none
子域客户端使用父域中的账户登录父域验证失败 RRS feed

  • 问题

  • 域环境为Windows 2003,域架构为父域+子域,通过子域下的客户端登录父域验证失败,通过repadmin检查发现如下

    ==== INBOUND NEIGHBORS ======================================

    DC=it2004,DC=gree,DC=com,DC=cn

        chongqing\CQADM06 via RPC

            DC object GUID: 56289587-8d29-4734-b978-556982c09737

            Last attempt @ 2012-08-14 14:00:01 was delayed for a normal reason, result 8477 (0x211d):

        复制请求已暂停;等待回答。

            Last success @ (never).

    其中chongqing\CQADM06 代表子域,请教:应该如何解决?

    详细的记录如下:

    子域:

    repadmin running command /showrepl against server localhost

     chongqing\CQADM07

    DC Options: IS_GC

        WARNING:  Not advertising as a global catalog.

    Site Options: (none)

    DC object GUID: f66e6fa3-8a26-453a-ad92-87c87e6392aa

    DC invocationID: 5bd83a22-11ea-4bf5-97ef-f66809fbea68

     ==== INBOUND NEIGHBORS ======================================

     CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

        chongqing\CQADM06 via RPC

            DC object GUID: 56289587-8d29-4734-b978-556982c09737

            Last attempt @ 2012-08-14 13:50:01 was successful.

     CN=Schema,CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

        chongqing\CQADM06 via RPC

            DC object GUID: 56289587-8d29-4734-b978-556982c09737

            Last attempt @ 2012-08-14 13:50:04 was successful.

     DC=it2004,DC=gree,DC=com,DC=cn

        chongqing\CQADM06 via RPC

            DC object GUID: 56289587-8d29-4734-b978-556982c09737

            Last attempt @ 2012-08-14 14:00:01 was delayed for a normal reason, result 8477 (0x211d):

        复制请求已暂停;等待回答。

            Last success @ (never).

     DC=HF,DC=it2004,DC=gree,DC=com,DC=cn

        chongqing\CQADM06 via RPC

            DC object GUID: 56289587-8d29-4734-b978-556982c09737

            Last attempt @ 2012-08-14 13:50:08 was successful.

     

    DC=wuhu,DC=it2004,DC=gree,DC=com,DC=cn

        chongqing\CQADM06 via RPC

            DC object GUID: 56289587-8d29-4734-b978-556982c09737

            Last attempt @ 2012-08-14 13:49:57 was successful.

     

    DC=ZHENGZHOU,DC=it2004,DC=gree,DC=com,DC=cn

        chongqing\CQADM06 via RPC

            DC object GUID: 56289587-8d29-4734-b978-556982c09737

            Last attempt @ 2012-08-14 13:50:01 was successful.

     

    DC=sjz,DC=it2004,DC=gree,DC=com,DC=cn

        chongqing\CQADM06 via RPC

            DC object GUID: 56289587-8d29-4734-b978-556982c09737

            Last attempt @ 2012-08-14 13:50:04 was successful.

     

    DC=wuhan,DC=it2004,DC=gree,DC=com,DC=cn

        chongqing\CQADM06 via RPC

            DC object GUID: 56289587-8d29-4734-b978-556982c09737

            Last attempt @ 2012-08-14 13:50:08 was successful.

     

    ==== OUTBOUND NEIGHBORS FOR CHANGE NOTIFICATIONS ============

     

    CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

        chongqing\CQADM05\0ADEL:c4b8388d-5263-4192-8734-823abfc6dee2 (deleted DSA) via RPC

            DC object GUID: 521380d5-0a68-4efc-bd13-f916d57910ea

     

    CN=Schema,CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

        chongqing\CQADM05\0ADEL:c4b8388d-5263-4192-8734-823abfc6dee2 (deleted DSA) via RPC

            DC object GUID: 521380d5-0a68-4efc-bd13-f916d57910ea

     

