Error de replicación en AD

Hola a todos.
Tengo una instalación con la siguiente configuración:
"SERV-ISCALA": Servidor W2000 sp4 , PDC, servidor DNS principal de todas las
máquinas.
"SERVIDOR":Servidor W2000 sp4, DC, servidor DNS secundario de todas las
máquinas.
"SERV-SQL": Servidor W2003 x64 sp1, DC
"SERV-EXCHANGE":Servidor W2003 sp1, servidor de Exchange 2003

Y el problema ... :
El servidor "SERV-EXCHANGE" no se replica con el resto de servidores. He
pasado las herramientas DCDIAG, y NETDIAG con los siguientes resultados:

DCDIAG:

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\SERV-EXCHANGE
Starting test: Connectivity
The host c74709f9-bd98-4555-92ff-4b06319f4aa3._msdcs.midomio.local
could
not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(c74709f9-bd98-4555-92ff-4b06319f4aa3._msdcs.midominio.local)
couldn't be
resolved, the server name (serv-exchange) resolved to the IP address
(172.16.2.5) and was pingable. Check that the IP address is
registered correctly with the DNS server.
. SERV-EXCHANGE failed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\SERV-EXCHANGE
Skipping all tests, because server SERV-EXCHANGE is
not responding to directory service requests

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test CheckSDRefDom

Running partition tests on : midominio
Starting test: CrossRefValidation
. frinsa passed test CrossRefValidation
Starting test: CheckSDRefDom
. frinsa passed test CheckSDRefDom

Running enterprise tests on : midominio.local
Starting test: Intersite
. midominio.local passed test Intersite
Starting test: FsmoCheck
. midominio.local passed test FsmoCheck

y NetDiag:

Computer Name: SERV-EXCHANGE
DNS Host Name: serv-exchange
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel
List of installed hotfixes :
KB909520
KB921503
KB925398_WMP64
KB925876
KB925902
KB926122
KB927891
KB930178
KB931784
KB931836
KB932168
KB933566
KB935839
KB935840
KB935966
KB936021
KB936357
KB936782
KB937143
KB938127
Q147222


Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card 'Minipuerto WAN (PPTP)' may not be working
because it
has not received any packets.
[WARNING] The net card 'Minipuerto WAN (PPPOE)' may not be working
because i
t has not received any packets.
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working because
it h
as not received any packets.
[WARNING] The net card 'Minipuerto WAN (Monitor de red)' may not be
working
because it has not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]



Per interface results:

Adapter : Conexi¾n de ßrea local 3

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : serv-exchange
IP Address . . . . . . . . : 172.16.2.5
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 172.16.1.254
Dns Servers. . . . . . . . : 172.16.1.1
172.16.1.249


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'172.16.1.1'
and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server
'172.16.1.249
' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'MIDOMINIO' is to
'\\serv-iscala.midominio.local'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Failed
[WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
missing o
n DC 'serv-exchange'.
[WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
missing o
n DC 'serv-iscala.frinsa.local'.
[WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
missing o
n DC 'servidor.frinsa.local'.
[WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
missing o
n DC 'serv-sql.frinsa.local'.
[FATAL] The default SPNs are not properly registered on any DCs.


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

El caso es que el problema parece radicar en que la entrada CNAME del
servidor DNS Principal de la rama _msdcs resuelve contra "serv-exchange.", y
no contra "serv-exchange.midominio.local"; por otro lado, el registro NS de
la carpeta superior del servidor DNS resueve a
"serv-exchange.midominio.local".

Además, el "nombre completo" del servidor en las propiedades de red de "mi
PC" consta como "serv-exchange", y no como "serv-exchange.midomino.local",
sin embargo, el nombre del dominio sí que aparace como "midominio.local"

Así las cosas, parece lógico que no funcione la replicación.
Para intentar solucionarlo, exporté los datos del esquema de AD con ldifde,
y los comparé con los de otro controlador de dominio ("SERV-SQL", también
W2003).
El resultado es que había dos entradas cuyo valor "debería" ser el nombre
completo, y tenían sólo el nombre de máquina. Las entradas son:
dn: CN=SERV-EXCHANGE,OU=Domain Controllers,DC=midominio,DC=local
dnsHostName: serv-exchange (lo cambié con ADSIEdit por
"serv-exchange.midominio.local)
servidePrincipalName: DNS/serv-exchange (lo cambié por
"DNS/serv-exchange.midominio.local")
Apliqué los cambios, y repetí la operación en el controlador de dominio.

Sin embargo, estos cambios no hicieron absolutamente nada, y si reinicio el
servicio "net logon", se regenena la entrada CNAME en el servidor DNS
resolviendo contra "serv-exchange." Además, pasado un tiempo, los atributos
cambiados vuelven a tener los valores originales en el servidor
"serv-exchange", pero conserva los cambios en el PDC.

No sé si estoy haciendo los cambios correctos, ó si esta no es la forma de
intentar solucionar el problema, así que agradezco cualquier indicación que
me pueda decir por dónde tirar.

Nota: No estoy seguro, pero puede ser que todo esto surgiera a partir de que
en un momento dado, el servidor se quedó sin espacio en C: . Una vez liberado
espacio, no funcionaba el protocolo tcp/ip, y no me quedó más remedio que
reinstalarlo, guiado por un KB de Microsoft. La red volvió a funcionar en el
servidor, pero sigo con este problema.

