Replication

[Guest]

I have two W2K servers, one of which is the DC. I have built a new W2K3
server to replace the W2K DC. While conducting domain/forest inventory, I
first ran a "repadmin /showreps, which seems to display successful
replications on both servers. I subsequently forced a replication on both the
W2K servers which SOMETIMES gives me either one of the following results
depending upon the time (15-30 minutes apart) the force replication is
initiated:

- "Active Directory has replicated the connections"

OR

- "The RPC server is unavailable. This condition may be caused by a DNS
lookup problem..."

I don't want to proceed with the addprep and DCPromo of the W2K3 server and
be unsuccessful until I know that the latter error above is non-fatal. I have
struggled with this project for months until I had to place it on the
backburner to tend to higher priority projects. I have recently resumed
working on this project and need some assistance. Any light you can shed on
this will be greatly appreciated

 

[Herb Martin]

I have two W2K servers, one of which is the DC. I have built a new W2K3
server to replace the W2K DC.

You really should have at least two DCs whenever possible.

While conducting domain/forest inventory, I
first ran a "repadmin /showreps, which seems to display successful
replications on both servers. I subsequently forced a replication on both
the
W2K servers which SOMETIMES gives me either one of the following results
depending upon the time (15-30 minutes apart) the force replication is
initiated:

- "Active Directory has replicated the connections"

OR

- "The RPC server is unavailable. This condition may be caused by a DNS
lookup problem..."

I don't want to proceed with the addprep and DCPromo of the W2K3 server
and
be unsuccessful until I know that the latter error above is non-fatal.

There is something odd above you need to clarify -- you state you have ONE
DC, in which case there is nothing replicating.

Replication occurs primarily between DCs of the same domain, to a lesser
extent
(not much in fact) between DCs of the same forest.

I have
struggled with this project for months until I had to place it on the
backburner to tend to higher priority projects. I have recently resumed
working on this project and need some assistance. Any light you can shed
on
this will be greatly appreciated

You cannot complete the ForestPrep or ADPrep until you have full
replication.

This could be a problem if you have ever (in the past) had another DC which
was physically removed from the network but never officially removed as a DC
(i.e., by DCPromo).

If this is the case you must clean up the AD with "NTDSUtil metadata
cleanup".

Just Google for this or something like the following:

[ NTDSUtil "metadata cleanup" remove DC | domain ]

 

[Guest]

Herb,
Ran the NETDIAG /fix and the DCDIAG /c on both servers. Here are the
results:

--SERVER "A"--

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\SO_DNS
Starting test: Connectivity
SO_DNS's server GUID DNS name could not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name

(8314bc3b-b2de-4e97-8ded-f2d469ee45be._msdcs.so.co.contra-costa.ca.us)
couldn't be resolved, the server name
(so_dns.so.co.contra-costa.ca.us) resolved to the IP address
(1.16.10.6) and was pingable. Check that the IP address is
registered
correctly with the DNS server.
......................... SO_DNS failed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\SO_DNS
Skipping all tests, because server SO_DNS is
not responding to directory service requests

Running enterprise tests on : so.co.contra-costa.ca.us
Starting test: Intersite
......................... so.co.contra-costa.ca.us passed test
Intersit
e
Starting test: FsmoCheck
......................... so.co.contra-costa.ca.us passed test
FsmoChec
k

C:\Program Files\Support Tools>

C:\Program Files\Support Tools>netdiag /fix

...........................................

Computer Name: SO_DNS
DNS Host Name: so_dns.so.co.contra-costa.ca.us
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 8 Stepping 3, GenuineIntel
List of installed hotfixes :
KB822343
KB823182
KB823559
KB824105
KB825119
KB826232
KB828035
KB828749
KB832353
KB832359
KB835732
KB841356
KB885836
Q147222
Update Rollup 1


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : so_dns.so.co.contra-costa.ca.us
IP Address . . . . . . . . : 1.16.10.6
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 1.16.1.2
Primary WINS Server. . . . : 1.46.10.5
Secondary WINS Server. . . : 1.16.10.6
Dns Servers. . . . . . . . : 1.16.10.6
1.46.10.5
10.10.11.50
206.13.28.12


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
No remote names have been found.