    DC=chongqing,DC=it2004,DC=gree,DC=com,DC=cn

        chongqing\CQADM05\0ADEL:c4b8388d-5263-4192-8734-823abfc6dee2 (deleted DSA) via RPC

            DC object GUID: 521380d5-0a68-4efc-bd13-f916d57910ea

     

    ==== KCC CONNECTION OBJECTS ============================================

    Connection --

        Connection name : 98c65149-4947-4a97-a526-944bcb7972fa

        Server DNS name : cqadm07.chongqing.it2004.gree.com.cn

        Server DN  name : CN=NTDS Settings,CN=CQADM07,CN=Servers,CN=chongqing,CN=Sites,CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

            Source: chongqing\CQADM06

                    No Failures.

            TransportType: intrasite RPC

            options:  isGenerated

            ReplicatesNC: DC=wuhan,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  RingTopology

                    Replica link has been added.

            ReplicatesNC: DC=sjz,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  RingTopology

                    Replica link has been added.

            ReplicatesNC: DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  RingTopology

                    Replica link has been added.

            ReplicatesNC: DC=HF,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  RingTopology

                    Replica link has been added.

            ReplicatesNC: DC=wuhu,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  RingTopology

                    Replica link has been added.

            ReplicatesNC: DC=ZHENGZHOU,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  RingTopology

                    Replica link has been added.

            ReplicatesNC: CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  RingTopology

                    Replica link has been added.

            ReplicatesNC: CN=Schema,CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  RingTopology

                    Replica link has been added.

    1 connections found.

     

     父域:

     

    repadmin running command /showrepl against server localhost

     

    chongqing\CQADM06

    DC Options: IS_GC

    Site Options: (none)

    DC object GUID: 56289587-8d29-4734-b978-556982c09737

    DC invocationID: ba066b29-3f86-4215-93a3-f5d5e28a1b4e

     

    ==== INBOUND NEIGHBORS ======================================

     

    DC=it2004,DC=gree,DC=com,DC=cn

        Zhuhai-Default-First-Site-Name\DQMAIL2 via RPC

            DC object GUID: 415d97ad-cad5-478d-8cf2-bbf689efcecd

            Last attempt @ 2012-08-14 11:50:29 was successful.

        WuHan\WHADM1 via RPC

            DC object GUID: e362e8c8-b72b-4b48-9dfd-4310c391363c

            Last attempt @ 2012-08-14 11:50:30 was successful.

     

    CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

        Zhuhai-Default-First-Site-Name\DQMAIL2 via RPC

            DC object GUID: 415d97ad-cad5-478d-8cf2-bbf689efcecd

            Last attempt @ 2012-08-14 11:50:12 was successful.

        WuHan\WHADM1 via RPC

            DC object GUID: e362e8c8-b72b-4b48-9dfd-4310c391363c

            Last attempt @ 2012-08-14 11:50:12 was successful.

        Wuhu\WUHUADM1 via RPC

            DC object GUID: 3698eafb-8b86-499d-959a-94d2e71ab2d7

            Last attempt @ 2012-08-14 11:50:13 was successful.

        HF\HFADM1 via RPC

            DC object GUID: 94148082-1ae5-46dd-a8a7-b899c08c41f3

            Last attempt @ 2012-08-14 11:50:14 was successful.

        Zhengzhou\ZZADM3 via RPC

            DC object GUID: df5905c7-7259-4ed1-9b16-b4fecb03e1b1

            Last attempt @ 2012-08-14 11:50:16 was successful.

     

    CN=Schema,CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

        Zhuhai-Default-First-Site-Name\DQMAIL2 via RPC

            DC object GUID: 415d97ad-cad5-478d-8cf2-bbf689efcecd

            Last attempt @ 2012-08-14 11:50:16 was successful.

        WuHan\WHADM1 via RPC

            DC object GUID: e362e8c8-b72b-4b48-9dfd-4310c391363c

            Last attempt @ 2012-08-14 11:50:16 was successful.

