Computing.Net > Forums > Windows Server 2003 > LDAP bind

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

LDAP bind

Reply to Message Icon

Name: larsdemo
Date: December 2, 2005 at 00:36:06 Pacific
OS: 2003
CPU/Ram: 1024
Comment:

Good morning guys iI'll hope someone can help me out on this one, I am having the following situation;

One single domain multiple site forrest, all site's dc's dhcp dns, all server 2003 xp clients, all sites have a site link to the main offoce so the main office is the hub site in replication, this works fine for a year now. This is what i get when i do a dcdiag on one dc that holds all the FSMO roles for the domain.

Starting test: KnowsOfRoleHolders
[SERVER1] LDAP bind failed with error 1053,
The service did not respond to the start or control request in a timely fashion..
Warning: SERVER1 is the Schema Owner, but is not responding to LDAP Bind.
Warning: SERVER1 is the PDC Owner, but is not responding to LDAP Bind.
Warning: SERVER1 is the Rid Owner, but is not responding to LDAP Bind.
Warning: SERVER1 is the Infrastructure Update Owner, but is not responding to LDAP Bind.

When i want to add a user to the callers in pc-anywere (it may go look for the group he is in on the SERVER1 i'll guess) pc-anywere say's "the remote procedure call failed, this is one of the symptoms.

Please help me out regards lars

mcp mcsa\: Messaging mcse -2003


mcp mcsa\: Messaging mcse -2003



Sponsored Link
Ads by Google

Response Number 1
Name: larsdemo
Date: December 2, 2005 at 02:44:36 Pacific
Reply:

nobody any idea please ?

mcp mcsa\: Messaging mcse -2003


0

Response Number 2
Name: heropsycho2177
Date: December 2, 2005 at 12:58:49 Pacific
Reply:

"This is what i get when i do a dcdiag on one dc that holds all the FSMO roles for the domain."

Why are all the FSMO role holders on this DC? For the sounds of your AD, you have quite a few users. This is a lot to ask of one DC. Let me guess - it's a global catalog, too?

"This is what i get when i do a dcdiag on one dc that holds all the FSMO roles for the domain."

Are you running dcdiag locally on the DC or from a remote machine?

How about netdiag?

Have you tried running ldp and connecting and binding? What happens?

Finally, why are you using PCAnywhere?

Please help survivors of Hurricane Katrina.

www.redcross.org


0

Response Number 3
Name: larsdemo
Date: December 5, 2005 at 01:29:14 Pacific
Reply:

The roles are all on that Dc cause the other dc in that site was having trouble to. Most of the roles are doing nothing so i dont see what the load would be on that one dc.
I run the dcdiag from another site and get this error when i do it from the other dc in the same site this errors do not apear.
How do i use that ldap ?

regards lars

mcp mcsa\: Messaging mcse -2003


0

Response Number 4
Name: heropsycho2177
Date: December 5, 2005 at 05:57:14 Pacific
Reply:

How to use ldp:

http://support.microsoft.com/?kbid=279220

Follow steps 1-6.

Just need to know if you can connect or not using a DC from a different site. For step 5, if you logged in with an admin account, you do not have to fill in user name and password.

"The roles are all on that Dc cause the other dc in that site was having trouble to. Most of the roles are doing nothing so i dont see what the load would be on that one dc."

Global catalogs get a lot of use although not a FSMO role. PDC emulator also gets a lot of use. Best bet is to spread the FSMO role holders out. PDC and RID master on your fastest DC in the main site. The Infrastructure master should not be on a GC.

Are there firewalls between your sites?

Please help survivors of Hurricane Katrina!

www.redcross.org


0

Response Number 5
Name: larsdemo
Date: December 6, 2005 at 00:04:52 Pacific
Reply:

Thanxs for the LDAP thing i am looking at it now.

Single Domain Forest
In a single domain forest, leave all of the FSMO roles on the first domain controller in the forest.

You should also configure all the domain controller as a Global Catalog servers. This will NOT place additional stress on the DCs, while allowing GC-related applications (such as Exchange Server) to easily perform GC queries.

This is what MS say about it...

I made my domain like this and never had a single problem before this occures.

