Avatar of Gregg D
Gregg D
Flag for United States of America asked on

DNS alias shares are not working and some authentication from non-Windows systems are having issues since our domain controller reboots

Our issue at the highest level is that our DNS alias shares are not working and some authentication from non-Windows systems are having issues since our domain controller reboots.

We have one 2008 R2 DC and five (5) 2016 domain controllers in play at the moment.  The only reason we are keeping the 2008 DC is for an old authentication system which will be decommissioned next month.  However, one of our 2012 DC's was having an issue with CPU utilization/hung so it was rebooted.  A few days later, we rebooted the 2008 DC and the troubles began.  One thing to note, we have no issues accessing the NAS via the alias from a Win7 PC and/or a Windows 2008 R2 server.  MS has not been able to help us this thing figure out.


Has anyone experienced anything like this and have any ideas?

DNSPCWindows OS* domain controllerActive Directory

Avatar of undefined
Last Comment
Gregg D

8/22/2022 - Mon
David Favor

Clarify what DNS alias might mean, as there's no such DNS term as alias.

Maybe you mean CNAME records.

You'll debug this by probing your DNS servers with dig or nslookup.

DNS will have no effect on CPU utilization... and if DNS is... incorrect... no telling what's occurring, which might be the root cause of CPU spinning.
Kaffiend

I assume you have run dcdiag on all your DCs?  And, also checked replication?

The server or device that hosts your shares - which LDAP ( AD DNS) servers is it pointing to?  
Does the issue go away if you repoint it to another DC?  
For the non-Windows devices, have you looked into which servers they are using for DNS?

You should also confirm whether the issue is DNS, or authentication (or both?) - you might be able to do that using just IP address instead of share name

Gregg D

ASKER
You are correct, to clarify the issue is with the CNAME not being recognized by Win 10 or Windows 2012 or Windows 2016 systems :
C:\>nslookup xfiles1
Server:  TestDC02.mydomain.local
Address:  n.n.n.n

Name:    NAS800fsaa.mydomain.local
Address:   n.n.n.nxn
Aliases:  files1.mydomain.local

Files1.mydomain.local (or files1) is not accessible
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
Gregg D

ASKER
Kaffiend: Yes, we performed all of the DCDiag and other diagnostics with Microsoft and 4 days later still an issue.  We can access only by hostname not the alias/cname or IP.
David Johnson, CD

C:\>nslookup xfiles1
Server:  TestDC02.mydomain.local
Address:  n.n.n.n

Name:    NAS800fsaa.mydomain.local
Address:   n.n.n.nxn
Aliases:  files1.mydomain.local

so it is returning 2 records when it should only be returning 1 record
which is the correct one?  testDC02 or NAS800fsaa ?
Gregg D

ASKER
David:

The actual hostname is a NAS server that gets replaced every few years by new storage vendor or storage platform.  We have been using a CNAME alias to point the hostnames for ease of changing.  

Another thing to note, we can't map storage and other non-windows via SMB except to a 2008 server.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
David Johnson, CD

you have setup a lazy mans load balancer this way.  a request will go to fs01, next request to to NAS (alternating)
Why can't you map storage via smb without going through a jump server?
CIFS not setup on the NAS, always using iSCSI?
I've setup Synology, QNAP, Dell, HP, freenas and all support CIFS and integration with AD via LDAP 

ASKER CERTIFIED SOLUTION
Gregg D

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question