邮件服务器-邮件系统-邮件技术论坛(BBS)

 找回密码
 会员注册
查看: 3633|回复: 4
打印 上一主题 下一主题

系统日志错误,请高手解答

[复制链接]
跳转到指定楼层
顶楼
发表于 2006-6-13 16:37:46 | 只看该作者 回帖奖励 |倒序浏览 |阅读模式
事件类型:        错误
事件来源:        NETLOGON
事件种类:        无
事件 ID:        5774
日期:                2006-6-13
事件:                16:46:30
用户:                N/A
计算机:        FILESERVER
描述:
DNS 记录 _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.abc.com. 600 IN SRV 0 100 389 fileserver.abc.com. 的注册失败,错误是:
拒绝 DNS 操作。  
数据:
0000: 2d 23 00 00               -#..   



win2000 server服务器,隔几分钟,在系统日志中经常会出现类似错误,提示 dns 记录 等等 注册失败,把绝DNS操作,这会是哪方面的问题呢,请高手提示,谢谢

[ 本帖最后由 dawning 于 2006-6-13 16:54 编辑 ]
沙发
发表于 2006-6-13 17:09:05 | 只看该作者
Adrian Grigorof (Last update 3/3/2004):
From a newsgroup post: "There could be many reasons for this event. I got this error because our HQ uses a BIND DNS. Some people fixed this by deleting the problem record by hand and restart the NETLOGON service."

Error: "DNS server unable to interpret format." - This error message may be generated in several circumstances. See M259277 for a general approach on troubleshooting this. In some cases this may be caused by the security setting on the parent.local server being set to only use secure updates. Changing this to allow "dynamic updates" (instead of only secure) might eliminate the problem.

Another newsgroup discussion thread suggested that the event was caused by the fact that the Active Directory Domain Controller running the DNS server did NOT point to itself as a DNS server (instead it used the ISP DNS servers). Changing the DNS server settings to point to itseld fixed the problem.

Error: "A socket operation was attempted to an unreachable host." - Apparently, the DNS server is not reachable. This could be due to network problems (cables, hubs, etc...) or the server may be down (or the IP address changed). Verify that there is connectivity between the computer reporting the problem and the DNS servers where is trying to register.

Error: "DNS RR set that ought not exist, does exist.".
- As per Microsoft, when the Netlogon service tries to register the GUID record in the _msdcs.forestrootzone, the GUID record may not be registered if there is an MX record that is wildcard character (*). The Netlogon service does a DNS query of type ALL for the guid._msdcs.forestrootzone. If a wildcard record exists, the DNS server responds to the query with the MX server information and the dynamic update does not succeed. See M325208.
- From a newsgroup post: "If you have a CName (or other record) for the same hostname that was manually entered and is preventing a dynamic host registration then you need to remove the manual record.
1. Rename Netlogon.dnb and Netlogon.dns on the machine that registers the 5774 event
2. Delete Netlogon.dnb and Netlogon.dns on the same machine
3. Reboot Computer
4. Check system log for the error"

Ionut Marin (Last update 8/16/2005):
See M828333 for a hotfix applicable to Microsoft Windows Server 2003.

As per Microsoft: "The DNS record could not be dynamically registered on the DNS server. Computers and users cannot locate this domain controller (DC) unless this record is registered in DNS". See MSW2KDB for more details.

- Error: "DNS server unable to interpret format" - See M266054.

As per Microsoft: "This problem occurs when a Domain Name System (DNS) server that accepts nonsecure dynamic updates registers the IP address of a DNS client, and the DNS client only permits secure dynamic updates. The Net Logon service then reports an error with the 9505 status code on the DNS server. The 9505 status code refers to a nonsecure DNS packet error. When this error occurs, the client successfully updates the client IP address on the DNS server, but the dynamic update is not secure". See M839505 to fix this problem. This article applies to Win2k3.

See M300202 for information on how to configure DNS for Internet access in Windows 2000.

Bobby (Last update 8/30/2004):
I found that a bad external DNS server that was set on my mail server caused this problem. I had 2 DNS servers configured, one internal and one external. I have no idea how the external one came about. I found out which DNS was the problem by using the Netdiag tool. Run “NETDIAG /TESTNS” and see the error in better detail. Netdiag is part of the resource kit for W2K.

Christophe Lubrano di Ciccone (Last update 5/13/2004):
- Error: "DNS RR set that ought to exist, does not exist" – This error appeared after a dcpromo. In fact, the record existed in the DNS root of the forest but not replicated in the forward lookup zone of the tree. In DNS in my tree, I “transfer the zone from the master” and the record was replicated.

Michael Butler (Last update 4/7/2004):
I was getting this error on a client’s server because the DHCP Client service was set to DISABLED (and not running). I enabled the service and ran the “ipconfig /registerdns” command. Info taken from M266319: “The DHCP Client service is responsible for performing the dynamic update for the host record. If the computer has a static IP address, the DHCP Client service also updates the pointer (or reverse lookup) record. This service must be running on all computers that perform dynamic updates, regardless of whether they are configured as DHCP clients”.

Anonymous (Last update 3/3/2004):
- Error: "DNS RR set that ought to exist, does not exist" - I had a power surge and one of the NICs went bad on my server. The server had another NIC (which was not in use at the time) and I gave it the same IP address. After I assigned the IP address, the following error showed up every two hours: Registration of the DNS record "15cd77e3-7324-4715-8d6a-36c753f7877a._msdcs.bccenter.org. 600 IN CNAME bcc05.bccenter.org." failed with the following error: DNS RR set that ought to exist, does not exist. To resolve the issue I went to the DNS and under _mcds -> gc and then I added an alias. I named it 15cd77e3-7324-4715-8d6a-36c753f7877a, and then in the next box I put in bcc05.bccenter.org. This resolved the issue I have not seen it since.