Otra nota: No puedo degradar el servidor, puesto que tiene instalado un
servidor de Exchange 2003 (el único de la organización). Aunque si alguien
sabe cómo, sería mi mejor opción (esta pregunta también la he posteado en el
foro de exchange).

Espero haberme explicado con claridad.
Gracias a todos por vuestra colaboración.

Hola a todos.
Tengo una instalación con la siguiente configuración:
"SERV-ISCALA": Servidor W2000 sp4 , PDC, servidor DNS principal de todas las
máquinas.
"SERVIDOR":Servidor W2000 sp4, DC, servidor DNS secundario de todas las
máquinas.
"SERV-SQL": Servidor W2003 x64 sp1, DC
"SERV-EXCHANGE":Servidor W2003 sp1, servidor de Exchange 2003

Y el problema ... :
El servidor "SERV-EXCHANGE" no se replica con el resto de servidores. He
pasado las herramientas DCDIAG, y NETDIAG con los siguientes resultados:

DCDIAG:

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\SERV-EXCHANGE
Starting test: Connectivity
The host c74709f9-bd98-4555-92ff-4b06319f4aa3._msdcs.midomio.local
could
not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(c74709f9-bd98-4555-92ff-4b06319f4aa3._msdcs.midominio.local)
couldn't be
resolved, the server name (serv-exchange) resolved to the IP address
(172.16.2.5) and was pingable. Check that the IP address is
registered correctly with the DNS server.
. SERV-EXCHANGE failed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\SERV-EXCHANGE
Skipping all tests, because server SERV-EXCHANGE is
not responding to directory service requests

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test CheckSDRefDom

Running partition tests on : midominio
Starting test: CrossRefValidation
. frinsa passed test CrossRefValidation
Starting test: CheckSDRefDom
. frinsa passed test CheckSDRefDom

Running enterprise tests on : midominio.local
Starting test: Intersite
. midominio.local passed test Intersite
Starting test: FsmoCheck
. midominio.local passed test FsmoCheck

y NetDiag:

Computer Name: SERV-EXCHANGE
DNS Host Name: serv-exchange
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel
List of installed hotfixes :
KB909520
KB921503
KB925398_WMP64
KB925876
KB925902
KB926122
KB927891
KB930178
KB931784
KB931836
KB932168
KB933566
KB935839
KB935840
KB935966
KB936021
KB936357
KB936782
KB937143
KB938127
Q147222


Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card 'Minipuerto WAN (PPTP)' may not be working
because it
has not received any packets.
[WARNING] The net card 'Minipuerto WAN (PPPOE)' may not be working
because i
t has not received any packets.
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working because
it h
as not received any packets.
[WARNING] The net card 'Minipuerto WAN (Monitor de red)' may not be
working
because it has not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]



Per interface results:

Adapter : Conexi¾n de ßrea local 3

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : serv-exchange
IP Address . . . . . . . . : 172.16.2.5
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 172.16.1.254
Dns Servers. . . . . . . . : 172.16.1.1
172.16.1.249


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'172.16.1.1'
and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server
'172.16.1.249
' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'MIDOMINIO' is to
'\\serv-iscala.midominio.local'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Failed
[WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
missing o
n DC 'serv-exchange'.
[WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
missing o
n DC 'serv-iscala.frinsa.local'.
[WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
missing o
n DC 'servidor.frinsa.local'.
[WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
missing o
n DC 'serv-sql.frinsa.local'.
[FATAL] The default SPNs are not properly registered on any DCs.


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

El caso es que el problema parece radicar en que la entrada CNAME del
servidor DNS Principal de la rama _msdcs resuelve contra "serv-exchange.", y
no contra "serv-exchange.midominio.local"; por otro lado, el registro NS de
la carpeta superior del servidor DNS resueve a
"serv-exchange.midominio.local".

Además, el "nombre completo" del servidor en las propiedades de red de "mi
PC" consta como "serv-exchange", y no como "serv-exchange.midomino.local",
sin embargo, el nombre del dominio sí que aparace como "midominio.local"

Así las cosas, parece lógico que no funcione la replicación.
Para intentar solucionarlo, exporté los datos del esquema de AD con ldifde,
y los comparé con los de otro controlador de dominio ("SERV-SQL", también
W2003).
El resultado es que había dos entradas cuyo valor "debería" ser el nombre
completo, y tenían sólo el nombre de máquina. Las entradas son:
dn: CN=SERV-EXCHANGE,OU=Domain Controllers,DC=midominio,DC=local
dnsHostName: serv-exchange (lo cambié con ADSIEdit por
"serv-exchange.midominio.local)
servidePrincipalName: DNS/serv-exchange (lo cambié por
"DNS/serv-exchange.midominio.local")
Apliqué los cambios, y repetí la operación en el controlador de dominio.

Sin embargo, estos cambios no hicieron absolutamente nada, y si reinicio el
servicio "net logon", se regenena la entrada CNAME en el servidor DNS
resolviendo contra "serv-exchange." Además, pasado un tiempo, los atributos
cambiados vuelven a tener los valores originales en el servidor
"serv-exchange", pero conserva los cambios en el PDC.

No sé si estoy haciendo los cambios correctos, ó si esta no es la forma de
intentar solucionar el problema, así que agradezco cualquier indicación que
me pueda decir por dónde tirar.

Nota: No estoy seguro, pero puede ser que todo esto surgiera a partir de que
en un momento dado, el servidor se quedó sin espacio en C: . Una vez liberado
espacio, no funcionaba el protocolo tcp/ip, y no me quedó más remedio que
reinstalarlo, guiado por un KB de Microsoft. La red volvió a funcionar en el
servidor, pero sigo con este problema.

Otra nota: No puedo degradar el servidor, puesto que tiene instalado un
servidor de Exchange 2003 (el único de la organización). Aunque si alguien
sabe cómo, sería mi mejor opción (esta pregunta también la he posteado en el
foro de exchange).

Espero haberme explicado con claridad.
Gracias a todos por vuestra colaboración.

Porqué el Exchange es DC? Está totalmente desaconsejado que lo sea...


Saludos,

Marc
MVP Windows Server System - Directory Services
MCSA/MCSE Windows Server 2003
Citrix CCA PS 4.0
Oracle9i Certified Associate (OCA)

Este mensaje se proporciona "como está" sin garantías de ninguna clase, y no otorga ningún derecho.

This posting is provided "AS IS" with no warranties, and confers no rights. You assume all risk for your use.

"Manuel Torres" escribió en el mensaje news:
> Hola a todos.
> Tengo una instalación con la siguiente configuración:
> "SERV-ISCALA": Servidor W2000 sp4 , PDC, servidor DNS principal de todas las
> máquinas.
> "SERVIDOR":Servidor W2000 sp4, DC, servidor DNS secundario de todas las
> máquinas.
> "SERV-SQL": Servidor W2003 x64 sp1, DC
> "SERV-EXCHANGE":Servidor W2003 sp1, servidor de Exchange 2003
>
> Y el problema ... :
> El servidor "SERV-EXCHANGE" no se replica con el resto de servidores. He
> pasado las herramientas DCDIAG, y NETDIAG con los siguientes resultados:
>
> DCDIAG:
>
> Domain Controller Diagnosis
>
> Performing initial setup:
> Done gathering initial info.
>
> Doing initial required tests
>
> Testing server: Nombre-predeterminado-primer-sitio\SERV-EXCHANGE
> Starting test: Connectivity
> The host c74709f9-bd98-4555-92ff-4b06319f4aa3._msdcs.midomio.local
> could
> not be resolved to an
> IP address. Check the DNS server, DHCP, server name, etc
> Although the Guid DNS name
> (c74709f9-bd98-4555-92ff-4b06319f4aa3._msdcs.midominio.local)
> couldn't be
> resolved, the server name (serv-exchange) resolved to the IP address
> (172.16.2.5) and was pingable. Check that the IP address is
> registered correctly with the DNS server.
> . SERV-EXCHANGE failed test Connectivity
>
> Doing primary tests
>
> Testing server: Nombre-predeterminado-primer-sitio\SERV-EXCHANGE
> Skipping all tests, because server SERV-EXCHANGE is
> not responding to directory service requests
>
> Running partition tests on : Schema
> Starting test: CrossRefValidation
> . Schema passed test CrossRefValidation
> Starting test: CheckSDRefDom
> . Schema passed test CheckSDRefDom
>
> Running partition tests on : Configuration
> Starting test: CrossRefValidation
> . Configuration passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> . Configuration passed test CheckSDRefDom
>
> Running partition tests on : midominio
> Starting test: CrossRefValidation
> . frinsa passed test CrossRefValidation
> Starting test: CheckSDRefDom
> . frinsa passed test CheckSDRefDom
>
> Running enterprise tests on : midominio.local
> Starting test: Intersite
> . midominio.local passed test Intersite
> Starting test: FsmoCheck
> . midominio.local passed test FsmoCheck
>
> y NetDiag:
>
> Computer Name: SERV-EXCHANGE
> DNS Host Name: serv-exchange
> System info : Microsoft Windows Server 2003 (Build 3790)
> Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel
> List of installed hotfixes :
> KB909520
> KB921503
> KB925398_WMP64
> KB925876
> KB925902
> KB926122
> KB927891
> KB930178
> KB931784
> KB931836
> KB932168
> KB933566
> KB935839
> KB935840
> KB935966
> KB936021
> KB936357
> KB936782
> KB937143
> KB938127
> Q147222
>
>
> Netcard queries test . . . . . . . : Passed
> GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
> [WARNING] The net card 'Minipuerto WAN (PPTP)' may not be working
> because it
> has not received any packets.
> [WARNING] The net card 'Minipuerto WAN (PPPOE)' may not be working
> because i
> t has not received any packets.
> [WARNING] The net card 'Minipuerto WAN (IP)' may not be working because
> it h
> as not received any packets.
> [WARNING] The net card 'Minipuerto WAN (Monitor de red)' may not be
> working
> because it has not received any packets.
> GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
>
>
>
> Per interface results:
>
> Adapter : Conexi¾n de ßrea local 3
>
> Netcard queries test . . . : Passed
>
> Host Name. . . . . . . . . : serv-exchange
> IP Address . . . . . . . . : 172.16.2.5
> Subnet Mask. . . . . . . . : 255.255.0.0
> Default Gateway. . . . . . : 172.16.1.254
> Dns Servers. . . . . . . . : 172.16.1.1
> 172.16.1.249
>
>
> AutoConfiguration results. . . . . . : Passed
>
> Default gateway test . . . : Passed
>
> NetBT name test. . . . . . : Passed
> [WARNING] At least one of the <00> 'WorkStation Service', <03>
> 'Messenge
> r Service', <20> 'WINS' names is missing.
>
> WINS service test. . . . . : Skipped