WINS service test. . . . . : Passed

Ipx configration
Network Number . . . . : 02551002
Node . . . . . . . . . : 0002a50a64d0
Frame type . . . . . . : 802.3



Adapter : IPX Internal Interface

Netcard queries test . . . : Passed

Ipx configration
Network Number . . . . : 00000000
Node . . . . . . . . . : 000000000001
Frame type . . . . . . : Ethernet II



Adapter : IpxLoopbackAdapter

Netcard queries test . . . : Passed

Ipx configration
Network Number . . . . : 02551002
Node . . . . . . . . . : 0002a50a64d0
Frame type . . . . . . : 802.2



Adapter : NDISWANIPX

Netcard queries test . . . : Passed

Ipx configration
Network Number . . . . : 00000000
Node . . . . . . . . . : 5c1a20524153
Frame type . . . . . . : Ethernet II




Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{3828944E-4682-40B4-AFDC-5ED294F3361B}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
[WARNING] The DNS host name 'so_dns.so.co.contra-costa.ca.us' valid only
on
Windows 2000 DNS Servers. [DNS_ERROR_NON_RFC_NAME]
PASS - All the DNS entries for DC are registered on DNS server
'1.16.10.6'.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{3828944E-4682-40B4-AFDC-5ED294F3361B}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{3828944E-4682-40B4-AFDC-5ED294F3361B}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC
'so_dns.so.co.contra-costa.
ca.us'.


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed


Netware configuration
You are not logged in to your preferred server .
Netware User Name. . . . . . . :
Netware Server Name. . . . . . :
Netware Tree Name. . . . . . . :
Netware Workstation Context. . :

IP Security test . . . . . . . . . : Skipped
The IPSec Policy Agent service is not started.


The command completed successfully

C:\Program Files\Support Tools>netdiag /fix


--SERVER B--

C:\Program Files\Support Tools>dcdiag /c

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\SO-RECORDS-SVR1
Starting test: Connectivity
SO-RECORDS-SVR1's server GUID DNS name could not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name

(520f68ce-ac05-41fd-a87a-5474788284a1._msdcs.so.co.contra-costa.ca.us)
couldn't be resolved, the server name
(so-records-svr1.DiscImage.so.co.contra-costa.ca.us) resolved to the
IP address (1.46.10.5) and was pingable. Check that the IP address
is
registered correctly with the DNS server.
......................... SO-RECORDS-SVR1 failed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\SO-RECORDS-SVR1
Skipping all tests, because server SO-RECORDS-SVR1 is
not responding to directory service requests

Running enterprise tests on : so.co.contra-costa.ca.us
Starting test: Intersite
......................... so.co.contra-costa.ca.us passed test
Intersit
e
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
A Global Catalog Server could not be located - All GC's are down.
......................... so.co.contra-costa.ca.us failed test
FsmoCheck

C:\Program Files\Support Tools>netdiag /fix

...........................................

Computer Name: SO-RECORDS-SVR1
DNS Host Name: so-records-svr1.DiscImage.so.co.contra-costa.ca.us
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 8 Stepping 3, GenuineIntel
List of installed hotfixes :
KB822343
KB822831
KB823182
KB823559
KB823980
KB824105
KB824146
KB825119
KB826232
KB828035
KB828749
KB832353
KB832359
KB835732
KB841356
KB885836
Q147222
Update Rollup 1


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : so-records-svr1.so.co.contra-costa.ca.us
IP Address . . . . . . . . : 1.46.10.5
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 1.46.1.1
Primary WINS Server. . . . : 1.16.0.104
Secondary WINS Server. . . : 1.16.10.6
Dns Servers. . . . . . . . : 1.16.10.6
1.46.10.5
206.13.28.12
1.16.10.6
1.16.10.31


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Passed

Ipx configration
Network Number . . . . : 02551018
Node . . . . . . . . . : 0002a507c3d0
Frame type . . . . . . : 802.3



Adapter : IPX Internal Interface

Netcard queries test . . . : Passed

Ipx configration
Network Number . . . . : 00000000
Node . . . . . . . . . : 000000000001
Frame type . . . . . . : Ethernet II



Adapter : IpxLoopbackAdapter

Netcard queries test . . . : Passed

Ipx configration
Network Number . . . . : 02551018
Node . . . . . . . . . : 0002a507c3d0
Frame type . . . . . . : 802.2



Adapter : NDISWANIPX

Netcard queries test . . . : Passed

Ipx configration
Network Number . . . . : 00000000
Node . . . . . . . . . : ea8920524153
Frame type . . . . . . : Ethernet II




Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{FDF932F1-ADE8-42AA-BE36-C598E6CB5B84}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'1.16.10.6'.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{FDF932F1-ADE8-42AA-BE36-C598E6CB5B84}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{FDF932F1-ADE8-42AA-BE36-C598E6CB5B84}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed


Netware configuration
You are not logged in to your preferred server .
Netware User Name. . . . . . . :
Netware Server Name. . . . . . :
Netware Tree Name. . . . . . . :
Netware Workstation Context. . :

IP Security test . . . . . . . . . : Skipped
The IPSec Policy Agent service is not started.


The command completed successfully

C:\Program Files\Support Tools>

Let me know what you think. Thanks much.

--
Chuck Durley
Network Analyst

I have two W2K servers, one of which is the DC. I have built a new W2K3
server to replace the W2K DC.

You really should have at least two DCs whenever possible.

While conducting domain/forest inventory, I
first ran a "repadmin /showreps, which seems to display successful
replications on both servers. I subsequently forced a replication on both
the
W2K servers which SOMETIMES gives me either one of the following results
depending upon the time (15-30 minutes apart) the force replication is
initiated:

- "Active Directory has replicated the connections"

OR

- "The RPC server is unavailable. This condition may be caused by a DNS
lookup problem..."

I don't want to proceed with the addprep and DCPromo of the W2K3 server
and
be unsuccessful until I know that the latter error above is non-fatal.

There is something odd above you need to clarify -- you state you have ONE
DC, in which case there is nothing replicating.

Replication occurs primarily between DCs of the same domain, to a lesser
extent
(not much in fact) between DCs of the same forest.

I have
struggled with this project for months until I had to place it on the
backburner to tend to higher priority projects. I have recently resumed
working on this project and need some assistance. Any light you can shed
on
this will be greatly appreciated

You cannot complete the ForestPrep or ADPrep until you have full
replication.

This could be a problem if you have ever (in the past) had another DC which
was physically removed from the network but never officially removed as a DC
(i.e., by DCPromo).

If this is the case you must clean up the AD with "NTDSUtil metadata
cleanup".

Just Google for this or something like the following:

[ NTDSUtil "metadata cleanup" remove DC | domain ]

 

[Herb Martin]

Herb,
Ran the NETDIAG /fix and the DCDIAG /c on both servers. Here are the
results:

--SERVER "A"--

(8314bc3b-b2de-4e97-8ded-f2d469ee45be._msdcs.so.co.contra-costa.ca.us)
couldn't be resolved, the server name
(so_dns.so.co.contra-costa.ca.us) resolved to the IP address
(1.16.10.6) and was pingable. Check that the IP address is
registered
correctly with the DNS server.
......................... SO_DNS failed test Connectivity

So you failed at least the DNS in Site SO_DNS.


Also in a single domain forest ALL of your DCs should be DCs, especially
if you are swapping out DCs.

