Windows 2003 Active Directory DNS issues with HP-UX BIND 4.7
Posted on 2004-09-01
Please HELP!!! We are incorporating Windows 2K3 with Active Directory and DNS in a legacy environment, with the intention of running all all DNS under AD. We have a Win 2K3 Server Master DC, and a Win 2K DC. The Win 2K3 server is running DNS and Active directory, the WIN 2K DC is running active directory only. We intend to make it a backup to the 2K3 master. When we installed the server, we realized that the UNIX boxes were running DNS, and we began recieving some strange errors. First of all, the _msdcs icon under the root domain is greyed out. Then, in the application log we saw the following:Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5774
Time: 4:42:30 PM
Computer: domain controller
Description:The dynamic registration of the DNS record 'a434c548-1234-4846-a42d-03e4b6492a1a._msdcs.mexmil.com. 600 IN CNAME mexmil-fileserv.mexmil.com.' failed on the following DNS server: DNS server IP address: x.x.x.x
Returned Response Code (RCODE): 5
Returned Status Code: 9017
For computers and users to locate this domain
controller, this record must be registered in DNS.
Determine what might have caused this failure, resolve
the problem, and initiate registration of the DNS records by the domain controller. To determine what might have caused this failure, run DCDiag.exe. To initiate registration of the DNS records by this domain controller, run 'nltest.exe /dsregdns' from the command prompt on the domain controller or restart Net Logon service. Nltest.exe is available in the Microsoft
Windows Server Resource Kit CD. Or, you can manually add this record to DNS, but it is not recommended. ADDITIONAL DATA Error Value: DNS bad key. Data:0000: 05 00 ..
DCDiag shows that replication attempts with the Win2K DC have failed because DSA operation cannot proceed:DNS lookup failure, and <GUID>._msdcs.domain.com is not registered on one or more DNS servers. Systemlog failed due to W32TM errors, but we have sinced corrected that. The other event was in the Application log, and it states that "The DNS server recv() function failed." Question is how to verify that my Active directory DNS is working properly, and that my UNIX DNS servers are not getting in the way of my AD installation. We read that BIND 4.7 could cause problems because it doesn't support SRV records and dynamic updates. Has anyone experienced this issue, or could this be causing with our DNS issues? We would like to do a DNS migration from the UNIX servers, without shutting them down...if possible. PLEASE HELP!!!