> There are no WINS servers configured for this interface.
>
>
> Global results:
>
>
> Domain membership test . . . . . . : Passed
>
>
> NetBT transports test. . . . . . . : Passed
> List of NetBt transports currently configured:
> NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
> 1 NetBt transport currently configured.
>
>
> Autonet address test . . . . . . . : Passed
>
>
> IP loopback ping test. . . . . . . : Passed
>
>
> Default gateway test . . . . . . . : Passed
>
>
> NetBT name test. . . . . . . . . . : Passed
> [WARNING] You don't have a single interface with the <00> 'WorkStation
> Servi
> ce', <03> 'Messenger Service', <20> 'WINS' names defined.
>
>
> Winsock test . . . . . . . . . . . : Passed
>
>
> DNS test . . . . . . . . . . . . . : Passed
> PASS - All the DNS entries for DC are registered on DNS server
> '172.16.1.1'
> and other DCs also have some of the names registered.
> PASS - All the DNS entries for DC are registered on DNS server
> '172.16.1.249
> ' and other DCs also have some of the names registered.
>
>
> Redir and Browser test . . . . . . : Passed
> List of NetBt transports currently bound to the Redir
> NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
> The redir is bound to 1 NetBt transport.
>
> List of NetBt transports currently bound to the browser
> NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
> The browser is bound to 1 NetBt transport.
>
>
> DC discovery test. . . . . . . . . : Passed
>
>
> DC list test . . . . . . . . . . . : Passed
>
>
> Trust relationship test. . . . . . : Passed
> Secure channel for domain 'MIDOMINIO' is to
> '\\serv-iscala.midominio.local'.
>
>
> Kerberos test. . . . . . . . . . . : Passed
>
>
> LDAP test. . . . . . . . . . . . . : Failed
> [WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
> missing o
> n DC 'serv-exchange'.
> [WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
> missing o
> n DC 'serv-iscala.frinsa.local'.
> [WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
> missing o
> n DC 'servidor.frinsa.local'.
> [WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
> missing o
> n DC 'serv-sql.frinsa.local'.
> [FATAL] The default SPNs are not properly registered on any DCs.
>
>
> Bindings test. . . . . . . . . . . : Passed
>
>
> WAN configuration test . . . . . . : Skipped
> No active remote access connections.
>
>
> Modem diagnostics test . . . . . . : Passed
>
> IP Security test . . . . . . . . . : Skipped
>
> Note: run "netsh ipsec dynamic show /?" for more detailed information
>
>
> The command completed successfully
>
> El caso es que el problema parece radicar en que la entrada CNAME del
> servidor DNS Principal de la rama _msdcs resuelve contra "serv-exchange.", y
> no contra "serv-exchange.midominio.local"; por otro lado, el registro NS de
> la carpeta superior del servidor DNS resueve a
> "serv-exchange.midominio.local".
>
> Además, el "nombre completo" del servidor en las propiedades de red de "mi
> PC" consta como "serv-exchange", y no como "serv-exchange.midomino.local",
> sin embargo, el nombre del dominio sí que aparace como "midominio.local"
>
> Así las cosas, parece lógico que no funcione la replicación.
> Para intentar solucionarlo, exporté los datos del esquema de AD con ldifde,
> y los comparé con los de otro controlador de dominio ("SERV-SQL", también
> W2003).
> El resultado es que había dos entradas cuyo valor "debería" ser el nombre
> completo, y tenían sólo el nombre de máquina. Las entradas son:
> dn: CN=SERV-EXCHANGE,OU=Domain Controllers,DC=midominio,DC=local
> dnsHostName: serv-exchange (lo cambié con ADSIEdit por
> "serv-exchange.midominio.local)
> servidePrincipalName: DNS/serv-exchange (lo cambié por
> "DNS/serv-exchange.midominio.local")
> Apliqué los cambios, y repetí la operación en el controlador de dominio.
>
> Sin embargo, estos cambios no hicieron absolutamente nada, y si reinicio el
> servicio "net logon", se regenena la entrada CNAME en el servidor DNS
> resolviendo contra "serv-exchange." Además, pasado un tiempo, los atributos
> cambiados vuelven a tener los valores originales en el servidor
> "serv-exchange", pero conserva los cambios en el PDC.
>
> No sé si estoy haciendo los cambios correctos, ó si esta no es la forma de
> intentar solucionar el problema, así que agradezco cualquier indicación que
> me pueda decir por dónde tirar.
>
> Nota: No estoy seguro, pero puede ser que todo esto surgiera a partir de que
> en un momento dado, el servidor se quedó sin espacio en C: . Una vez liberado
> espacio, no funcionaba el protocolo tcp/ip, y no me quedó más remedio que
> reinstalarlo, guiado por un KB de Microsoft. La red volvió a funcionar en el
> servidor, pero sigo con este problema.
>
> Otra nota: No puedo degradar el servidor, puesto que tiene instalado un
> servidor de Exchange 2003 (el único de la organización). Aunque si alguien
> sabe cómo, sería mi mejor opción (esta pregunta también la he posteado en el
> foro de exchange).
>
> Espero haberme explicado con claridad.
> Gracias a todos por vuestra colaboración.

