Go Back   TechArena Community > Technical Support > Computer Help > Windows Server > Windows Server Help
Become a Member!
Forgot your username/password?
Tags Active Topics RSS Search Mark Forums Read

Sponsored Links



Cannot ping Active Directory Domain Name

Windows Server Help


Reply
 
Thread Tools Search this Thread
  #1  
Old 17-10-2008
PhilTeale
 
Posts: n/a
Cannot ping Active Directory Domain Name

Hi

I am trying to establish a trust from a WAN domain to a domain on a LAN.
Network connectivity is established and confirmed.

The problem I am experiencing is that I cannot ping the domain name from the
domain on the WAN. I have configured forwarders on the WAN DNS and can ping
individual servers on the LAN domain, but not the domain name itself.

Eg. I can ping server1.contoso. but not contoso. itself

(To complicate matters, the LAN domain does not use RFC compliant naming; it
is called "contoso" (or "contso.", I am not sure of the difference). I don't
think that it is a problem as both are AD domains, but I thought it best to
point out.)

I suspect the problem is actually with the LAN domain itself, as when I log
onto the domain controller server.contoso. I cannot ping either "contoso" or
"contoso."

My question is, what records need to be present in DNS to allow me to ping
the domain name from the domain controller? In all our other domains, we can
ping the domain name, eg example.com or example.zone.

If run nslookup on the LAN domain controller ("server1.contoso") and enter
"contso" it returns non-existant domain, however if I enter "contso." then it
returns the IP address of the DNS server. This demonstrates that DNS is
somewhat working.

I understand that we will not be able to establish the trust until both
servers can contact a domain controller on the other domain by resolving the
domain name.

I hope someone is able to help.

Regards

Phil

Reply With Quote
  #2  
Old 17-10-2008
Meinolf Weber
 
Posts: n/a
Re: Cannot ping Active Directory Domain Name

Hello PhilTeale,

See here for DNS setup for a trust:
http://searchwinit.techtarget.com/ex...101656,00.html

Also your domain names should look like "domain.local" instead of using single
lable domain names like domain. See here:
http://support.microsoft.com/kb/300684

Did you ever thought about renaming the domain?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi
>
> I am trying to establish a trust from a WAN domain to a domain on a
> LAN. Network connectivity is established and confirmed.
>
> The problem I am experiencing is that I cannot ping the domain name
> from the domain on the WAN. I have configured forwarders on the WAN
> DNS and can ping individual servers on the LAN domain, but not the
> domain name itself.
>
> Eg. I can ping server1.contoso. but not contoso. itself
>
> (To complicate matters, the LAN domain does not use RFC compliant
> naming; it is called "contoso" (or "contso.", I am not sure of the
> difference). I don't think that it is a problem as both are AD
> domains, but I thought it best to point out.)
>
> I suspect the problem is actually with the LAN domain itself, as when
> I log onto the domain controller server.contoso. I cannot ping either
> "contoso" or "contoso."
>
> My question is, what records need to be present in DNS to allow me to
> ping the domain name from the domain controller? In all our other
> domains, we can ping the domain name, eg example.com or example.zone.
>
> If run nslookup on the LAN domain controller ("server1.contoso") and
> enter "contso" it returns non-existant domain, however if I enter
> "contso." then it returns the IP address of the DNS server. This
> demonstrates that DNS is somewhat working.
>
> I understand that we will not be able to establish the trust until
> both servers can contact a domain controller on the other domain by
> resolving the domain name.
>
> I hope someone is able to help.
>
> Regards
>
> Phil
>



Reply With Quote
  #3  
Old 17-10-2008
PhilTeale
 
Posts: n/a
Re: Cannot ping Active Directory Domain Name

Hi Meinolf

Thanks for your reply.

We would love to rename the domain, but unfortunately it is not under our
control.

I have followed the steps in the document you linked to, and although the
secondary zones work, we still have the same problem; we cannot ping the
"domain" or "domain." domains from the WAN domain.

nslookup of "domain." on the WAN domain does resolve to the domain
controller on the LAN domain, but still the AD Trust Wizard fails on the WAN
domain because it is not able to contact the LAN domain.

