Issues with replication on ADAM, when running as NETWORK SERVICE on all instances

jayesh_seshadri · 12-03-2008, 03:10 PM

We are trying to use ADAM (ADAM SP1) as a component of a distributed application, running Windows Server 2003.

We installed the first ADAM instance on machine X, [FQDN: x.y.com] with no issues.
X is part of the domain y, and y's DC correctly lists the computer X as part of the domain.
NETWORK SERVICE account has default credentials, that ship with win2003.

We installed a replica of the first ADAM instance on machine Z [FQDN: z.y.com], with the same environment properties as X, again designated to run as NETWORK SERVICE.

We however seem to have issues with data replicating across from Z to X, and vice-versa.

All firewalls are disabled on both machines.

Event viewer logs on Z for the ADAM instance source have the following message:

-------------------------------------------------------------------------------------------------------------
The attempt to establish a replication link for the following writable directory partition failed.
Directory partition:
CN=Schema,CN=Configuration,CN={03879B26-81A6-450F-BECA-720A057749DF}
Source directory service:
CN=NTDS Settings,CN=X$INSTANCENAME,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,CN={03879B26-81A6-450F-BECA-720A057749DF}
Source directory service address:
x.y.com:922152c0-5377-4366-abbd-747612d83535
Intersite transport (if any):

This directory service will be unable to replicate with the source directory service until this problem is corrected.
User Action
Verify if the source directory service is accessible or network connectivity is available.

Additional Data
Error value:
5 Access is denied.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
-------------------------------------------------------------------------------------------------------------

We are hitting the "5 Access is denied." message only on running ADAM service as NETWORK SERVICE.
Installing ADAM to run as a domain user with admin credentials does not lead to the same error.

I guess we are pretty sure this is an environment/setup issue, but are baffled, since the machines are running Win2k3 pretty much out of the box, and we haven't touched the NETWORK SERVICE security credentials/permissions et al on either machine.
We have tried rebooting both machines, but that did not help.
We have verified that the machines are able to ping each other, and since all's well when running ADAM as a domain user, we are clueless as to whats going wrong.

Could this be related to something to do with the domain controller?

12-03-2008, 03:10 PM	#1 (permalink)
jayesh_seshadri Registered User Join Date: Dec 2008 Posts: 1 OS: Windows 2003 Server, Windows 2008 Server	Issues with replication on ADAM, when running as NETWORK SERVICE on all instances We are trying to use ADAM (ADAM SP1) as a component of a distributed application, running Windows Server 2003. We installed the first ADAM instance on machine X, [FQDN: x.y.com] with no issues. X is part of the domain y, and y's DC correctly lists the computer X as part of the domain. NETWORK SERVICE account has default credentials, that ship with win2003. We installed a replica of the first ADAM instance on machine Z [FQDN: z.y.com], with the same environment properties as X, again designated to run as NETWORK SERVICE. We however seem to have issues with data replicating across from Z to X, and vice-versa. All firewalls are disabled on both machines. Event viewer logs on Z for the ADAM instance source have the following message: ------------------------------------------------------------------------------------------------------------- The attempt to establish a replication link for the following writable directory partition failed. Directory partition: CN=Schema,CN=Configuration,CN={03879B26-81A6-450F-BECA-720A057749DF} Source directory service: CN=NTDS Settings,CN=X$INSTANCENAME,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,CN={03879B26-81A6-450F-BECA-720A057749DF} Source directory service address: x.y.com:922152c0-5377-4366-abbd-747612d83535 Intersite transport (if any): This directory service will be unable to replicate with the source directory service until this problem is corrected. User Action Verify if the source directory service is accessible or network connectivity is available. Additional Data Error value: 5 Access is denied. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. ------------------------------------------------------------------------------------------------------------- We are hitting the "5 Access is denied." message only on running ADAM service as NETWORK SERVICE. Installing ADAM to run as a domain user with admin credentials does not lead to the same error. I guess we are pretty sure this is an environment/setup issue, but are baffled, since the machines are running Win2k3 pretty much out of the box, and we haven't touched the NETWORK SERVICE security credentials/permissions et al on either machine. We have tried rebooting both machines, but that did not help. We have verified that the machines are able to ping each other, and since all's well when running ADAM as a domain user, we are clueless as to whats going wrong. Could this be related to something to do with the domain controller?