Sé que está desaconsejado. Esto viene ya de bastante atrás y, simplemente,
fué un error de concepto.

"Marc [MVP Windows]" wrote:

Porqué el Exchange es DC? Está totalmente desaconsejado que lo sea...


Saludos,

Marc
MVP Windows Server System - Directory Services
MCSA/MCSE Windows Server 2003
Citrix CCA PS 4.0
Oracle9i Certified Associate (OCA)

Este mensaje se proporciona "como está" sin garantías de ninguna clase, y no otorga ningún derecho.

This posting is provided "AS IS" with no warranties, and confers no rights. You assume all risk for your use.

"Manuel Torres" escribió en el mensaje news:
> Hola a todos.
> Tengo una instalación con la siguiente configuración:
> "SERV-ISCALA": Servidor W2000 sp4 , PDC, servidor DNS principal de todas las
> máquinas.
> "SERVIDOR":Servidor W2000 sp4, DC, servidor DNS secundario de todas las
> máquinas.
> "SERV-SQL": Servidor W2003 x64 sp1, DC
> "SERV-EXCHANGE":Servidor W2003 sp1, servidor de Exchange 2003
>
> Y el problema ... :
> El servidor "SERV-EXCHANGE" no se replica con el resto de servidores. He
> pasado las herramientas DCDIAG, y NETDIAG con los siguientes resultados:
>
> DCDIAG:
>
> Domain Controller Diagnosis
>
> Performing initial setup:
> Done gathering initial info.
>
> Doing initial required tests
>
> Testing server: Nombre-predeterminado-primer-sitio\SERV-EXCHANGE
> Starting test: Connectivity
> The host c74709f9-bd98-4555-92ff-4b06319f4aa3._msdcs.midomio.local
> could
> not be resolved to an
> IP address. Check the DNS server, DHCP, server name, etc
> Although the Guid DNS name
> (c74709f9-bd98-4555-92ff-4b06319f4aa3._msdcs.midominio.local)
> couldn't be
> resolved, the server name (serv-exchange) resolved to the IP address
> (172.16.2.5) and was pingable. Check that the IP address is
> registered correctly with the DNS server.
> . SERV-EXCHANGE failed test Connectivity
>
> Doing primary tests
>
> Testing server: Nombre-predeterminado-primer-sitio\SERV-EXCHANGE
> Skipping all tests, because server SERV-EXCHANGE is
> not responding to directory service requests
>
> Running partition tests on : Schema
> Starting test: CrossRefValidation
> . Schema passed test CrossRefValidation
> Starting test: CheckSDRefDom
> . Schema passed test CheckSDRefDom
>
> Running partition tests on : Configuration
> Starting test: CrossRefValidation
> . Configuration passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> . Configuration passed test CheckSDRefDom
>
> Running partition tests on : midominio
> Starting test: CrossRefValidation
> . frinsa passed test CrossRefValidation
> Starting test: CheckSDRefDom
> . frinsa passed test CheckSDRefDom
>
> Running enterprise tests on : midominio.local
> Starting test: Intersite
> . midominio.local passed test Intersite
> Starting test: FsmoCheck
> . midominio.local passed test FsmoCheck
>
> y NetDiag:
>
> Computer Name: SERV-EXCHANGE
> DNS Host Name: serv-exchange
> System info : Microsoft Windows Server 2003 (Build 3790)
> Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel
> List of installed hotfixes :
> KB909520
> KB921503
> KB925398_WMP64
> KB925876
> KB925902
> KB926122
> KB927891
> KB930178
> KB931784
> KB931836
> KB932168
> KB933566
> KB935839
> KB935840
> KB935966
> KB936021
> KB936357
> KB936782
> KB937143
> KB938127
> Q147222
>
>
> Netcard queries test . . . . . . . : Passed
> GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
> [WARNING] The net card 'Minipuerto WAN (PPTP)' may not be working
> because it
> has not received any packets.
> [WARNING] The net card 'Minipuerto WAN (PPPOE)' may not be working
> because i
> t has not received any packets.
> [WARNING] The net card 'Minipuerto WAN (IP)' may not be working because
> it h
> as not received any packets.
> [WARNING] The net card 'Minipuerto WAN (Monitor de red)' may not be
> working
> because it has not received any packets.
> GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
>
>
>
> Per interface results:
>
> Adapter : Conexi¾n de ßrea local 3
>
> Netcard queries test . . . : Passed
>
> Host Name. . . . . . . . . : serv-exchange
> IP Address . . . . . . . . : 172.16.2.5
> Subnet Mask. . . . . . . . : 255.255.0.0
> Default Gateway. . . . . . : 172.16.1.254
> Dns Servers. . . . . . . . : 172.16.1.1
> 172.16.1.249
>
>
> AutoConfiguration results. . . . . . : Passed
>
> Default gateway test . . . : Passed
>
> NetBT name test. . . . . . : Passed
> [WARNING] At least one of the <00> 'WorkStation Service', <03>
> 'Messenge
> r Service', <20> 'WINS' names is missing.
>
> WINS service test. . . . . : Skipped
> There are no WINS servers configured for this interface.
>
>
> Global results:
>
>
> Domain membership test . . . . . . : Passed
>
>
> NetBT transports test. . . . . . . : Passed
> List of NetBt transports currently configured:
> NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
> 1 NetBt transport currently configured.
>
>
> Autonet address test . . . . . . . : Passed
>
>
> IP loopback ping test. . . . . . . : Passed
>
>