        Wuhu\WUHUADM1 via RPC

            DC object GUID: 3698eafb-8b86-499d-959a-94d2e71ab2d7

            Last attempt @ 2012-08-14 11:50:16 was successful.

        HF\HFADM1 via RPC

            DC object GUID: 94148082-1ae5-46dd-a8a7-b899c08c41f3

            Last attempt @ 2012-08-14 11:50:16 was successful.

        Zhengzhou\ZZADM3 via RPC

            DC object GUID: df5905c7-7259-4ed1-9b16-b4fecb03e1b1

            Last attempt @ 2012-08-14 11:50:16 was successful.

     

    DC=HF,DC=it2004,DC=gree,DC=com,DC=cn

        HF\HFADM1 via RPC

            DC object GUID: 94148082-1ae5-46dd-a8a7-b899c08c41f3

            Last attempt @ 2012-08-14 11:50:30 was successful.

        WuHan\WHADM1 via RPC

            DC object GUID: e362e8c8-b72b-4b48-9dfd-4310c391363c

            Last attempt @ 2012-08-14 11:50:30 was successful.

        Wuhu\WUHUADM1 via RPC

            DC object GUID: 3698eafb-8b86-499d-959a-94d2e71ab2d7

            Last attempt @ 2012-08-14 11:50:30 was successful.

     

    DC=chongqing,DC=it2004,DC=gree,DC=com,DC=cn

        WuHan\WHADM1 via RPC

            DC object GUID: e362e8c8-b72b-4b48-9dfd-4310c391363c

            Last attempt @ 2012-08-14 11:50:30 was successful.

        Wuhu\WUHUADM1 via RPC

            DC object GUID: 3698eafb-8b86-499d-959a-94d2e71ab2d7

            Last attempt @ 2012-08-14 11:50:30 was successful.

     

    DC=wuhu,DC=it2004,DC=gree,DC=com,DC=cn

        WuHan\WHADM1 via RPC

            DC object GUID: e362e8c8-b72b-4b48-9dfd-4310c391363c

            Last attempt @ 2012-08-14 11:50:30 was successful.

        Wuhu\WUHUADM1 via RPC

            DC object GUID: 3698eafb-8b86-499d-959a-94d2e71ab2d7

            Last attempt @ 2012-08-14 11:50:31 was successful.

     

    DC=ZHENGZHOU,DC=it2004,DC=gree,DC=com,DC=cn

        Zhengzhou\ZZADM3 via RPC

            DC object GUID: df5905c7-7259-4ed1-9b16-b4fecb03e1b1

            Last attempt @ 2012-08-14 11:50:31 was successful.

        WuHan\WHADM1 via RPC

            DC object GUID: e362e8c8-b72b-4b48-9dfd-4310c391363c

            Last attempt @ 2012-08-14 11:50:31 was successful.

        Wuhu\WUHUADM1 via RPC

            DC object GUID: 3698eafb-8b86-499d-959a-94d2e71ab2d7

            Last attempt @ 2012-08-14 11:50:31 was successful.

     

    DC=sjz,DC=it2004,DC=gree,DC=com,DC=cn

        WuHan\WHADM1 via RPC

            DC object GUID: e362e8c8-b72b-4b48-9dfd-4310c391363c

            Last attempt @ 2012-08-14 11:50:31 was successful.

        Wuhu\WUHUADM1 via RPC

            DC object GUID: 3698eafb-8b86-499d-959a-94d2e71ab2d7

            Last attempt @ 2012-08-14 11:50:31 was successful.

     

    DC=wuhan,DC=it2004,DC=gree,DC=com,DC=cn

        WuHan\WHADM1 via RPC

            DC object GUID: e362e8c8-b72b-4b48-9dfd-4310c391363c

            Last attempt @ 2012-08-14 11:50:31 was successful.

        Wuhu\WUHUADM1 via RPC

            DC object GUID: 3698eafb-8b86-499d-959a-94d2e71ab2d7

            Last attempt @ 2012-08-14 11:50:31 was successful.

