DNS between two domains RESOLVED

[edie209]

We have two domains curriculum and admin when we lost our domain controller last week we also seem to have lost our trust between the two domains.

 

When I try to restore the trust starting on curriculum to admin I get the message that the admin domain is not a valid windows domain name (admin.school)

 

Dns resolves on both separate domains but not between each other any suggestions?

[Osprey]

Try adding the IP address of the Curric DNS server as the first forwarder on the Admin DNS server and vice versa.

[PiqueABoo]

If it's 2K3 then stub zones have a bit more uh.. "finesse".

[edie209]

Hi piqueaBoo could you explain more it is 2K3

 

@Opsprey I have tried that thanks

[PiqueABoo]

On DomainA you make a DNS stub zone for DomainB, and vice versa (Google for guides for creating a stub zone). If you're on a DomainA box and make a DNS request for something in DomainB, then the DomainA now has enough information to go to DomainB for the answer (should cache that), and vice versa.

 

This is neater than forwarders, but if you did forwarders right (and if after clearing the respective caches could resolve say http://www.edugeek.net from boxes in both domains) and your trusts still didn't work then stub zones probably won't help either

 

I'd go to a DC for DomainA and try an nslookup like this:

 

nslookup

>set type=all

>_ldap._tcp.dc._msdcs.

 

Where is fully qualified domain name for DomainB e.g.

domainb.local. If that give a sensible answer[1], try the vice versa on a DC for DomainB.

 

[1] Fully qualified domain names and IP addresses of DCs in the DomainB.

[edie209]

Thanks for that I will try that in the morning

[edie209]

I have now run the nslookup command

 

on domain A (admin) i get

 

server.admin.school 10.64.x.x

*** server.admin.school can't find _ldap._tcp.dc._msdcs.school.lea.sch.uk: non-Existent domain

 

On domain B (curriculum) I get

 

Server: unknown
Address: 10.2.x.x

DNS request times out 
      timeout was 2 seconds
*** request to Unknown timed-out

 

Also after doing a netdiag /fix on both domain controllers I get errors on the Admin DNS

 

Global results:

 

 

Domain membership test . . . . . . : Passed

 

 

NetBT transports test. . . . . . . : Passed

List of NetBt transports currently configured:

NetBT_Tcpip_{D75039EA-934D-47E5-97BC-6930DA7863D4}

1 NetBt transport currently configured.

 

 

Autonet address test . . . . . . . : Passed

 

 

IP loopback ping test. . . . . . . : Passed

 

 

Default gateway test . . . . . . . : Passed

 

 

NetBT name test. . . . . . . . . . : Passed

 

 

Winsock test . . . . . . . . . . . : Passed

 

 

DNS test . . . . . . . . . . . . . : Failed

[FATAL] Failed to fix: DC DNS entry t. re-registeration on DNS server '10.64

.169.25' failed.

DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE

[FATAL] Failed to fix: DC DNS entry t. re-registeration on DNS server '10.64

.169.25' failed.

DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE

[FATAL] Failed to fix: DC DNS entry _ldap._tcp.t. re-registeration on DNS se

rver '10.64.169.25' failed.

DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE

[FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._site

s.t. re-registeration on DNS server '10.64.169.25' failed.

DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE

[FATAL] Fix Failed: netdiag failed to re-register missing DNS entries for th

is DC on DNS server '10.64.169.25'.

[FATAL] No DNS servers have the DNS records for this DC registered.

 

 

Redir and Browser test . . . . . . : Passed

List of NetBt transports currently bound to the Redir

NetBT_Tcpip_{D75039EA-934D-47E5-97BC-6930DA7863D4}

The redir is bound to 1 NetBt transport.

 

List of NetBt transports currently bound to the browser

NetBT_Tcpip_{D75039EA-934D-47E5-97BC-6930DA7863D4}

The browser is bound to 1 NetBt transport.

 

 

DC discovery test. . . . . . . . . : Passed

 

 

DC list test . . . . . . . . . . . : Passed

 

 

Trust relationship test. . . . . . : Skipped

 

 

Kerberos test. . . . . . . . . . . : Passed

 

 

LDAP test. . . . . . . . . . . . . : Passed

 

 

Bindings test. . . . . . . . . . . : Passed

 

 

WAN configuration test . . . . . . : Skipped

No active remote access connections.

 

 

Modem diagnostics test . . . . . . : Passed

 

IP Security test . . . . . . . . . : Skipped

[edie209]

I have fixed this problem after many painful hours this is what I did just incase anyone else ever has this problem

 

On the admin DNS server properties sheet, select the Forwarders tab under

DNS Domain, click "New" enter the Domain Name of the curriculum domain, click OK, check the "Do not use recursion for this domain" box and enter the IP addresses of the DNS server for the curriculum domain. Then repeat these steps on the curriculum DNS server.