> Default gateway test . . . . . . . : Passed
>
>
> NetBT name test. . . . . . . . . . : Passed
> [WARNING] You don't have a single interface with the <00> 'WorkStation
> Servi
> ce', <03> 'Messenger Service', <20> 'WINS' names defined.
>
>
> Winsock test . . . . . . . . . . . : Passed
>
>
> DNS test . . . . . . . . . . . . . : Passed
> PASS - All the DNS entries for DC are registered on DNS server
> '172.16.1.1'
> and other DCs also have some of the names registered.
> PASS - All the DNS entries for DC are registered on DNS server
> '172.16.1.249
> ' and other DCs also have some of the names registered.
>
>
> Redir and Browser test . . . . . . : Passed
> List of NetBt transports currently bound to the Redir
> NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
> The redir is bound to 1 NetBt transport.
>
> List of NetBt transports currently bound to the browser
> NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
> The browser is bound to 1 NetBt transport.
>
>
> DC discovery test. . . . . . . . . : Passed
>
>
> DC list test . . . . . . . . . . . : Passed
>
>
> Trust relationship test. . . . . . : Passed
> Secure channel for domain 'MIDOMINIO' is to
> '\\serv-iscala.midominio.local'.
>
>
> Kerberos test. . . . . . . . . . . : Passed
>
>
> LDAP test. . . . . . . . . . . . . : Failed
> [WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
> missing o
> n DC 'serv-exchange'.
> [WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
> missing o
> n DC 'serv-iscala.frinsa.local'.
> [WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
> missing o
> n DC 'servidor.frinsa.local'.
> [WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
> missing o
> n DC 'serv-sql.frinsa.local'.
> [FATAL] The default SPNs are not properly registered on any DCs.
>
>
> Bindings test. . . . . . . . . . . : Passed
>
>
> WAN configuration test . . . . . . : Skipped
> No active remote access connections.
>
>
> Modem diagnostics test . . . . . . : Passed
>
> IP Security test . . . . . . . . . : Skipped
>
> Note: run "netsh ipsec dynamic show /?" for more detailed information
>
>
> The command completed successfully
>
> El caso es que el problema parece radicar en que la entrada CNAME del
> servidor DNS Principal de la rama _msdcs resuelve contra "serv-exchange.", y
> no contra "serv-exchange.midominio.local"; por otro lado, el registro NS de
> la carpeta superior del servidor DNS resueve a
> "serv-exchange.midominio.local".
>
> Además, el "nombre completo" del servidor en las propiedades de red de "mi
> PC" consta como "serv-exchange", y no como "serv-exchange.midomino.local",
> sin embargo, el nombre del dominio sí que aparace como "midominio.local"
>
> Así las cosas, parece lógico que no funcione la replicación.
> Para intentar solucionarlo, exporté los datos del esquema de AD con ldifde,
> y los comparé con los de otro controlador de dominio ("SERV-SQL", también
> W2003).
> El resultado es que había dos entradas cuyo valor "debería" ser el nombre
> completo, y tenían sólo el nombre de máquina. Las entradas son:
> dn: CN=SERV-EXCHANGE,OU=Domain Controllers,DC=midominio,DC=local
> dnsHostName: serv-exchange (lo cambié con ADSIEdit por
> "serv-exchange.midominio.local)
> servidePrincipalName: DNS/serv-exchange (lo cambié por
> "DNS/serv-exchange.midominio.local")
> Apliqué los cambios, y repetí la operación en el controlador de dominio.
>
> Sin embargo, estos cambios no hicieron absolutamente nada, y si reinicio el
> servicio "net logon", se regenena la entrada CNAME en el servidor DNS
> resolviendo contra "serv-exchange." Además, pasado un tiempo, los atributos
> cambiados vuelven a tener los valores originales en el servidor
> "serv-exchange", pero conserva los cambios en el PDC.
>
> No sé si estoy haciendo los cambios correctos, ó si esta no es la forma de
> intentar solucionar el problema, así que agradezco cualquier indicación que
> me pueda decir por dónde tirar.
>
> Nota: No estoy seguro, pero puede ser que todo esto surgiera a partir de que
> en un momento dado, el servidor se quedó sin espacio en C: . Una vez liberado
> espacio, no funcionaba el protocolo tcp/ip, y no me quedó más remedio que
> reinstalarlo, guiado por un KB de Microsoft. La red volvió a funcionar en el
> servidor, pero sigo con este problema.
>
> Otra nota: No puedo degradar el servidor, puesto que tiene instalado un
> servidor de Exchange 2003 (el único de la organización). Aunque si alguien
> sabe cómo, sería mi mejor opción (esta pregunta también la he posteado en el
> foro de exchange).
>
> Espero haberme explicado con claridad.
> Gracias a todos por vuestra colaboración.

Instala el servicio DNS en el Exchange, y que vaya integrado en el AD.

Luego, pasa de nuevo un netdiag y un dcdiag


Saludos,

Marc
MVP Windows Server System - Directory Services
MCSA/MCSE Windows Server 2003
Citrix CCA PS 4.0
Oracle9i Certified Associate (OCA)

Este mensaje se proporciona "como está" sin garantías de ninguna clase, y no otorga ningún derecho.