     

    ==== OUTBOUND NEIGHBORS FOR CHANGE NOTIFICATIONS ============

     

    DC=it2004,DC=gree,DC=com,DC=cn

        (null) via RPC

            DC object GUID: f66e6fa3-8a26-453a-ad92-87c87e6392aa

            Last attempt @ (never) was successful.

     

    CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

        (null) via RPC

            DC object GUID: 521380d5-0a68-4efc-bd13-f916d57910ea

            Last attempt @ (never) was successful.

        (null) via RPC

            DC object GUID: 07a05a09-5a3f-4f36-adea-e5e5f214f731

            Last attempt @ (never) was successful.

        (null) via RPC

            DC object GUID: f66e6fa3-8a26-453a-ad92-87c87e6392aa

            Last attempt @ (never) was successful.

     

    CN=Schema,CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

        (null) via RPC

            DC object GUID: 521380d5-0a68-4efc-bd13-f916d57910ea

            Last attempt @ (never) was successful.

        (null) via RPC

            DC object GUID: 07a05a09-5a3f-4f36-adea-e5e5f214f731

            Last attempt @ (never) was successful.

        (null) via RPC

            DC object GUID: f66e6fa3-8a26-453a-ad92-87c87e6392aa

            Last attempt @ (never) was successful.

     

    DC=HF,DC=it2004,DC=gree,DC=com,DC=cn

        (null) via RPC

            DC object GUID: f66e6fa3-8a26-453a-ad92-87c87e6392aa

            Last attempt @ (never) was successful.

     

    DC=wuhu,DC=it2004,DC=gree,DC=com,DC=cn

        (null) via RPC

            DC object GUID: f66e6fa3-8a26-453a-ad92-87c87e6392aa

            Last attempt @ (never) was successful.

     

    DC=ZHENGZHOU,DC=it2004,DC=gree,DC=com,DC=cn

        (null) via RPC

            DC object GUID: f66e6fa3-8a26-453a-ad92-87c87e6392aa

            Last attempt @ (never) was successful.

     

    DC=sjz,DC=it2004,DC=gree,DC=com,DC=cn

        (null) via RPC

            DC object GUID: f66e6fa3-8a26-453a-ad92-87c87e6392aa

            Last attempt @ (never) was successful.

     

    DC=wuhan,DC=it2004,DC=gree,DC=com,DC=cn

        (null) via RPC

            DC object GUID: f66e6fa3-8a26-453a-ad92-87c87e6392aa

            Last attempt @ (never) was successful.

     

    ==== KCC CONNECTION OBJECTS ============================================

    Connection --

        Connection name : 4974a2ae-4be7-4e97-8803-74342ed7842c

        Server DNS name : cqadm06.it2004.gree.com.cn

        Server DN  name : CN=NTDS Settings,CN=CQADM06,CN=Servers,CN=chongqing,CN=Sites,CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

            Source: WuHan\WHADM1

                    No Failures.

            TransportType: IP

            options:  isGenerated overrideNotifyDefault

            ReplicatesNC: DC=wuhan,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  GCTopology IntersiteTopology

                    Replica link has been added.

            ReplicatesNC: DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  GCTopology IntersiteTopology

                    Replica link has been added.

    Connection --

        Connection name : ef9adea2-8f8d-42c7-8e19-99a1dea568f4

        Server DNS name : cqadm06.it2004.gree.com.cn

        Server DN  name : CN=NTDS Settings,CN=CQADM06,CN=Servers,CN=chongqing,CN=Sites,CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

            Source: Zhuhai-Default-First-Site-Name\DQMAIL2

                    No Failures.

            TransportType: IP

            options:  isGenerated overrideNotifyDefault

            ReplicatesNC: DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  IntersiteTopology

                    Replica link has been added.

