the other two older ones.)  However I am seeing the following two errors repeating on the original two DCs, ********************************************************************************************** -------------------------------------------------- Event Type:     Warning Event Source:     NTDS Replication Event Category:     Replication Event ID:     1061 Date:          14/11/2003 Time:          11:37:20 AM User:          NT AUTHORITY\ANONYMOUS LOGON Computer:     EUROPA Description: Internal error: The directory replication agent (DRA) call returned error 5.   ------------------------------------------- Event Type:     Warning Event Source:     NTDS KCC Event Category:     Knowledge Consistency Checker Event ID:     1265 Date:          14/11/2003 Time:          10:52:20 AM User:          N/A Computer:     EUROPA Description: The attempt to establish a replication link with parameters    Partition: CN=Schema,CN=Configuration,DC=ourdomain,DC=com  Source DSA DN: CN=NTDS Settings,CN=CALLISTO,CN=Servers,CN=Burloak,CN=Sites,CN=Con figuration,DC=ourdomain,DC=com  Source DSA Address: 5673215d-87e2-4c3b-8204- 4ffeafe0c2f2._msdcs.ourdomain.com  Inter-site Transport (if any):    failed with the following status:    Access is denied.    The record data is the status code.  This operation will be retried. Data: 0000: 05 00 00 00               ....      ************************************************************************   I have also noticed in Replmon that the original DC’s only show connections to each other in the main screen.   However when I open the properties for the old servers the inbound connections list the new server (Callisto) as Auto Created, but the reasons pane shows the following info:   ************************************************************************ ----------------------------------- Connection Name: cb927d75-622b-4f5f-8132-19833a8515ac        Replication Partner: Burloak\COCKATRICE      Administrator Generated?: AUTO        Reasons for this connection:      ----------------------------      Directory Partition (CN=Configuration,DC=ourdomain,DC=com)           Replicated because the replication partner is a ring neighbor.      Directory Partition (DC=ourdomain,DC=com)           Replicated because the replication partner is a ring neighbor.      Directory Partition (CN=Schema,CN=Configuration,DC=ourdomain,DC=com)           Replicated because the replication partner is a ring neighbor.   Connection Name: e3e7f12a-17e2-4f39-8f87-8fc2e297d47d        Replication Partner: Burloak\CALLISTO      Administrator Generated?: AUTO        Reasons for this connection:      ----------------------------      Directory Partition (CN=Configuration,DC=ourdomain,DC=com)           This replication connection is created because another replication partner has surpassed the allowed failure limit.      Directory Partition (DC=ourdomain,DC=com)           This replication connection is created because another replication partner has surpassed the allowed failure limit.      Directory Partition (CN=Schema,CN=Configuration,DC=ourdomain,DC=com)           This replication connection is created because another replication partner has surpassed the allowed failure limit.     ************************************************************************   I have been trying to find out what might be wrong, or how to troubleshoot this, and have not had much luck.   I have already looked at and discarded the information in these Q-Docs: http://support.microsoft.com/default.aspx?scid=KB;en-us;328701& http://support.microsoft.com/default.aspx?scid=kb;en-us;306091&Product=win2000 http://support.microsoft.com/default.aspx?scid=kb;en-us;329860   Any ideas would be greatly appreciated.   Thanks   Andrew   LEGAL NOTICE This message is intended for the addressee(s) only. It may contain confidential or privileged information. No rights to privilege have been waived. Any copying, retransmittal, taking of action in reliance on, or other use of the information in this communication by persons other than the addressee(s) is prohibited. If you have received this message in error, please reply to the sender by e-mail and delete or destroy all copies of this message.