This posting is provided "AS IS" with no warranties, and confers no rights. You assume all risk for your use.

"Manuel Torres" escribió en el mensaje news:
> Sé que está desaconsejado. Esto viene ya de bastante atrás y, simplemente,
> fué un error de concepto.
>
> "Marc [MVP Windows]" wrote:
>
>> Porqué el Exchange es DC? Está totalmente desaconsejado que lo sea...
>>
>>
>> Saludos,
>>
>> Marc
>> MVP Windows Server System - Directory Services
>> MCSA/MCSE Windows Server 2003
>> Citrix CCA PS 4.0
>> Oracle9i Certified Associate (OCA)
>>
>> Este mensaje se proporciona "como está" sin garantías de ninguna clase, y no otorga ningún derecho.
>>
>> This posting is provided "AS IS" with no warranties, and confers no rights. You assume all risk for your use.
>>
>> "Manuel Torres" escribió en el mensaje news:
>> > Hola a todos.
>> > Tengo una instalación con la siguiente configuración:
>> > "SERV-ISCALA": Servidor W2000 sp4 , PDC, servidor DNS principal de todas las
>> > máquinas.
>> > "SERVIDOR":Servidor W2000 sp4, DC, servidor DNS secundario de todas las
>> > máquinas.
>> > "SERV-SQL": Servidor W2003 x64 sp1, DC
>> > "SERV-EXCHANGE":Servidor W2003 sp1, servidor de Exchange 2003
>> >
>> > Y el problema ... :
>> > El servidor "SERV-EXCHANGE" no se replica con el resto de servidores. He
>> > pasado las herramientas DCDIAG, y NETDIAG con los siguientes resultados:
>> >
>> > DCDIAG:
>> >
>> > Domain Controller Diagnosis
>> >
>> > Performing initial setup:
>> > Done gathering initial info.
>> >
>> > Doing initial required tests
>> >
>> > Testing server: Nombre-predeterminado-primer-sitio\SERV-EXCHANGE
>> > Starting test: Connectivity
>> > The host c74709f9-bd98-4555-92ff-4b06319f4aa3._msdcs.midomio.local
>> > could
>> > not be resolved to an
>> > IP address. Check the DNS server, DHCP, server name, etc
>> > Although the Guid DNS name
>> > (c74709f9-bd98-4555-92ff-4b06319f4aa3._msdcs.midominio.local)
>> > couldn't be
>> > resolved, the server name (serv-exchange) resolved to the IP address
>> > (172.16.2.5) and was pingable. Check that the IP address is
>> > registered correctly with the DNS server.
>> > . SERV-EXCHANGE failed test Connectivity
>> >
>> > Doing primary tests
>> >
>> > Testing server: Nombre-predeterminado-primer-sitio\SERV-EXCHANGE
>> > Skipping all tests, because server SERV-EXCHANGE is
>> > not responding to directory service requests
>> >
>> > Running partition tests on : Schema
>> > Starting test: CrossRefValidation
>> > . Schema passed test CrossRefValidation
>> > Starting test: CheckSDRefDom
>> > . Schema passed test CheckSDRefDom
>> >
>> > Running partition tests on : Configuration
>> > Starting test: CrossRefValidation
>> > . Configuration passed test
>> > CrossRefValidation
>> > Starting test: CheckSDRefDom
>> > . Configuration passed test CheckSDRefDom
>> >
>> > Running partition tests on : midominio
>> > Starting test: CrossRefValidation
>> > . frinsa passed test CrossRefValidation
>> > Starting test: CheckSDRefDom
>> > . frinsa passed test CheckSDRefDom
>> >
>> > Running enterprise tests on : midominio.local
>> > Starting test: Intersite
>> > . midominio.local passed test Intersite
>> > Starting test: FsmoCheck
>> > . midominio.local passed test FsmoCheck
>> >
>> > y NetDiag:
>> >
>> > Computer Name: SERV-EXCHANGE
>> > DNS Host Name: serv-exchange
>> > System info : Microsoft Windows Server 2003 (Build 3790)
>> > Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel
>> > List of installed hotfixes :
>> > KB909520
>> > KB921503
>> > KB925398_WMP64
>> > KB925876
>> > KB925902
>> > KB926122
>> > KB927891
>> > KB930178
>> > KB931784
>> > KB931836
>> > KB932168
>> > KB933566
>> > KB935839
>> > KB935840
>> > KB935966
>> > KB936021
>> > KB936357
>> > KB936782
>> > KB937143
>> > KB938127
>> > Q147222
>> >
>> >
>> > Netcard queries test . . . . . . . : Passed
>> > GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
>> > [WARNING] The net card 'Minipuerto WAN (PPTP)' may not be working
>> > because it
>> > has not received any packets.
>> > [WARNING] The net card 'Minipuerto WAN (PPPOE)' may not be working
>> > because i
>> > t has not received any packets.
>> > [WARNING] The net card 'Minipuerto WAN (IP)' may not be working because
>> > it h
>> > as not received any packets.
>> > [WARNING] The net card 'Minipuerto WAN (Monitor de red)' may not be
>> > working
>> > because it has not received any packets.
>> > GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
>> >
>> >
>> >
>> > Per interface results:
>> >
>> > Adapter : Conexi¾n de ßrea local 3
>> >
>> > Netcard queries test . . . : Passed
>> >
>> > Host Name. . . . . . . . . : serv-exchange
>> > IP Address . . . . . . . . : 172.16.2.5