Do you have any other ideas?

Cheers

Phil

"Meinolf Weber" wrote:

> Hello PhilTeale,
>
> See here for DNS setup for a trust:
> http://searchwinit.techtarget.com/ex...101656,00.html
>
> Also your domain names should look like "domain.local" instead of using single
> lable domain names like domain. See here:
> http://support.microsoft.com/kb/300684
>
> Did you ever thought about renaming the domain?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi
> >
> > I am trying to establish a trust from a WAN domain to a domain on a
> > LAN. Network connectivity is established and confirmed.
> >
> > The problem I am experiencing is that I cannot ping the domain name
> > from the domain on the WAN. I have configured forwarders on the WAN
> > DNS and can ping individual servers on the LAN domain, but not the
> > domain name itself.
> >
> > Eg. I can ping server1.contoso. but not contoso. itself
> >
> > (To complicate matters, the LAN domain does not use RFC compliant
> > naming; it is called "contoso" (or "contso.", I am not sure of the
> > difference). I don't think that it is a problem as both are AD
> > domains, but I thought it best to point out.)
> >
> > I suspect the problem is actually with the LAN domain itself, as when
> > I log onto the domain controller server.contoso. I cannot ping either
> > "contoso" or "contoso."
> >
> > My question is, what records need to be present in DNS to allow me to
> > ping the domain name from the domain controller? In all our other
> > domains, we can ping the domain name, eg example.com or example.zone.
> >
> > If run nslookup on the LAN domain controller ("server1.contoso") and
> > enter "contso" it returns non-existant domain, however if I enter
> > "contso." then it returns the IP address of the DNS server. This
> > demonstrates that DNS is somewhat working.
> >
> > I understand that we will not be able to establish the trust until
> > both servers can contact a domain controller on the other domain by
> > resolving the domain name.
> >
> > I hope someone is able to help.
> >
> > Regards
> >
> > Phil
> >

>
>
>

Reply With Quote
  #4  
Old 17-10-2008
Meinolf Weber
 
Posts: n/a
Re: Cannot ping Active Directory Domain Name

Hello PhilTeale,

How did you connect the domains? Can you also post and unedited ipconfig
/all from both.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi Meinolf
>
> Thanks for your reply.
>
> We would love to rename the domain, but unfortunately it is not under
> our control.
>
> I have followed the steps in the document you linked to, and although
> the secondary zones work, we still have the same problem; we cannot
> ping the "domain" or "domain." domains from the WAN domain.
>
> nslookup of "domain." on the WAN domain does resolve to the domain
> controller on the LAN domain, but still the AD Trust Wizard fails on
> the WAN domain because it is not able to contact the LAN domain.
>
> Do you have any other ideas?
>
> Cheers
>
> Phil
>
> "Meinolf Weber" wrote:
>
>> Hello PhilTeale,
>>
>> See here for DNS setup for a trust:
>> http://searchwinit.techtarget.com/ex...nswer/0,289625
>> ,sid1_gci1101656,00.html
>> Also your domain names should look like "domain.local" instead of
>> using single lable domain names like domain. See here:
>> http://support.microsoft.com/kb/300684
>>
>> Did you ever thought about renaming the domain?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi
>>>
>>> I am trying to establish a trust from a WAN domain to a domain on a
>>> LAN. Network connectivity is established and confirmed.
>>>
>>> The problem I am experiencing is that I cannot ping the domain name
>>> from the domain on the WAN. I have configured forwarders on the WAN
>>> DNS and can ping individual servers on the LAN domain, but not the
>>> domain name itself.
>>>
>>> Eg. I can ping server1.contoso. but not contoso. itself
>>>
>>> (To complicate matters, the LAN domain does not use RFC compliant
>>> naming; it is called "contoso" (or "contso.", I am not sure of the
>>> difference). I don't think that it is a problem as both are AD
>>> domains, but I thought it best to point out.)
>>>
>>> I suspect the problem is actually with the LAN domain itself, as
>>> when I log onto the domain controller server.contoso. I cannot ping
>>> either "contoso" or "contoso."
>>>
>>> My question is, what records need to be present in DNS to allow me
>>> to ping the domain name from the domain controller? In all our
>>> other domains, we can ping the domain name, eg example.com or
>>> example.zone.
>>>
>>> If run nslookup on the LAN domain controller ("server1.contoso") and
>>> enter "contso" it returns non-existant domain, however if I enter
>>> "contso." then it returns the IP address of the DNS server. This
>>> demonstrates that DNS is somewhat working.
>>>
>>> I understand that we will not be able to establish the trust until
>>> both servers can contact a domain controller on the other domain by
>>> resolving the domain name.
>>>
>>> I hope someone is able to help.
>>>
>>> Regards
>>>
>>> Phil
>>>



Reply With Quote
  #5  
Old 17-10-2008
PhilTeale
 
Posts: n/a
Re: Cannot ping Active Directory Domain Name

Hi

The WAN domain controller and the LAN domain controller are on the same
physical site. They are connected via Ethernet and it's one hop across a
Cisco router from one to the other. The other WAN domain controllers are
connected via Ethernet presented from an SDH fibre ring.

IP Config from WAN Domain Controller:

Windows IP Configuration

Host Name . . . . . . . . . . . . : dc1
Primary Dns Suffix . . . . . . . : contoso.wan
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : contoso.wan

Ethernet adapter Local Area Connection 3:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP Network Team #1
Physical Address. . . . . . . . . : 00-21-5A-4C-DF-02
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 172.76.90.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 172.76.90.250
DNS Servers . . . . . . . . . . . : 127.0.0.1
172.74.15.2


Ipconfig from LAN Domain Controller:

Configurazione IP di Windows

Nome host . . . . . . . . . . . . . . : SRV
Suffisso DNS primario . . . . . . . . : domain
Tipo nodo . . . . . . . . . . . . . . : Sconosciuto
Routing IP abilitato. . . . . . . . . : No
Proxy WINS abilitato . . . . . . . . : No
Elenco di ricerca suffissi DNS. . . . : domain

Scheda Ethernet Connessione alla rete locale (LAN):

Suffisso DNS specifico per connessione:
Descrizione . . . . . . . . . . . . . : Intel(R) PRO/1000 PL Network
on
Indirizzo fisico. . . . . . . . . . . : 00-30-48-89-2B-DA
DHCP abilitato. . . . . . . . . . . . : No
Indirizzo IP. . . . . . . . . . . . . : 192.168.1.4
Subnet mask . . . . . . . . . . . . . : 255.255.255.128
Gateway predefinito . . . . . . . . . : 192.168.1.100
Server DNS . . . . . . . . . . . . . : 127.0.0.1

It's in Italian, but I guess you can work out the important bits :-)

Cheers

Phil

"Meinolf Weber" wrote:

> Hello PhilTeale,
>
> How did you connect the domains? Can you also post and unedited ipconfig
> /all from both.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi Meinolf
> >
> > Thanks for your reply.
> >
> > We would love to rename the domain, but unfortunately it is not under
> > our control.
> >
> > I have followed the steps in the document you linked to, and although
> > the secondary zones work, we still have the same problem; we cannot
> > ping the "domain" or "domain." domains from the WAN domain.
> >
> > nslookup of "domain." on the WAN domain does resolve to the domain
> > controller on the LAN domain, but still the AD Trust Wizard fails on
> > the WAN domain because it is not able to contact the LAN domain.
> >
> > Do you have any other ideas?
> >
> > Cheers
> >
> > Phil
> >
> > "Meinolf Weber" wrote:
> >
> >> Hello PhilTeale,
> >>
> >> See here for DNS setup for a trust:
> >> http://searchwinit.techtarget.com/ex...nswer/0,289625
> >> ,sid1_gci1101656,00.html
> >> Also your domain names should look like "domain.local" instead of
> >> using single lable domain names like domain. See here:
> >> http://support.microsoft.com/kb/300684
> >>
> >> Did you ever thought about renaming the domain?
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> Hi
> >>>
> >>> I am trying to establish a trust from a WAN domain to a domain on a
> >>> LAN. Network connectivity is established and confirmed.
> >>>
> >>> The problem I am experiencing is that I cannot ping the domain name
> >>> from the domain on the WAN. I have configured forwarders on the WAN
> >>> DNS and can ping individual servers on the LAN domain, but not the
> >>> domain name itself.
> >>>
> >>> Eg. I can ping server1.contoso. but not contoso. itself
> >>>
> >>> (To complicate matters, the LAN domain does not use RFC compliant
> >>> naming; it is called "contoso" (or "contso.", I am not sure of the
> >>> difference). I don't think that it is a problem as both are AD
> >>> domains, but I thought it best to point out.)
> >>>
> >>> I suspect the problem is actually with the LAN domain itself, as
> >>> when I log onto the domain controller server.contoso. I cannot ping
> >>> either "contoso" or "contoso."
> >>>
> >>> My question is, what records need to be present in DNS to allow me
> >>> to ping the domain name from the domain controller? In all our
> >>> other domains, we can ping the domain name, eg example.com or
> >>> example.zone.
> >>>
> >>> If run nslookup on the LAN domain controller ("server1.contoso") and
> >>> enter "contso" it returns non-existant domain, however if I enter
> >>> "contso." then it returns the IP address of the DNS server. This
> >>> demonstrates that DNS is somewhat working.
> >>>
> >>> I understand that we will not be able to establish the trust until
> >>> both servers can contact a domain controller on the other domain by
> >>> resolving the domain name.
> >>>
> >>> I hope someone is able to help.
> >>>
> >>> Regards
> >>>
> >>> Phil
> >>>

>
>
>

Reply With Quote
  #6  
Old 17-10-2008
Meinolf Weber
 
Posts: n/a
Re: Cannot ping Active Directory Domain Name

Hello PhilTeale,

On WAN DC, what is the DNS server 172.74.15.2? This is not the WAN DCand
also from another subnet, but should be the WAN DC. Also do not use the loopback
address 127.0.0.1 use the real ip address the server has.

