我正在运行一个带有2个Active Directory
Windows2012控制器的测试环境 – 这种控制器可以开启和关闭.
但是我很难解密repadmin / showrepl和repadmin / replsummary输出.
输出显示10分钟前由于问题导致的错误,但根据事件日志,问题似乎已被清除.
但是我很难解密repadmin / showrepl和repadmin / replsummary输出.
输出显示10分钟前由于问题导致的错误,但根据事件日志,问题似乎已被清除.
以下是一个例子.目前,复制似乎只是通过手动添加对象来工作,并且它们显示在另一个DC中.事件日志错误和警告似乎已经清除.然而,我主要担心的是能够实时检查Active Directory服务的健康状况,而不会引用过去的错误或错误,一旦一切恢复良好就会清除错误.
C:\Users\administrator>repadmin /showrepl
Repadmin: running command /showrepl against full DC localhost
Default-First-Site-Name\WIN2012-1
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: 4d0f615f-2568-4acb-a4d7-fda9e8c303ff
DSA invocationID: 4d0f615f-2568-4acb-a4d7-fda9e8c303ff
==== INBOUND NEIGHBORS ======================================
DC=tom,DC=local
Default-First-Site-Name\WIN-2012-2 via RPC
DSA object GUID: 666eacaf-7bfd-428f-bc21-4bc067207f44
Last attempt @ 2016-12-01 13:16:30 was successful.
CN=Configuration,DC=tom,DC=local
Default-First-Site-Name\WIN-2012-2 via RPC
DSA object GUID: 666eacaf-7bfd-428f-bc21-4bc067207f44
Last attempt @ 2016-12-01 12:52:26 was successful.
CN=Schema,CN=Configuration,DC=local
Default-First-Site-Name\WIN-2012-2 via RPC
DSA object GUID: 666eacaf-7bfd-428f-bc21-4bc067207f44
Last attempt @ 2016-12-01 12:47:28 Failed,result 8524 (0x214c):
The DSA operation is unable to proceed because of a DNS lookup failu
re.
1 consecutive failure(s).
Last success @ 2016-11-30 22:45:07.
DC=DomainDnsZones,DC=local
Default-First-Site-Name\WIN-2012-2 via RPC
DSA object GUID: 666eacaf-7bfd-428f-bc21-4bc067207f44
Last attempt @ 2016-12-01 13:08:01 was successful.
DC=ForestDnsZones,result 8524 (0x214c):
The DSA operation is unable to proceed because of a DNS lookup failure.
1 consecutive failure(s).
Last success @ 2016-11-30 22:45:07.
Source: Default-First-Site-Name\WIN-2012-2
******* 1 CONSECUTIVE FAILURES since 2016-11-30 22:45:07
Last error: 8524 (0x214c):
The DSA operation is unable to proceed because of a DNS lookup failure.
repadmin /replsummary
Replication Summary Start Time: 2016-12-01 13:19:35
Beginning data collection for replication summary,this may take awhile:
.....
Source DSA largest delta fails/total %% error
WIN-2012-2 14h:34m:28s 2 / 5 40 (8524) The DSA operation is
unable to proceed because of a DNS lookup failure.
WIN2012-1 14h:20m:18s 2 / 5 40 (1908) Could not find the do
main controller for this domain.
Destination DSA largest delta fails/total %% error
WIN-2012-2 14h:20m:18s 2 / 5 40 (1908) Could not find the do
main controller for this domain.
WIN2012-1 14h:34m:28s 2 / 5 40 (8524) The DSA operation is
unable to proceed because of a DNS lookup failure.
另外,以下3个测试showrepl显示有什么区别？：
DC=tom,result 8524 (0x214c):
The DSA operation is unable to proceed because of a DNS lookup
1 consecutive failure(s).
Last success @ 2016-11-30 22:45:07.
repadmin / replsummary必须显示成功和失败的滚动缓存中的历史数据,因此/ replsummary将继续显示旧错误一段时间,即使您真正修复了它.我不喜欢/ replsummary,从不使用它.
原文链接：https://www.f2er.com/windows/366962.html另一方面,/ showrepl就像实时一样.也许你还在/ showrepl中看到旧的错误,因为从那以后DC没有尝试复制任何东西？
你可以从两个DC重新发送/ syncall / APed没有任何错误吗？如果你不能,那么你还没有修好它.
Also,what is the difference between the following 3 tests showrepl
displays?:
DC=tom,result 8524 (0x214c):
The DSA operation is unable to proceed because of a DNS lookup
1 consecutive failure(s).
Last success @ 2016-11-30 22:45:07.
域控制器托管几个不同的命名上下文或分区.它们类似于数据库中的逻辑表或视图.这些分区中的每一个都是单独复制的.第一个,DC = tom,DC = local是您的域分区.这是您的用户和组属于该域的位置.来自其他域的用户和组(如果有的话)将不在该分区中.
CN = Configuration,DC = local是林范围的命名上下文,它复制到林中的所有DC.它包含有关整个林的配置的信息,如AD站点,PKI信息等.
CN = Schema,CN = Configuration,DC = local也是林范围的命名上下文.整个森林只有一个版本的这个分区.