>> > Subnet Mask. . . . . . . . : 255.255.0.0
>> > Default Gateway. . . . . . : 172.16.1.254
>> > Dns Servers. . . . . . . . : 172.16.1.1
>> > 172.16.1.249
>> >
>> >
>> > AutoConfiguration results. . . . . . : Passed
>> >
>> > Default gateway test . . . : Passed
>> >
>> > NetBT name test. . . . . . : Passed
>> > [WARNING] At least one of the <00> 'WorkStation Service', <03>
>> > 'Messenge
>> > r Service', <20> 'WINS' names is missing.
>> >
>> > WINS service test. . . . . : Skipped
>> > There are no WINS servers configured for this interface.
>> >
>> >
>> > Global results:
>> >
>> >
>> > Domain membership test . . . . . . : Passed
>> >
>> >
>> > NetBT transports test. . . . . . . : Passed
>> > List of NetBt transports currently configured:
>> > NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
>> > 1 NetBt transport currently configured.
>> >
>> >
>> > Autonet address test . . . . . . . : Passed
>> >
>> >
>> > IP loopback ping test. . . . . . . : Passed
>> >
>> >
>> > Default gateway test . . . . . . . : Passed
>> >
>> >
>> > NetBT name test. . . . . . . . . . : Passed
>> > [WARNING] You don't have a single interface with the <00> 'WorkStation
>> > Servi
>> > ce', <03> 'Messenger Service', <20> 'WINS' names defined.
>> >
>> >
>> > Winsock test . . . . . . . . . . . : Passed
>> >
>> >
>> > DNS test . . . . . . . . . . . . . : Passed
>> > PASS - All the DNS entries for DC are registered on DNS server
>> > '172.16.1.1'
>> > and other DCs also have some of the names registered.
>> > PASS - All the DNS entries for DC are registered on DNS server
>> > '172.16.1.249
>> > ' and other DCs also have some of the names registered.
>> >
>> >
>> > Redir and Browser test . . . . . . : Passed
>> > List of NetBt transports currently bound to the Redir
>> > NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
>> > The redir is bound to 1 NetBt transport.
>> >
>> > List of NetBt transports currently bound to the browser
>> > NetBT_Tcpip_{19E31AAD-315D-4712-8CEE-2219A93587BC}
>> > The browser is bound to 1 NetBt transport.
>> >
>> >
>> > DC discovery test. . . . . . . . . : Passed
>> >
>> >
>> > DC list test . . . . . . . . . . . : Passed
>> >
>> >
>> > Trust relationship test. . . . . . : Passed
>> > Secure channel for domain 'MIDOMINIO' is to
>> > '\\serv-iscala.midominio.local'.
>> >
>> >
>> > Kerberos test. . . . . . . . . . . : Passed
>> >
>> >
>> > LDAP test. . . . . . . . . . . . . : Failed
>> > [WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
>> > missing o
>> > n DC 'serv-exchange'.
>> > [WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
>> > missing o
>> > n DC 'serv-iscala.frinsa.local'.
>> > [WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
>> > missing o
>> > n DC 'servidor.frinsa.local'.
>> > [WARNING] The default SPN registration for 'HOST/SERV-EXCHANGE' is
>> > missing o
>> > n DC 'serv-sql.frinsa.local'.
>> > [FATAL] The default SPNs are not properly registered on any DCs.
>> >
>> >
>> > Bindings test. . . . . . . . . . . : Passed
>> >
>> >
>> > WAN configuration test . . . . . . : Skipped
>> > No active remote access connections.
>> >
>> >
>> > Modem diagnostics test . . . . . . : Passed
>> >
>> > IP Security test . . . . . . . . . : Skipped
>> >
>> > Note: run "netsh ipsec dynamic show /?" for more detailed information
>> >
>> >
>> > The command completed successfully
>> >
>> > El caso es que el problema parece radicar en que la entrada CNAME del
>> > servidor DNS Principal de la rama _msdcs resuelve contra "serv-exchange.", y
>> > no contra "serv-exchange.midominio.local"; por otro lado, el registro NS de
>> > la carpeta superior del servidor DNS resueve a
>> > "serv-exchange.midominio.local".
>> >
>> > Además, el "nombre completo" del servidor en las propiedades de red de "mi
>> > PC" consta como "serv-exchange", y no como "serv-exchange.midomino.local",
>> > sin embargo, el nombre del dominio sí que aparace como "midominio.local"
>> >
>> > Así las cosas, parece lógico que no funcione la replicación.
>> > Para intentar solucionarlo, exporté los datos del esquema de AD con ldifde,
>> > y los comparé con los de otro controlador de dominio ("SERV-SQL", también
>> > W2003).
>> > El resultado es que había dos entradas cuyo valor "debería" ser el nombre
>> > completo, y tenían sólo el nombre de máquina. Las entradas son:
>> > dn: CN=SERV-EXCHANGE,OU=Domain Controllers,DC=midominio,DC=local
>> > dnsHostName: serv-exchange (lo cambié con ADSIEdit por
>> > "serv-exchange.midominio.local)
>> > servidePrincipalName: DNS/serv-exchange (lo cambié por
>> > "DNS/serv-exchange.midominio.local")
>> > Apliqué los cambios, y repetí la operación en el controlador de dominio.