Remember to transfer the Single Master Roles (aka FSMO) to the new DC
before you remove the old one.

Plus every machines needs to know about the new DNS (and WINS Server
if any) before you remove the old one.

 

[Guest]

Herb,
I ran the Netdiag /fix on both DC's and followed-up by forcing
replication on both servers successfully and lastly I ran the DCDiag /c on
both servers. The results are pretty clean (all other test passed) but I
would like your opinion on the printer errors I received when I ran the
DCDiag on both servers. Are these printer errors fatal? Also I would like
your thoughts on the LDAP error received when I ran the NetDiag /fix on
Server "A". I believe we're almost there. Thanks again for your help.

===SERVER "A" NETDIAG===

C:\Program Files\Support Tools>netdiag /fix

...........................................

Computer Name: SO_DNS
DNS Host Name: so_dns.so.co.contra-costa.ca.us
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 8 Stepping 3, GenuineIntel
List of installed hotfixes :
KB822343
KB823182
KB823559
KB824105
KB825119
KB826232
KB828035
KB828749
KB832353
KB832359
KB835732
KB841356
KB885836
Q147222
Update Rollup 1


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : so_dns.so.co.contra-costa.ca.us
IP Address . . . . . . . . : 1.16.10.6
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 1.16.1.2
Primary WINS Server. . . . : 1.46.10.5
Secondary WINS Server. . . : 1.16.10.6
Dns Servers. . . . . . . . : 1.16.10.6


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Passed

Ipx configration
Network Number . . . . : 02551002
Node . . . . . . . . . : 0002a50a64d0
Frame type . . . . . . : 802.3



Adapter : IPX Internal Interface

Netcard queries test . . . : Passed

Ipx configration
Network Number . . . . : 00000000
Node . . . . . . . . . : 000000000001
Frame type . . . . . . : Ethernet II



Adapter : IpxLoopbackAdapter

Netcard queries test . . . : Passed

Ipx configration
Network Number . . . . : 02551002
Node . . . . . . . . . : 0002a50a64d0
Frame type . . . . . . : 802.2



Adapter : NDISWANIPX

Netcard queries test . . . : Passed

Ipx configration
Network Number . . . . : 00000000
Node . . . . . . . . . : 5c1a20524153
Frame type . . . . . . : Ethernet II




Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{3828944E-4682-40B4-AFDC-5ED294F3361B}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
[WARNING] The DNS host name 'so_dns.so.co.contra-costa.ca.us' valid only
on
Windows 2000 DNS Servers. [DNS_ERROR_NON_RFC_NAME]
PASS - All the DNS entries for DC are registered on DNS server
'1.16.10.6'.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{3828944E-4682-40B4-AFDC-5ED294F3361B}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{3828944E-4682-40B4-AFDC-5ED294F3361B}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC
'so_dns.so.co.contra-costa.
ca.us'.


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed


Netware configuration
You are not logged in to your preferred server .
Netware User Name. . . . . . . :
Netware Server Name. . . . . . :
Netware Tree Name. . . . . . . :
Netware Workstation Context. . :

IP Security test . . . . . . . . . : Skipped
The IPSec Policy Agent service is not started.


The command completed successfully

C:\Program Files\Support Tools>


===SERVER "A" DCDIAG===

C:\Program Files\Support Tools>dcdiag /c

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\SO_DNS
Starting test: Connectivity
......................... SO_DNS passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\SO_DNS
Starting test: Replications
......................... SO_DNS passed test Replications
Starting test: Topology
......................... SO_DNS passed test Topology
Starting test: CutoffServers
......................... SO_DNS passed test CutoffServers
Starting test: NCSecDesc
......................... SO_DNS passed test NCSecDesc
Starting test: NetLogons
......................... SO_DNS passed test NetLogons
Starting test: Advertising
......................... SO_DNS passed test Advertising
Starting test: KnowsOfRoleHolders
......................... SO_DNS passed test KnowsOfRoleHolders
Starting test: RidManager
......................... SO_DNS passed test RidManager
Starting test: MachineAccount
......................... SO_DNS passed test MachineAccount
Starting test: Services
......................... SO_DNS passed test Services
Starting test: OutboundSecureChannels
** Did not run Outbound Secure Channels test
because /testdomain: was not entered
......................... SO_DNS passed test OutboundSecureChannels
Starting test: ObjectsReplicated
......................... SO_DNS passed test ObjectsReplicated
Starting test: frssysvol
......................... SO_DNS passed test frssysvol
Starting test: kccevent
......................... SO_DNS passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x0000168E
Time Generated: 03/30/2007 11:24:21
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 03/30/2007 11:38:43
Event String: Driver Eltron TLP2242 required for printer
An Error Event occured. EventID: 0x00000452
Time Generated: 03/30/2007 11:38:43
Event String: The printer could not be installed.
An Error Event occured. EventID: 0x00000457
Time Generated: 03/30/2007 11:38:43
Event String: Driver HP Mobile Printing PS required for printer
An Error Event occured. EventID: 0x00000452
Time Generated: 03/30/2007 11:38:43
Event String: The printer could not be installed.
An Error Event occured. EventID: 0x00000457
Time Generated: 03/30/2007 11:43:15
Event String: Driver Eltron TLP2242 required for printer
An Error Event occured. EventID: 0x00000452
Time Generated: 03/30/2007 11:43:15
Event String: The printer could not be installed.
An Error Event occured. EventID: 0x00000457
Time Generated: 03/30/2007 11:43:15
Event String: Driver HP Mobile Printing PS required for printer
An Error Event occured. EventID: 0x00000452
Time Generated: 03/30/2007 11:43:15
Event String: The printer could not be installed.
......................... SO_DNS failed test systemlog

Running enterprise tests on : so.co.contra-costa.ca.us
Starting test: Intersite
......................... so.co.contra-costa.ca.us passed test
Intersit
e
Starting test: FsmoCheck
......................... so.co.contra-costa.ca.us passed test
FsmoChec
k

C:\Program Files\Support Tools>

===SERVER "B" DCDIAG===

Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 03/30/2007 11:23:04
Event String: Driver Eltron TLP2242 required for printer
An Error Event occured. EventID: 0x00000452
Time Generated: 03/30/2007 11:23:04
Event String: The printer could not be installed.
An Error Event occured. EventID: 0x00000457
Time Generated: 03/30/2007 11:23:04
Event String: Driver HP Mobile Printing PS required for printer
An Error Event occured. EventID: 0x00000452
Time Generated: 03/30/2007 11:23:04
Event String: The printer could not be installed.
......................... SO-RECORDS-SVR1 failed test systemlog

 

[Herb Martin]

Herb,
I ran the Netdiag /fix on both DC's and followed-up by forcing
replication on both servers successfully and lastly I ran the DCDiag /c on
both servers. The results are pretty clean (all other test passed) but I
would like your opinion on the printer errors I received when I ran the
DCDiag on both servers.

They are nothing to the DC "as a DC".

Are these printer errors fatal?

And may be nothing at all (anymore):

DCDiag reports errors appearing in the System Log -- it will do this forever
until the System Log is cleared.

So after taking any action you deem useful (or recording the error for later
review), clear the system log and wait to see if the "printer error"
returns.

If not, then DCDiag will have nothing to report. DCs have no dependence
on printers (except as ordinary clients would use a printer.)

Also I would like
your thoughts on the LDAP error received when I ran the NetDiag /fix on
Server "A". I believe we're almost there. Thanks again for your help.

That isn't really an "LDAP error" but rather another DNS problem:

LDAP test. . . . . . . . . . . . . : Passed

[WARNING] Failed to query SPN registration on DC
'so_dns.so.co.contra-costa.ca.us'.