Problem when enabling Trust Relationship between domains

  • Thread starter Eduardo Sicouret
  • Start date
E

Eduardo Sicouret

Hello,

I get the following error when trying to establish a trust relationship
between 2 domains:
"The rpc server is unavailable"

Running the NETDIAG tool I get the following messages:

[warning] cannot find a primary authoritative DNS server for the name
'xxx@domainname' may not be registered in DNS

[warning] The DNS entries for this DC are not registered correctly on DNS
server 'xx.xx.xx.xx'. Please wait for 30 minutes for DNS server replication.

[FATAL] no DNS servers have the DNS records for this DC registered


I checked with the DNS administration tool and there's an entry for the DC.
I can ping the local DC as well as the one for the domain for which i want
to enable the trust relationship.

Any help will be appreciated.

Thanks in advance

Eduardo Sicouret
 
K

Kevin D. Goodknecht Sr. [MVP]

Eduardo said:
Hello,

I get the following error when trying to establish a trust
relationship between 2 domains:
"The rpc server is unavailable"

Running the NETDIAG tool I get the following messages:

[warning] cannot find a primary authoritative DNS server for the name
'xxx@domainname' may not be registered in DNS

[warning] The DNS entries for this DC are not registered correctly on
DNS server 'xx.xx.xx.xx'. Please wait for 30 minutes for DNS server
replication.

[FATAL] no DNS servers have the DNS records for this DC registered


I checked with the DNS administration tool and there's an entry for
the DC. I can ping the local DC as well as the one for the domain for
which i want to enable the trust relationship.

Before a trust can be set up, each PDC must be able to fully resolve the
domain to be trusted, not just the IP of the DC. Saying you can ping the DC,
means that you have ICMP connectivity, there are many ports and protocols
needed to create a trust.

That said, usually having a secondary zone, stub zone, or a Conditional
forwarder for the trusted domain should be all you need to resolve the
trusted domain, but you'll need full unhendered connectivity for the domain
ports.

Q179442 - How to Configure a Firewall for Domains and Trusts:
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q179442
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top