asked on

DNS Error LDAP?

Hi
I am getting this error in my best practive anazlyzer. I was checking here since i was having a sysvol replication issue. What record is this looking for dns? My 2 DCs each have their local ip in the forward zones?

Issue:
The "LdapIpAddress" DNS (A/AAAA) resource records that advertise this domain controller as an available LDAP server in the domain and point to its IPv4 or IPv6 addresses are not registered. All writeable domain controllers in the domain (but not read-only domain controllers (RODCs)) must register these records.

Dan McFadden

This initially appears to be an Active Directory issue. I would run the following command:

with an account that has Admin privileges = dcdiag /test:DNS /e /v > dcdiag.txt

and attach the output so it can be looked over.

Dan

James

Check that replication is functioning. Run the following commands from the command prompt > repadmin /syncall /AdeP and also > repadmin /showreps

Check to see can you access the sysvol share from each domain controller and vice a versa.

Regards,

JBond2010

valmatic

ASKER

Mostly i am seeing it is missing my AAAA records but i dont use IP V6. Ill have it posted in a few.

valmatic

ASKER

My sys vol share is not replicating to my second DC. I usually edit Group policy on my main server and it is not replicating over is the reason i started looking around.

I got nothing from that command about repadmin...

James

You did not get any errors from repadmin? The command is - repadmin /AdeP

Please be aware the AP in /AdeP are capitals.

Regards,

JBond2010

valmatic

ASKER

No errors at all with that command

Dan McFadden

There should be a file called dcdiag.txt in the location that you ran the command prompt from.

If you just opened a command prompt and ran the command, the text file is probably in your user directory.

valmatic

ASKER

Dan i ran your command and the only errors on all 9 pages were the server not listed it V6 AAAA record, other than that it came out clean. Im not sure what this ldapipaddress setting is supposed to be the best practice thing is complaining about?

Dan McFadden

This is AD issue:

Link: http://technet.microsoft.com/en-us/library/dd378858(v=ws.10).aspx

valmatic

ASKER

it is talking about ldap in the error but is it simply stating it is mad i disabled ip v6 on my nic and once i turn it on and that record hits dns it will be happy?

Dan McFadden

You should not disable IPv6 on domain controllers. It is not recommended by Microsoft. IPv6 should be enabled and for all options configured as automatic.

Dan

ASKER CERTIFIED SOLUTION

Dan McFadden

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

valmatic

ASKER

is this ok to do during the day since i am not messing with my ip v4 address?

Dan McFadden

This can be done without disrupting operations.

valmatic

ASKER

i added ip v6 back in but the analyzer is still not happy.
Is this supposed to be in DNS somewhere i do not see it?
LdapIpAddress ??

Dan McFadden

The "LdapIpAddress" item is described in my post from yesterday at 16:38. Please read thru the article from Microsoft as it describes what you need to do to address the issue,

Dan