Solved

Domain Trust DNS Problems

Posted on 2014-09-05
8
1,391 Views
Last Modified: 2014-09-05
Having some trouble with an external domain trust.  The networking portion is functional as I am able to ping ip addresses in both directions but I cannot ping host names from one side of the trust but I can ping hostnames from the other.

Conditional forwarders are validated and FQDN resolved.

Two Way External
Not Transitive

Both sides are 2003 functional level

DomainA
ServerA
Server2003

DomainB
ServerB
Server2008

I am able to ping hostnames from DomainA (from any server) on DomainB however, I cannot ping hostnames on DomainA from DomainB.  I can ping ip addresses/

This trust was functional at some point in the past but disabled - I don't think zone transfers/secordary servers were used but and I swear I was able to ping hostnames in both directions just a few days ago.
0
Comment
Question by:LenCepeda
  • 3
  • 3
  • 2
8 Comments
 
LVL 7

Expert Comment

by:Delete
ID: 40306665
When you say you can't ping hostnames, do you mean you can't ping the FQDN of a system in DomainA from DomainB?  Or is it only the shortname that you cannot ping?

When you perform the ping, does it resolve to the correct IP Address of the destination system?
0
 

Author Comment

by:LenCepeda
ID: 40306672
That is correct - I should I wrote I am unable to ping FQDN of a system in DomainA from DomainB.  

Yes, when I ping the FQDN it does resolve the correct ip address.  

Thank you for you quick response.
0
 
LVL 56

Expert Comment

by:Cliff Galiher
ID: 40306676
First, don't use ping to test DNS issues. Firewalls can easily block ICMP traffic and DNS as well as other traffic can work just fine. Not only is a failed ping a bad test for DNS, it may not even indicate a problem.

Use nslookup.
0
 
LVL 7

Expert Comment

by:Delete
ID: 40306691
As a test try disabling IPv6 if it is enabled (assuming your not using anything that is reliant on IPv6).
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 

Author Comment

by:LenCepeda
ID: 40306721
Cliff I attempted nslookup and it wasn't able to find the other domain:  

****domainB can't find server: non-existent domain


Justing,
I disabled IPv6 on serverB- no change
0
 
LVL 56

Accepted Solution

by:
Cliff Galiher earned 500 total points
ID: 40306732
Then I'd check the conditional forwarder settings. Routes between the two domains. And, if necessary, follow the DNS packets themselves to see where they are getting stopped (again, firewall can be an issue) using something like wireshark at each hop.

Don't guess at random. These are simple troubleshooting steps that can pinpoint the problem definitively.
0
 
LVL 7

Expert Comment

by:Delete
ID: 40306737
Can you clarify what you mean by
Conditional forwarders are validated and FQDN resolved.
and how you validated those items if you say now you can't resolve DNS of DomainA from DomainB.

If you in fact cannot resolve DomainA from DomainB then you will need to follow Cliff's suggestions.
0
 

Author Closing Comment

by:LenCepeda
ID: 40306753
Alright - I deleted the conditional forwarded and recreated it and poof it worked!!!!
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now