Loopback address on the LAN change also.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi
>
> The WAN domain controller and the LAN domain controller are on the
> same physical site. They are connected via Ethernet and it's one hop
> across a Cisco router from one to the other. The other WAN domain
> controllers are connected via Ethernet presented from an SDH fibre
> ring.
>
> IP Config from WAN Domain Controller:
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : dc1
> Primary Dns Suffix . . . . . . . : contoso.wan
> Node Type . . . . . . . . . . . . : Unknown
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : contoso.wan
> Ethernet adapter Local Area Connection 3:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP Network Team #1
> Physical Address. . . . . . . . . : 00-21-5A-4C-DF-02
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 172.76.90.1
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 172.76.90.250
> DNS Servers . . . . . . . . . . . : 127.0.0.1
> 172.74.15.2
> Ipconfig from LAN Domain Controller:
>
> Configurazione IP di Windows
>
> Nome host . . . . . . . . . . . . . . : SRV
> Suffisso DNS primario . . . . . . . . : domain
> Tipo nodo . . . . . . . . . . . . . . : Sconosciuto
> Routing IP abilitato. . . . . . . . . : No
> Proxy WINS abilitato . . . . . . . . : No
> Elenco di ricerca suffissi DNS. . . . : domain
> Scheda Ethernet Connessione alla rete locale (LAN):
>
> Suffisso DNS specifico per connessione:
> Descrizione . . . . . . . . . . . . . : Intel(R) PRO/1000 PL
> Network
> on
> Indirizzo fisico. . . . . . . . . . . : 00-30-48-89-2B-DA
> DHCP abilitato. . . . . . . . . . . . : No
> Indirizzo IP. . . . . . . . . . . . . : 192.168.1.4
> Subnet mask . . . . . . . . . . . . . : 255.255.255.128
> Gateway predefinito . . . . . . . . . : 192.168.1.100
> Server DNS . . . . . . . . . . . . . : 127.0.0.1
> It's in Italian, but I guess you can work out the important bits :-)
>
> Cheers
>
> Phil
>
> "Meinolf Weber" wrote:
>
>> Hello PhilTeale,
>>
>> How did you connect the domains? Can you also post and unedited
>> ipconfig /all from both.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi Meinolf
>>>
>>> Thanks for your reply.
>>>
>>> We would love to rename the domain, but unfortunately it is not
>>> under our control.
>>>
>>> I have followed the steps in the document you linked to, and
>>> although the secondary zones work, we still have the same problem;
>>> we cannot ping the "domain" or "domain." domains from the WAN
>>> domain.
>>>
>>> nslookup of "domain." on the WAN domain does resolve to the domain
>>> controller on the LAN domain, but still the AD Trust Wizard fails on
>>> the WAN domain because it is not able to contact the LAN domain.
>>>
>>> Do you have any other ideas?
>>>
>>> Cheers
>>>
>>> Phil
>>>
>>> "Meinolf Weber" wrote:
>>>
>>>> Hello PhilTeale,
>>>>
>>>> See here for DNS setup for a trust:
>>>> http://searchwinit.techtarget.com/ex...eAnswer/0,2896
>>>> 25
>>>> ,sid1_gci1101656,00.html
>>>> Also your domain names should look like "domain.local" instead of
>>>> using single lable domain names like domain. See here:
>>>> http://support.microsoft.com/kb/300684
>>>> Did you ever thought about renaming the domain?
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers
>>>> no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Hi
>>>>>
>>>>> I am trying to establish a trust from a WAN domain to a domain on
>>>>> a LAN. Network connectivity is established and confirmed.
>>>>>
>>>>> The problem I am experiencing is that I cannot ping the domain
>>>>> name from the domain on the WAN. I have configured forwarders on
>>>>> the WAN DNS and can ping individual servers on the LAN domain, but
>>>>> not the domain name itself.
>>>>>
>>>>> Eg. I can ping server1.contoso. but not contoso. itself
>>>>>
>>>>> (To complicate matters, the LAN domain does not use RFC compliant
>>>>> naming; it is called "contoso" (or "contso.", I am not sure of the
>>>>> difference). I don't think that it is a problem as both are AD
>>>>> domains, but I thought it best to point out.)
>>>>>
>>>>> I suspect the problem is actually with the LAN domain itself, as
>>>>> when I log onto the domain controller server.contoso. I cannot
>>>>> ping either "contoso" or "contoso."
>>>>>
>>>>> My question is, what records need to be present in DNS to allow me
>>>>> to ping the domain name from the domain controller? In all our
>>>>> other domains, we can ping the domain name, eg example.com or
>>>>> example.zone.
>>>>>
>>>>> If run nslookup on the LAN domain controller ("server1.contoso")
>>>>> and enter "contso" it returns non-existant domain, however if I
>>>>> enter "contso." then it returns the IP address of the DNS server.
>>>>> This demonstrates that DNS is somewhat working.
>>>>>
>>>>> I understand that we will not be able to establish the trust until
>>>>> both servers can contact a domain controller on the other domain
>>>>> by resolving the domain name.
>>>>>
>>>>> I hope someone is able to help.
>>>>>
>>>>> Regards
>>>>>
>>>>> Phil
>>>>>



Reply With Quote
Reply

  TechArena Community > Technical Support > Computer Help > Windows Server > Windows Server Help
Tags: , ,



Thread Tools Search this Thread
Search this Thread:

Advanced Search


Similar Threads for: "Cannot ping Active Directory Domain Name"
Thread Thread Starter Forum Replies Last Post
The Active Directory Domain Services is currently unavailable DHR Operating Systems 2 02-02-2013 03:41 AM
The Active Directory Domain Service is currently unavailable Gotbier Windows Vista Network 13 08-05-2012 11:19 AM
Active Directory Domain is not available tahoeartisan Networking & Security 8 11-02-2011 03:07 AM
An active directory Domain Controller for the domain could not becontacted in windows vista Business CheyeNnne Active Directory 7 28-12-2010 10:05 PM
Active Directory Domain Services Is Currently Not Available? Buriim Windows Vista Network 3 07-09-2008 05:47 PM


All times are GMT +5.5. The time now is 02:33 AM.