Primary Authorative DNS Server

Posted on 2004-11-29
Last Modified: 2010-04-13
My primary domain controllers in our parent domain don't seem to be replicating as they report "failed due to a DNS lookupup failure". NS Lookup seems to be working fine. But when I run NetDiag i get the following error:

DNS test . . . . . . . . . . . . . : Failed
          [WARNING] Cannot find a primary authoritative DNS server for the name
            'pdc.domain.'. [RCODE_SERVER_FAILURE]
            The name 'pdc.domain.' may not be registered in DNS.
       [FATAL] File \config\netlogon.dns contains invalid DNS entries.    [FATAL] No DNS servers have the DNS records for this DC registered.

Looked into the netlogon.dns file, and at first sight there does not seem to be anything amiss. (obviuosly is!) usual active directory entries pronouncing service location etc.

Help! Not come accross this before, and as its stopping users logging on correctly and causing RPC failures this is top priority for us!
Question by:chairborne1

    Author Comment

    Below error report for assistance / information

    Event Type:      Warning
    Event Source:      NTDS KCC
    Event Category:      Knowledge Consistency Checker
    Event ID:      1265
    Date:            29/11/2004
    Time:            10:46:19
    User:            N/A
    Computer:      PDC
    The attempt to establish a replication link with parameters
     Partition: CN=Configuration,DC=domain
     Source DSA DN: CN=NTDS Settings,CN=SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain
     Source DSA Address: 99372313-0df4-4996-af24-635d49725152._msdcs.domain
     Inter-site Transport (if any):
     failed with the following status:
     The DSA operation is unable to proceed because of a DNS lookup failure.
     The record data is the status code.  This operation will be retried.

    For more information, see Help and Support Center at
    0000: 4c 21 00 00               L!..    
    LVL 11

    Expert Comment

    Hello chairborne1,

    This will probably take the help of several experts, but we can start with this link:

    LVL 11

    Expert Comment

    Also, here is one of my favorite links regarding replication errors.

    How do I troubleshoot intra-site replication failure?
    LVL 82

    Accepted Solution

    If you didn't change the domain name information when posting here, the main problem is that you seem to have a single-label DNS name; Windows can't handle this by default:

    Clients cannot dynamically register DNS records in a single-label forward lookup zone

    Information about configuring Windows for domains with single-label DNS names

    Did you create the AD domain recently, that is, would it still be possible to re-create it? It might make things easier in the future.
    Here's a bit more information about domain naming (in general, don't mind the "Small Business Server" part):
    The Domain Name System name recommendations for Small Business Server 2000 and Windows Small Business Server 2003

    Author Comment

    Thanks for the links: Scouring as we speak.

    The domain is about 2 1/2 years old and has run ok up until recently. The only think that has changed is the promotion of s second server to a DC. Up until this point it was running as a single server domain. I split out the infrastructure and GC roles, but this seems to not had any effect.

    Author Comment

    Both the child domains seem to be replicating correctly, (two servers each per domain) and the trusts are fine.

    The single label thing i'm persuing at the mo, as this is the root domain of our forest, and is a single label as you say.

    Author Comment

    And after checking one of your links which points to dynamic registration, found out that single labels changed at SP4

    We have installed SP 4, as recommended by one of our sw suppliers !@$£* !!
    LVL 3

    Expert Comment

    What are the DNS server settings in the TCP/IP settings on the servers? Are each pointing to thmeselves as Primary DNS? How many DNS servers do you have for your domains?
    Try pointing each server's  Primary DNS setting to one DNS server. Allow time for replication, maybe overnite and see what happens.

    Author Comment

    Cheers oBdA!

    Entered the registry settings for the single label domain, which is fine in our case, re-booted and everything is running fine!!
    Just shows I need to check out all the angles before following advice from suppliers!

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    Join & Write a Comment

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    Synchronize a new Active Directory domain with an existing Office 365 tenant
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now