    Connection --

        Connection name : 6f2d477a-d2ed-44c8-a2a7-198807b813b7

        Server DNS name : cqadm06.it2004.gree.com.cn

        Server DN  name : CN=NTDS Settings,CN=CQADM06,CN=Servers,CN=chongqing,CN=Sites,CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

            Source: Wuhu\WUHUADM1

                    No Failures.

            TransportType: IP

            options:  isGenerated overrideNotifyDefault

            ReplicatesNC: DC=sjz,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  GCTopology IntersiteTopology

                    Replica link has been added.

            ReplicatesNC: DC=chongqing,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  GCTopology IntersiteTopology

                    Replica link has been added.

            ReplicatesNC: CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  GCTopology IntersiteTopology

                    Replica link has been added.

            ReplicatesNC: DC=wuhu,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  GCTopology IntersiteTopology

                    Replica link has been added.

    Connection --

        Connection name : 3c541d31-8ea8-45c3-b1c2-7371e061920d

        Server DNS name : cqadm06.it2004.gree.com.cn

        Server DN  name : CN=NTDS Settings,CN=CQADM06,CN=Servers,CN=chongqing,CN=Sites,CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

            Source: HF\HFADM1

                    No Failures.

            TransportType: IP

            options:  isGenerated overrideNotifyDefault

            ReplicatesNC: DC=HF,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  GCTopology

                    Replica link has been added.

    Connection --

        Connection name : b77f4066-728b-483d-a4b8-ddb0e625cd7b

        Server DNS name : cqadm06.it2004.gree.com.cn

        Server DN  name : CN=NTDS Settings,CN=CQADM06,CN=Servers,CN=chongqing,CN=Sites,CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

            Source: SJZ\SJZADM1

    ******* 15 CONSECUTIVE FAILURES since 2012-08-14 10:10:22

    Last error: 1722 (0x6ba):

                RPC 服务器不可用。

            TransportType: IP

            options:  isGenerated overrideNotifyDefault

            ReplicatesNC: DC=sjz,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  GCTopology

    ******* WARNING: KCC could not add this REPLICA LINK due to error.

    Connection --

        Connection name : eb542e31-cb37-47eb-9977-a1eb5df40f71

        Server DNS name : cqadm06.it2004.gree.com.cn

        Server DN  name : CN=NTDS Settings,CN=CQADM06,CN=Servers,CN=chongqing,CN=Sites,CN=Configuration,DC=it2004,DC=gree,DC=com,DC=cn

            Source: Zhengzhou\ZZADM3

                    No Failures.

            TransportType: IP

            options:  isGenerated overrideNotifyDefault

            ReplicatesNC: DC=ZHENGZHOU,DC=it2004,DC=gree,DC=com,DC=cn

            Reason:  GCTopology

                    Replica link has been added.

    6 connections found.

     


    Horace Xie mgdm@163.com

    2012年8月14日 6:31

答案

  • 您好!

    1. 我们建议将子域的域名系统 (DNS) 名称空间委派给位于子域中的域控制器,这样具有以下几点好处:

    a. 添加 DNS 服务器可以减少网络通讯量。

    b. 添加 DNS 服务器可以提供冗余。

    c. Active Directory 名称空间委派和 DNS 名称空间委派保持一致,可简化总体名称空间设计。

    2. 如果希望子域能够解析父域和其他域树的域名的话,请确认创建辅助区域和设置转发器。

    3. 我们建议您在在父(根)DNS 服务器上为子域手动创建一个委派。具体的操作步骤请您参考以下文章:

    HOW TO:在 Active Directory 中创建一个子域并将 DNS 名称空间委派到该子域

    http://support.microsoft.com/kb/255248/zh-cn 

    希望我的回答对您有所帮助,如果您还有什么问题,请您再和我们联系。


    如果您对我们的论坛在线支持服务有任何的意见或建议,请通过邮件告诉我们。
    Description: Description: TechNet 论坛好帮手立刻免费下载  TechNet 论坛好帮手

    • 已标记为答案 horace xie 2012年8月17日 5:57
    2012年8月15日 9:36
    版主