• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Replication problem!

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> General >> Replication problem! Page: [1]
Login
Message << Older Topic   Newer Topic >>
Replication problem! - 22.Apr.2009 7:01:59 AM   
stu1st

 

Posts: 59
Joined: 4.Nov.2007
Status: offline
Hello everyone,

I installed the bandwidth splitter on one of my 2 isa array servers and it worked perfectly, then i tried to install it on the 2nd one, installation went fine, then when i open the isa management console i get an error message indicating a problem while opening the bandwidth splitter snap-in.....when checking the event viewer, i noticed the following error occuring alot of times:

This is the replication status for the following directory partition on this directory server.

Directory partition:
CN=FPC2

This directory server has not recently received replication information from a number of directory servers.  The count of directory servers is shown, divided into the following intervals.

More than 24 hours:
1
More than a week:
1
More than one month:
1
More than two months:
1
More than a tombstone lifetime:
1
Tombstone lifetime (days):
180

Directory servers that do not replicate in a timely manner may encounter errors. They may miss password changes and be unable to authenticate. A DC that has not replicated in a tombstone lifetime may have missed the deletion of some objects, and may be automatically blocked from future replication until it is reconciled.

To identify the directory servers by name, use the dsdiag.exe tool.
You can also use the support tool repadmin.exe to display the replication latencies of the directory servers.   The command is "repadmin /showvector /latency <partition-dn>".

For more information, see Help and Support Center at

Then i tested the replication between both isa servers like changing something on 2nd server then observe it on the first one but i never see changes being replicated!!!

Any suggestions??
Post #: 1
RE: Replication problem! - 22.Apr.2009 9:00:49 PM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
Are you able to resolve the name of the Array members from each node?

If both the nodes are Windows Server 2003 SP2 do the following on both:

Under regedit go to HKLM\System\CurrentControlSet\Services\TcpIP\Parameters

Set EnableRSS as 0
Set EnableTCPA as 0
Set EnableTCPChimney as 0

By default they are all set to 1

Restart both nodes and try to sync.

** make sure you test resolving the names before you try the above. It may not be a neccessary set if it's a DNS issue.

_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to stu1st)
Post #: 2
RE: Replication problem! - 23.Apr.2009 12:54:38 AM   
stu1st

 

Posts: 59
Joined: 4.Nov.2007
Status: offline
Hello,
I checked DNS, resolving names works fine from both servers, checked registry values and they are already set to 0.....
Actually i have CSS installed on both servers, when i tried to connect to CSS on server 1 from server 2 it worked and i can see the missing snap-in.....i noticed something else, under configuration>servers, i see that server 1 has version:5.0.5723.511 but server 2 has version: 5.0.5723.493 !!

How can i fix that problem ??

< Message edited by stu1st -- 23.Apr.2009 12:59:55 AM >

(in reply to inderjeet)
Post #: 3
RE: Replication problem! - 23.Apr.2009 1:22:13 PM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
5.0.5723.493  is for ISA Server 2006 SP1. If they don't match then there are some updates which have been installed on ISA server with version 5.0.5723.511 
Did you update your ISA Server recently? Check for recently installed updates..

Regarding your issue, Check the "Replication CSS servers" computer set on both machines. It should include each other in that computer set. Node 1 with have an entry for Node 2 and Node 2 will have for Node 1. If it's missing, add them to look as above.

Do you see any events in Event viewer? Do you see any alerts in ISA console?

Break the NLB on Internal and External, try to sync the servers without NLB and then re-create the NLB



_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to stu1st)
Post #: 4
RE: Replication problem! - 23.Apr.2009 5:22:26 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
If you have the CSS role installed on the array members and also use NLB, you may need to make changes for correct Kerberos authentication.

See Question 9 in my NLB FAQ for details...

http://blog.msfirewall.org.uk/2008/10/resource-guide-for-using-microsoft-nlb.html

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to inderjeet)
Post #: 5

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> General >> Replication problem! Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts