DNS rejects queries after NIC replacement
Hi Everybody.... Recently I had to change a NIC in one Win2003 server with Sharepoint 2007 and Reporting Services 2005... The domain in Win2008 with two DCs in the same site and IP segment... The Win2003 server is a member server and apparently is working fine: it can query the DNS and Admins can log in, however when Sharepoint user calls reporting server, the connection fails with a "denied access" error (if user uses the server's IP address in the URL, it connects)... I just reconfigured the new NIC with the old settings and no changes were done in any other component. I have verified the configuration and is the same the server had before... The logs does not tell me anything conclusive... But last night, making tests, I could see that when try to register server in DNS that fails with this error: C:\WINDOWS>ipconfig /registerdns Windows IP Configuration Registration of DNS records failed: Access is denied. I've searched in Internet but the articles are about XP troubleshooting and so on... I think may the NIC replacement could affect the authentication of the server in domain... I don't know... Please help me, it's a very critical issue because managers and executives read reports ONLY through this server...
June 18th, 2011 10:00am

What'a in the system event log? Regards, Dave Patrick .... Microsoft Certified Professional Microsoft MVP [Windows]
Free Windows Admin Tool Kit Click here and download it now
June 18th, 2011 6:44pm

Hi Dave... I was not working for the complany in the time server was deployed, so I've been discovering some things in it. I was looking the server apparently was configured as a node of server farm and NLB node. And I saw an event in the logs that caught my attention. Event Type: Error Event Source: Kerberos Event Category: None Event ID: 4 Date: 6/17/2011 Time: 2:38:37 PM User: N/A Computer: SHAREPOINT Description: The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/sharepoint.domain.local. The target name used was HTTP/intranet. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (DOMAIN.LOCAL), and the client realm. Please contact your system administrator. May be I needed to desinstall or disable something before reinstall new NIC??? Is there now two connections internally recognized by the OS???. I forgot to mention that the server has three IP's assigned to the same NIC (two used by IIS sites) one of them is the IP to access the INTRANET server where Sharepoint page is hosted. If I type the URL from a client workstation invoking the Reporting Services using the server name, it fails but if I use the IP address then it connects. So at first look I think it's a DNS issue, but when you tests the server resolves names using the DNS without problems. Also users authenticate well.RNAVARRETE
June 19th, 2011 10:14pm

Hi , No the error is more related to client's credential authentication with the sharepoint. Client using IE 7/8/9 and using windows authentication initiates the connectivity with IIS 7 , and the virtual directory configured for the website authenticate the domain user based on the apppool id which you have configured on the IIS. IIS will impersonate the credentials and sends its own credentials to the sharepoint server, now sharepoint will forward the request to SQL BI database. To understand better, enable the following logs a) IIS logging b) SP logging c) SSRS logging and d) SQL trace logging. when you analzye the SSRS logs you would quite understand the calls being made and report back to us if you are seeing errors related to the kerberos with the user name ur using. Also there might be a SQL double hop issue which you can find out from the SSRS logs ( just check for the ANONYMOUS logons in the log.
Free Windows Admin Tool Kit Click here and download it now
June 19th, 2011 10:36pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics