Windows 2003: problemen met Active Directory

[Verwijderd]

Op een Windows 2003 (prod-03) draait een SharePoint Portal. Gebruikers voor dit portal staan in Active Directory op een andere W2003 server (prod-02), moeten in een bepaalde OU staan in AD en moeten lid zijn van een bepaalde groep om in te mogen loggen op het portal. Gebruikers worden onderhouden in een ASP.NET-applicatie. Als een nieuwe gebruiker wordt toegevoegd, wordt er een record aangemaakt in een database in SQL Server. Ook wordt er een nieuw userobject in AD aangemaakt onder de juiste OU en worden de juiste memberships toegevoegd aan dit userobject. De applicatie communiceert met AD via ADSI.
In de communicatie met Active Directory, gaat er soms iets mis bij het ophalen van een userobject. We krijgen regelmatig een COM-exception die ADSI teruggeeft: the server is not operational. Als dit gebeurt, kan er dus niet gebabbeld worden met Active Directory. Het ligt denk ik niet aan onze applicatie, want we praten met de Active Directory zoals Microsoft dit gedocumenteerd heeft.

Ik heb dcdiag uitgevoerd op de prod-02 server. prod-02 is de enige domain controller. De uitkomst hiervan:

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\PROD-02
Starting test: Connectivity
......................... PROD-02 passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\PROD-02
Starting test: Replications
......................... PROD-02 passed test Replications
Starting test: NCSecDesc
......................... PROD-02 passed test NCSecDesc
Starting test: NetLogons
......................... PROD-02 passed test NetLogons
Starting test: Advertising
......................... PROD-02 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... PROD-02 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... PROD-02 passed test RidManager
Starting test: MachineAccount
......................... PROD-02 passed test MachineAccount
Starting test: Services
......................... PROD-02 passed test Services
Starting test: ObjectsReplicated
......................... PROD-02 passed test ObjectsReplicated
Starting test: frssysvol
......................... PROD-02 passed test frssysvol
Starting test: frsevent
......................... PROD-02 passed test frsevent
Starting test: kccevent
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 10:59:50
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:01:06
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:01:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:01:14
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:01:15
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800004C0
Time Generated: 06/29/2006 11:02:27
Event String: Internal event: An LDAP client connection was

An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:03:31
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:05:28
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:05:56
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800004C0
Time Generated: 06/29/2006 11:06:27
Event String: Internal event: An LDAP client connection was

An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:06:42
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:07:49
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:08:21
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:10:12
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:10:46
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:12:41
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:13:11
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:13:20
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:13:27
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:13:27
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:13:27
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:13:27
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:13:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:13:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:13:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00005C9
Time Generated: 06/29/2006 11:13:56
(Event String could not be retrieved)
......................... PROD-02 failed test kccevent
Starting test: systemlog
......................... PROD-02 passed test systemlog
Starting test: VerifyReferences
......................... PROD-02 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : PROD
Starting test: CrossRefValidation
......................... PROD passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... PROD passed test CheckSDRefDom

Running enterprise tests on : PROD.Local
Starting test: Intersite
......................... PROD.Local passed test Intersite
Starting test: FsmoCheck
......................... PROD.Local passed test FsmoCheck

Er gaat één test fout: PROD-02 failed test kccevent.

Wat is er hier aan de hand en weet hoe ik dit kan oplossen?

[Verwijderd]

wat staat er in je event logs op het moment dat de connectie fout gaat?

[Verwijderd]

is dit de enige dc?

staat op de portal server deze dc als enige als dns server?

[gerhald]

wat zijn de dns instellingen en zo

en staat de aplicatie op een andere server dan de DC ?

zoja kan je mischien gaan snifferen om te gaan kijken wat er met de pakketen gebeurd.

want het kan ook nog zo zijn dat het paket niet goed de aanvraag doet en daar door de DC niet het goede antwoord terug kan geven