ldap problem

J

Jan Eide

Hi,

I need expert help, I don't have a clue on this one. There are 5 AD domains
involved in this problem:

mycompany.com
sub1.mycompany.com
sub2.mycomapny.com
sub3.mycomapny.com
sub4.mycomapny.com

on a computer in sub1.mycomapny.com I want to give a user in the
mycomapny.com domain access to a file. Then I get the error "cannot display
object from the location because of the following error: the server is not
operational"

There are no problems if I try to select a user from sub2.mycompany.com.

So I tried the same from a computer in the sub.mycompany.com domain, and
there were no problems.

Then I started troubleshooting, and ended up concluding that I have a LDAP
problem. This article did not really help me much:
http://support.microsoft.com/default.aspx?scid=kb;en-us;223321&Product=win2000

If I use ldp.exe from a computer in the sub1 domain I can not connect to the
mycomapny.com domain on port 389. But if I try on port 636 everything works.

When I do the same from the sub2 domain, everything works as expected.

Then I try from sub3, same problems as sub1. And then I try in sub4, and as
with sub2 it works.

Why won't my domainscontrollers in the "mother domain" reposnd to all my
child domains when they use port 389?

What are the similarities between sub1 and sub3 were it does not work? They
are both connected trough the use of w2k RRAS server and a VPN connection
over the internet.

Same goes for sub2 and sub4, but there the RRAS is running on the PDC in the
domain (these domains only have 1 DC, no member servers). These is the only
relevant differences I can find between the troubled domains and the ones
that work OK.

Maybe some of my findings are misleading, but I'm stuck and really need
somebody to look at this and maybe get a better view of it than I have.

Best regards,

Jan Eide
MCSE:Security w2k
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top