Prev: Event ID 100 Every few seconds
Next: RAMDUMP*.log
From: jspr on 29 Nov 2006 22:29
I am running Exchange server 2003 sp2 on windows 2003 sp1 with two
domain controllers running 2003 as well. The problem is exchange will
periodically quick working, I get a windows system event saying it
cannot do an LDAP bind with either of the DCs when I restart windows
time service on the DCs email starts going again. Time is in the right
Time zones and set correctly on all servers. Any suggestions? Thanks

From: Kirill Palagin on 30 Nov 2006 08:21
Can we see complete unedited event from event log? What happens after
you get that event?

jspr wrote:
> I am running Exchange server 2003 sp2 on windows 2003 sp1 with two
> domain controllers running 2003 as well. The problem is exchange will
> periodically quick working, I get a windows system event saying it
> cannot do an LDAP bind with either of the DCs when I restart windows
> time service on the DCs email starts going again. Time is in the right
> Time zones and set correctly on all servers. Any suggestions? Thanks
>

--
If my message is helpful, please help me by registering at
http://www.openoffice.org/servlets/Join and voting for the following issues:
http://www.openoffice.org/issues/show_bug.cgi?id=70753
http://www.openoffice.org/issues/show_bug.cgi?id=15220
http://www.openoffice.org/issues/show_bug.cgi?id=10931
http://www.openoffice.org/issues/show_bug.cgi?id=35579
http://www.openoffice.org/issues/show_bug.cgi?id=32785
http://www.openoffice.org/issues/show_bug.cgi?id=29807
http://www.openoffice.org/issues/show_bug.cgi?id=67838
http://www.openoffice.org/issues/show_bug.cgi?id=39527
http://www.openoffice.org/issues/show_bug.cgi?id=64785

Thank you very much!
From: jspr on 30 Nov 2006 09:34
Thanks a lot for your reply

I get one of these errors for each domain controller in system:

Source LSASRV ID 40960
The Security System detected an authentication error for the server
ldap/<domain controller name>. The failure code from authentication
protocol Kerberos was "The time at the Primary Domain Controller is
different than the time at the Backup Domain Controller or member
server by too large an amount.
(0xc0000133)".


or more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

And the follwoing in application

--The exchange server is read operating system and version rights on
the domain controllers

Source: DSACCESS id: 4112

Process STORE.EXE (PID=1084). Exchange Server <name> does not have
Audit Security Privilege on Domain Controller <name>. This Domain
Controller will not be used by DSAccess.

Source: DSACCESS id: 2116

Process STORE.EXE (PID=1084). The Domain Controller <name> is running
(Unknown Operating System) (Unknown Service Pack). DSAccess requires
that Domain Controllers that run Windows 2000 have at least Service
Pack 3 installed.


Source: MSEXCHANGEAL id: 8026

LDAP Bind was unsuccessful on directory <BDC Name> for distinguished
name ''. Directory returned error:[0x52] Local Error.

Source: MSEXCHANGEDSACCESS id: 2102

Process MAD.EXE (PID=3068). All Domain Controller Servers in use are
not responding:
List of all DCs


Source: MSEXCHANGEDSACCESS id: 2103

Process MAD.EXE (PID=3068). All Global Catalog Servers in use are not
responding:
PDC for Global Catalog

Source: MSEXHCANGESA id: 9154

DSACCESS returned an error '0x80004005' on DS notification. Microsoft
Exchange System Attendant will re-set DS notification later.

Source: MSExchangeIS Public Store id: 1024

NT AUTHORITY\SYSTEM was unable to log on as NT AUTHORITY\SYSTEM to the
Public Folder Store "First Storage Group\Public Folder Store (Exchange
Server name)".

Source: MSExchangeIS id: 9662

There was an error obtaining the Unsolicited Commercial Email default
filter level from the directory. The error code was 0x80004005. The
value remains at 5.

Source: MSEXCHANGEDSACCESS id: 2114

Process STORE.EXE (PID=1084). Topology Discovery failed, error
0x80040952.




Kirill Palagin wrote:
> Can we see complete unedited event from event log? What happens after
> you get that event?
>
> jspr wrote:
> > I am running Exchange server 2003 sp2 on windows 2003 sp1 with two
> > domain controllers running 2003 as well. The problem is exchange will
> > periodically quick working, I get a windows system event saying it
> > cannot do an LDAP bind with either of the DCs when I restart windows
> > time service on the DCs email starts going again. Time is in the right
> > Time zones and set correctly on all servers. Any suggestions? Thanks
> >
>
> --
> If my message is helpful, please help me by registering at
> http://www.openoffice.org/servlets/Join and voting for the following issues:
> http://www.openoffice.org/issues/show_bug.cgi?id=70753
> http://www.openoffice.org/issues/show_bug.cgi?id=15220
> http://www.openoffice.org/issues/show_bug.cgi?id=10931
> http://www.openoffice.org/issues/show_bug.cgi?id=35579
> http://www.openoffice.org/issues/show_bug.cgi?id=32785
> http://www.openoffice.org/issues/show_bug.cgi?id=29807
> http://www.openoffice.org/issues/show_bug.cgi?id=67838
> http://www.openoffice.org/issues/show_bug.cgi?id=39527
> http://www.openoffice.org/issues/show_bug.cgi?id=64785
>
> Thank you very much!

From: Kirill Palagin on 30 Nov 2006 14:10
Yep, this is the problem. You have to fix time difference first.
Is the time really different on involved servers?
What happens if you manually set correct time on all servers? Does it
drift then?
Do you see any events from W32Time? Have you tried to troubleshoot errors?
Have you tried manually synch time (either with net time \\pdc-emulator
/set /yes or with 3rd party apps)?

jspr wrote:
> Thanks a lot for your reply
>
> I get one of these errors for each domain controller in system:
>
> Source LSASRV ID 40960
> The Security System detected an authentication error for the server
> ldap/<domain controller name>. The failure code from authentication
> protocol Kerberos was "The time at the Primary Domain Controller is
> different than the time at the Backup Domain Controller or member
> server by too large an amount.
> (0xc0000133)".
>
> <snip>

--
If my message is helpful, please help me by registering at www.openoffice.org and voting for the following issues:
http://www.openoffice.org/issues/show_bug.cgi?id=70753
http://www.openoffice.org/issues/show_bug.cgi?id=15220
http://www.openoffice.org/issues/show_bug.cgi?id=10931
http://www.openoffice.org/issues/show_bug.cgi?id=35579
http://www.openoffice.org/issues/show_bug.cgi?id=32785
http://www.openoffice.org/issues/show_bug.cgi?id=1035
http://www.openoffice.org/issues/show_bug.cgi?id=67838
http://www.openoffice.org/issues/show_bug.cgi?id=39527
http://www.openoffice.org/issues/show_bug.cgi?id=64785

Thank you very much!
 | 
Pages: 1
Prev: Event ID 100 Every few seconds
Next: RAMDUMP*.log