ntdsutil

  • Thread starter Thread starter Dumitru Popescu
  • Start date Start date
D

Dumitru Popescu

Can you help me solving this problem :

I have a DC running windows 2000 server with SP4 installed
ntdsutil version is 5.0.2195.6680

I run following commands on ntdsutil (in AD Restore Mode)
sem d a
go fix

the result was:

Fixing conflict mangled name: traacp
CNF:5facd060-c754-4870-9223-ddfe9dbce971
Fixing by rename with structural collision.
Could not update "datatable" table: key already exists.
Error<8000ffff>: failed to fix mangled dn traacp. Retrying.

***Manual intervention required***
The phantom currently using name DC=traacp,DC=ep,DC=com
has a guid.
Unhandled scenario. Mangled ref count is unexpected 3.
DBG: Rolling back transaction due to error 80004005.
Fixing conflict mangled name: traacp
CNF:5facd060-c754-4870-9223-ddfe9dbce971
Fixing by rename with structural collision.
Could not update "datatable" table: key already exists.
Error<8000ffff>: failed to fix mangled dn traacp. Retrying.

***Manual intervention required***
The phantom currently using name DC=traacp,DC=ep,DC=com
has a guid.
Unhandled scenario. Mangled ref count is unexpected 3.
DBG: Rolling back transaction due to error 80004005.
Can't fix Mangled NC
Failed.

Opening database [Current].....Done.

Getting record count...5456 records
Writing summary into log file dsdit.dmp.2
Records scanned: 5400
Processing records..Done.
 
I'm trying to solve events 1645, 1265

------- EventID 1645
The Directory Service received a failure while trying to
perform an authenticated RPC call to another Domain
Controller. The failure is that the desired Service
Principal Name (SPN) is not registered on the target
server. The server being contacted is 07a48592-1c8b-4b48-
b9b5-e2bd18fb4d27._msdcs.epc.ep.com. The SPN being used
is E3514235-4B06-11D1-AB04-00C04FC2DCD2/07a48592-1c8b-4b48-
b9b5-e2bd18fb4d27/traacp
CNF:5facd060-c754-4870-9223-ddfe9dbce971.ep.com@traacp
CNF:5facd060-c754-4870-9223-ddfe9dbce971.ep.com.
Please verify that the names of the target server and
domain are correct. Please also verify that the SPN is
registered on the computer account object for the target
server on the KDC servicing the request. If the target
server has been recently promoted, it will be necessary
for knowledge of this computer's identity to replicate to
the KDC before this computer can be authenticated.
----------------------------------
---------------- EventID 1265
The attempt to establish a replication link with parameters

Partition: DC=tra,DC=ep,DC=com
Source DSA DN: CN=NTDS
Settings,CN=SATURN,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=epc,DC=ep,DC=com
Source DSA Address: 07a48592-1c8b-4b48-b9b5-
e2bd18fb4d27._msdcs.epc.ep.com
Inter-site Transport (if any):

failed with the following status:

Logon Failure: The target account name is incorrect.

The record data is the status code. This operation will
be retried.

-----Original Message-----
What was the original problem you were trying to resolve?

-----Original Message-----
Can you help me solving this problem :

I have a DC running windows 2000 server with SP4 installed
ntdsutil version is 5.0.2195.6680

I run following commands on ntdsutil (in AD Restore Mode)
sem d a
go fix

the result was:

Fixing conflict mangled name: traacp
CNF:5facd060-c754-4870-9223-ddfe9dbce971
Fixing by rename with structural collision.
Could not update "datatable" table: key already exists.
Error<8000ffff>: failed to fix mangled dn traacp. Retrying.

***Manual intervention required***
The phantom currently using name DC=traacp,DC=ep,DC=com
has a guid.
Unhandled scenario. Mangled ref count is unexpected 3.
DBG: Rolling back transaction due to error 80004005.
Fixing conflict mangled name: traacp
CNF:5facd060-c754-4870-9223-ddfe9dbce971
Fixing by rename with structural collision.
Could not update "datatable" table: key already exists.
Error<8000ffff>: failed to fix mangled dn traacp. Retrying.

***Manual intervention required***
The phantom currently using name DC=traacp,DC=ep,DC=com
has a guid.
Unhandled scenario. Mangled ref count is unexpected 3.
DBG: Rolling back transaction due to error 80004005.
Can't fix Mangled NC
Failed.

Opening database [Current].....Done.

Getting record count...5456 records
Writing summary into log file dsdit.dmp.2
Records scanned: 5400
Processing records..Done.
.
Click to expand...
.
Click to expand...
 