Larry (Last update 3/3/2004):
Error: "DNS RR set that ought to exist, does not". I was able to cure this event error on my server by adding a GUID to the _gc folder of the dns server under _msdcs on the forward lookup zone in my domain. I.e. with the same GUID of the error message - "cc0df87a-871d-4710-b941-188bcdbcf29d" as the alias name for a new record of type cname with the fully qualified name of the server as the data "server.my domain.com".

Anonymous (Last update 10/12/2003):
I had this issue and needed to change the DNS address to the local DNS address on a 2nd NIC to resolve it.

Ross Daniels (Last update 10/12/2003):
A 5774 error will occur every minute or so if the DNS server that is authoritive for the AD domain is not in the DNS servers list in your TCP/IP settings.

Cristian Arustei (Last update 10/12/2003):
I fixed this problem by deleting the specified key in Event Viewer and restarting DNS Server.

Klaus Busche
Error: "DNS operation refused." Resolution of this situation can be found in M284963.

Michael Nedbal
I had this problem on a proxy server, running DNS, with internal and external NICs. I had originally configured the external NIC with the DNS of my ISP. To fix the error, I pointed the DNS on both NICs to my internal IP address. Then, in the DNS MMC, I right-clicked my server and selected properties. I selected the "Forwarders" tab, enabled forwarders, and added my external (ISPs) DNS addresses.

Jh
I received this event because the DNS service on my Windows 2000 server was bound to a second IP address configured on that server.

Darren Kennedy
See the link below to Registry Tweaks for a description of the problem.

Joakim Bengtsson
I found that delaying startup of Netlogon service until DNS was started solved this problem. Just add DNS to the DependOnService entry in HKLM-System-CurrentControlSet-Services-Netlogon. This is described among other things in M193888.

Sven Jedeck
This event can occur when the IP address of the server is changed.

Daniel Hamilton
This Error occurs when DNS Server has its database in Active Directory Integrated mode, and is also a Domain Controller and network adapters have been changed in the system. Fix: Delete affected zones and recreate the zones. This will allow the NETLOGON service to successfully re-register the records that were being reported in the 5774 event.

PeterI
Error: "DNS RR set that ought not exist, does exist." - This can be caused by someone manually creating an alias for that namespace (in this case test.com). If none of the published fixes addresses your problem, try this instead. Open the DNS console from the MMC and expand the primary dns server. Select Forward Lookup Zones and select the target zone (test.com). There you should see an A (alias) or CNAME record. Delete it, then stop and start the netlogon service.

Johannes (Jazzy) Nielsen
Error: "DNS operation refused." - The problem was the time it took logging on to the W2K server, the clients were not able to find the server and waited up to 30 min. before logging on. This was solved by configuring the internal DC as DNS servers instead of the ISP DNS.

E Soden
I had my DNS server setup as a root server, which it is not. Go to the computer Management Console DNS snap-in and drill down to the Forward Lookup Zones. If there is a DOT zone listed "." then your server is setup as a root server. Deleting the Root zone got rid of the error message.

Lou Branda
I fixed this problem by giving the Domain computers full control the Forward Lookup Zone (the only one I had.

Slister
Error: "DNS server unable to interpret formula". I got this error using Cisco Network Registrar version 5 for my DNS server which is authoritative for the primary zone where my Active Directory structure lives. On the domain controller that controls the domain of the same name as the primary zone in DNS, I get the event ID 5774 every two hours. Cisco sent me a hack that will make CNR fool a domain contoller into believing it has successfully updated the record when in reality, it hasn't and it cannot. Here's the hack:

nrcmd>session set visibility=3
nrcmd>dns enable simulate-zone-top-dynupdate

I've tested this in my lab and it works (but only on CNR as of version 5.0.1 - earlier versions don't recognize the command).
藤椅
发表于 2006-6-13 17:10:08 | 只看该作者
你可以在这里http://www.eventid.net/找到你要的答案!
再次感谢5D版主钉子提供的资源!我也是借花献佛!
板凳
 楼主| 发表于 2006-7-7 16:27:10 | 只看该作者
看的我头昏啊,大概了解了一些,把DC的DNS指向他自己,现在没有问题了。呵呵
报纸
发表于 2006-7-12 09:21:16 | 只看该作者
我也遇到过类似问题,等了很长时间才解决此问题啊!很痛苦啊!
您需要登录后才可以回帖 登录 | 会员注册

本版积分规则

小黑屋|手机版|Archiver|邮件技术资讯网

GMT+8, 2026-8-6 07:19

Powered by Discuz! X3.2

© 2001-2016 Comsenz Inc.

本论坛为非盈利中立机构,所有言论属发表者个人意见,不代表本论坛立场。内容所涉及版权和法律相关事宜请参考各自所有者的条款。
如认定侵犯了您权利,请联系我们。本论坛原创内容请联系后再行转载并务必保留我站信息。此声明修改不另行通知,保留最终解释权。
*本论坛会员专属QQ群:邮件技术资讯网会员QQ群
*本论坛会员备用QQ群:邮件技术资讯网备用群

快速回复 返回顶部 返回列表