Regresar
-
Título
Setting up QAS in a DMZ RODC (Read Only Domain Controller) environment. RODC VAS_ERR_DNS: DNS record lookup failed -
Descripción
Setting up QAS in a DMZ RODC (Read Only Domain Controller) environment. You may receive the error "ERROR: Could not join to the domain" if you try to join normally.
Getting the following error when trying to join to Active Directory and RODC in the environment:
VAS_ERR_DNS: DNS record lookup failedUnable to discover ANY domain controllers.Caused by:KRB5_KDC_UNREACH (-1765328228): Cannot contact any KDC for requested realm -
Causa
RODCs by default, do not register themselves in the Global DNS zone.
-
Resolución
When handling a DMZ RODC setup you must do one of the following as RODC's will not be returned in the standard DNS lookups for the domain:1. Join to the specific RODCs servers.# /opt/quest/bin/vastool -u <admin> join yourdomain.com rodc1.yourdomain.com rodc2.yourdomain.com2) Join including the AD site name that the RODCs belong to# /opt/quest/bin/vastool -u <admin> join -s RODC-SITE yourdomain.com3) Modify the RODCs to register in the global DNS zone, so they are returned during a normal query. Please reference Microsoft materials or contact them for help with this procedure.