In
posted their thoughts said:
I'm trying to solve events 1645, 1265

------- EventID 1645
The Directory Service received a failure while trying to
perform an authenticated RPC call to another Domain
Controller. The failure is that the desired Service
Principal Name (SPN) is not registered on the target
server. The server being contacted is 07a48592-1c8b-4b48-
b9b5-e2bd18fb4d27._msdcs.epc.ep.com. The SPN being used
is E3514235-4B06-11D1-AB04-00C04FC2DCD2/07a48592-1c8b-4b48-
b9b5-e2bd18fb4d27/traacp
CNF:5facd060-c754-4870-9223-ddfe9dbce971.ep.com@traacp
CNF:5facd060-c754-4870-9223-ddfe9dbce971.ep.com.
Please verify that the names of the target server and
domain are correct. Please also verify that the SPN is
registered on the computer account object for the target
server on the KDC servicing the request. If the target
server has been recently promoted, it will be necessary
for knowledge of this computer's identity to replicate to
the KDC before this computer can be authenticated.
----------------------------------
---------------- EventID 1265
The attempt to establish a replication link with parameters

Partition: DC=tra,DC=ep,DC=com
Source DSA DN: CN=NTDS
Settings,CN=SATURN,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=epc,DC=ep,DC=com
Source DSA Address: 07a48592-1c8b-4b48-b9b5-
e2bd18fb4d27._msdcs.epc.ep.com
Inter-site Transport (if any):

failed with the following status:

Logon Failure: The target account name is incorrect.

The record data is the status code. This operation will
be retried.
Click to expand...

Event ID 1645:
http://www.eventid.net/display.asp?eventid=1645&source=
http://support.microsoft.com/?id=257844

Event ID 1265 (many issues associated with them):
http://www.eventid.net/display.asp?eventid=1265

Do you have mutliple trees or just one tree with mutliple child domains?

Rule of thumb, this can also be a DNS config issue. Usually see this issue
when your machines are configured with your ISP's DNS servers. That always
causes all sorts of problems. Remove them if so and use a forwarder.

If multiple trees, with their own DNS servers, make sure the
_msdcs.ForestGUIDname record exists in the zone on all the servers.


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
-----Original Message-----
In Popescu Dumitru <[email protected]>, posted their thoughts, then I
offered my thoughts down below:

Event ID 1645:
http://www.eventid.net/display.asp?eventid=1645&source=
http://support.microsoft.com/?id=257844

Event ID 1265 (many issues associated with them):
http://www.eventid.net/display.asp?eventid=1265

Do you have mutliple trees or just one tree with mutliple child domains?

Rule of thumb, this can also be a DNS config issue. Usually see this issue
when your machines are configured with your ISP's DNS servers. That always
causes all sorts of problems. Remove them if so and use a forwarder.

If multiple trees, with their own DNS servers, make sure the
_msdcs.ForestGUIDname record exists in the zone on all the servers.


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
--
=================================


.
Click to expand...


I HAVE MULTIPLE TREES, NO ISP DNS

If I run ntdsutil on the DC (ares.ait.ep.com) where I have
the problem I get this:

select operation target: list domains
Found 6 domain(s)
0 - DC=epc,DC=ep,DC=com
1 - DC=rmu,DC=ep,DC=com
2 - DC=tra,DC=ep,DC=com
3 - DC=ait,DC=ep,DC=com
4 - DC="traacp
CNF:5facd060-c754-4870-9223-ddfe9dbce971",DC=ep,DC=com
5 - DC=vfupro,DC=ep,DC=com

AD partition for domain "traacp" could not be replicated
on ares which is DC in ait.ep.com
 
In
posted their thoughts said:
I HAVE MULTIPLE TREES, NO ISP DNS

If I run ntdsutil on the DC (ares.ait.ep.com) where I have
the problem I get this:

select operation target: list domains
Found 6 domain(s)
0 - DC=epc,DC=ep,DC=com
1 - DC=rmu,DC=ep,DC=com
2 - DC=tra,DC=ep,DC=com
3 - DC=ait,DC=ep,DC=com
4 - DC="traacp
CNF:5facd060-c754-4870-9223-ddfe9dbce971",DC=ep,DC=com
5 - DC=vfupro,DC=ep,DC=com

AD partition for domain "traacp" could not be replicated
on ares which is DC in ait.ep.com
Click to expand...

Seems there's a conflict with "traacp", as indicated with the "CNF: etc"
name. When you are in Sites and Services, does that name show? Can you
delete it?

Where those links any help?


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
Back
Top