I rebooted the machine and the problem is gone, the machine is upgraded from 2000 server and this may have caused this problems..

thanks again

regards lars

mcp mcsa\: Messaging mcse -2003


0

Related Posts

See More



Response Number 6
Name: larsdemo
Date: December 6, 2005 at 00:25:46 Pacific
Reply:

That's realy cool stuff that LDP tool, can you eddid you whoole active directory using that tool?
I am gonna play with that on my test environment :)

regards Lars

mcp mcsa\: Messaging mcse -2003


0

Response Number 7
Name: heropsycho2177
Date: December 6, 2005 at 06:28:40 Pacific
Reply:

First off, read this...

http://support.microsoft.com/kb/223346/

Secondly, you didn't get that from Microsoft. Petri happens to be a little wrong about that.

You can put the infrastructure master on a GC hosting server, but I don't recommend it since you may forget if you have multiple domains later.

Glad your problem is fixed though...

Please help survivors of Hurricane Katrina!

www.redcross.org


0

Response Number 8
Name: larsdemo
Date: December 7, 2005 at 00:29:27 Pacific
Reply:

Thanxs for the answer, i am reading the link now, and you are right petri not MS :)

Is there any way to force the kcc to automaticaly generate inbouds when you delete the hand made connections. My co worker in england makes inbound connections all the time and i dont want him so i delete them ones in a while :) the only thing is i need to wait for an hour or so.
In my opinion its better to let AD handle that stuff in stead of making them connections manual.

An other question is about how i have handled my replication.

I have a "main" office and lots of branche offices. the way i replicate is; i made site links and they all connect one brach to the main ;

branch1<->main
branch2<->main
branch3<->main
branch4<->main

Like that, is that a good way to do it, and is that what they call a hub topologie ?

Regards and many thanxs Lars

mcp mcsa\: Messaging mcse -2003


0

Response Number 9
Name: larsdemo
Date: December 7, 2005 at 00:40:53 Pacific
Reply:

What i see on your link is this;

On a per-domain basis, select local primary and standby FSMO domain controllers in case a failure occurs on the primary FSMO owner. Additionally, you may want to select off-site standby owners in the event of a site-specific disaster scenario. Consider the following in your selection criteria:

I dont see what they mean, is there a configuration that lets me have a backup or standby FSMO owner that takes the role it holds when the original owner is offline ?

i have never heard of such thing in my mcse

regards lars

mcp mcsa\: Messaging mcse -2003


0

Response Number 10
Name: heropsycho2177
Date: December 7, 2005 at 08:43:01 Pacific
Reply:

"Is there any way to force the kcc to automaticaly generate inbouds when you delete the hand made connections."

Checkout replmon...

"In my opinion its better to let AD handle that stuff in stead of making them connections manual."

Depends on your environment, and the technical expertise of your staff.

"Like that, is that a good way to do it, and is that what they call a hub topologie ?"

I hear it called a star topology, but yes, this is the best way to do it. The only problem is a delayed replication from one branch to another, but that's by the the least of many evils when choosing another strategy.

Please help survivors of Hurricane Katrina.

www.redcross.org


0

Response Number 11
Name: larsdemo
Date: December 7, 2005 at 23:39:01 Pacific
Reply:

I want to thank you for the time spend on this toppic and i learned a lot the past 4 day's. Yesterday evening i found this site;

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/0ac09f72-a790-48a9-a72f-d7328f9d937f.mspx

This is the most usefull site i have seen about this subject, i shows in a clear way what is happening in the replication process.

Regards Lars

mcp mcsa\: Messaging mcse -2003


0

Response Number 12
Name: larsdemo
Date: December 7, 2005 at 23:40:48 Pacific
Reply:

Sorry i mean this link;

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/0ac09f72-a790-48a9-a72f-d7328f9d937f.mspx

mcp mcsa\: Messaging mcse -2003


0

Response Number 13
Name: heropsycho2177
Date: December 8, 2005 at 05:45:55 Pacific
Reply:

It is quite amazing how little about this you need to know to be an MCSE. I was certified well before I learned truly about how replication works, and how to resolve issues with it.

Please help survivors of Hurricane Katrina!

www.redcross.org


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows Server 2003 Forum Home


Sponsored links

Ads by Google


Results for: LDAP bind

Fail to Replicate Active Directory www.computing.net/answers/windows-2003/fail-to-replicate-active-directory/6567.html

Windows 2003 AD Replication Issue www.computing.net/answers/windows-2003/windows-2003-ad-replication-issue/5285.html

DNS & Schema master failure on mail www.computing.net/answers/windows-2003/dns-schema-master-failure-on-mail/8233.html