Directory Replication Failure

[db24448]

Hi, we are having an issue with one of our domain controllers. The replication from it and all others has stopped. On running portqry tool checking port 389, we find that it reports the other DC's as listening, but fails to return an LDAP query, saying the server is unavailable. If we do the same in reverse, the other DC's can see and query the problem DC fine. We have checked our firewall and cannot see any traffic being blocked between the two servers. Any ideas would be very welcome.

[Meldrew]

have you tried running dcdiag?

[db24448]

Hi, yes it shows the connectivity issues: All directory servers in the following site that can replicate the directory partition over this transport are currently unavailable. We are struggling to see where the connectivity issue results from. The sites are connected via VPN and the firewall is allowing the traffic through on port 389.

[HPlum78]

When was the last successful replication? and whats changed since that date? is this is a windows firewall thing rather than a hardware based FW issue?

 

Also download the following tool:-

 

https://www.microsoft.com/en-gb/download/details.aspx?id=30005

Edited August 29, 2019 by HPlum78