Problem when enabling Trust Relationship between domains

  • Thread starter Thread starter Eduardo Sicouret
  • Start date Start date
E

Eduardo Sicouret

Hello,

I get the following error when trying to establish a trust relationship
between 2 domains:
"The rpc server is unavailable"

Running the NETDIAG tool I get the following messages:

[warning] cannot find a primary authoritative DNS server for the name
'xxx@domainname' may not be registered in DNS

[warning] The DNS entries for this DC are not registered correctly on DNS
server 'xx.xx.xx.xx'. Please wait for 30 minutes for DNS server replication.

[FATAL] no DNS servers have the DNS records for this DC registered


I checked with the DNS administration tool and there's an entry for the DC.
I can ping the local DC as well as the one for the domain for which i want
to enable the trust relationship.

Any help will be appreciated.

Thanks in advance

Eduardo Sicouret
 
Eduardo said:
Hello,

I get the following error when trying to establish a trust
relationship between 2 domains:
"The rpc server is unavailable"

Running the NETDIAG tool I get the following messages:

[warning] cannot find a primary authoritative DNS server for the name
'xxx@domainname' may not be registered in DNS

[warning] The DNS entries for this DC are not registered correctly on
DNS server 'xx.xx.xx.xx'. Please wait for 30 minutes for DNS server
replication.

[FATAL] no DNS servers have the DNS records for this DC registered


I checked with the DNS administration tool and there's an entry for
the DC. I can ping the local DC as well as the one for the domain for
which i want to enable the trust relationship.
Click to expand...

Before a trust can be set up, each PDC must be able to fully resolve the
domain to be trusted, not just the IP of the DC. Saying you can ping the DC,
means that you have ICMP connectivity, there are many ports and protocols
needed to create a trust.

That said, usually having a secondary zone, stub zone, or a Conditional
forwarder for the trusted domain should be all you need to resolve the
trusted domain, but you'll need full unhendered connectivity for the domain
ports.

Q179442 - How to Configure a Firewall for Domains and Trusts:
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q179442
 
Back
Top