Re: About Adam Replication Traffic

From: Dmitri Gavrilov [MSFT] (dmitrig_at_online.microsoft.com)
Date: 08/10/04 

Date: Tue, 10 Aug 2004 15:55:34 -0700

:)

The reason I said "Hmm..." is because ADAM uses GetComputerName (or a
variation of thereof, don't remember exactly) to publish its name to the
directory. This is the name that every other replication partner will use to
connect to this instance.

A task runs every hour and checks the name in the directory. If ADAM detects
that the current dnsHostName of the machine (the one returned by
GetComputerName) does not match the dnsHostName that is stored in the DIT,
then it connects to one of its replication partners (a random one) and
updates its own dnsHostName there. This way it ensures that other partners
will discover that his name is changed. Clearly, the whole thing breaks if
you have two instances and you rename them both simultaneously. In this
case, the admin is responsible for updating the dnsHostNames in at least one
of them. ADAM swears loudly in the logs when it detects this situation.

Coming back to the original problem... Thus, your only option is to make
sure that *everybody else* uses a private NIC, while ADAM uses the default
one. I think this will be pretty difficult.

Why do you want to do this? 

-- 
Dmitri Gavrilov
SDE, Active Directory Core
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Lee Flight" <lef@le.ac.uk-nospam> wrote in message
news:O3uH0lyfEHA.2536@TK2MSFTNGP09.phx.gbl...
> Looking harder at the netmon trace I think *subsequent* replication took
> place
> over the public interfaces, in agreement with what would be expected by
> looking
> at the output from repadmin. It had to as the private DNS names never
appear
> as end-points,
> if I modify dnsHostName on the Server objects
>
> repadmin /showconn
>
> shows the private names as the links but
>
> repadmin /showrepl
>
> still shows the (usual) DNS name of the server for the (end-point)
Address.
>
> The moral of this is never under-estimate the amount of insight that
> goes into a "Hmm."  :)
>
> Lee Flight
>
> "Lee Flight" <lef@le.ac.uk-nospam> wrote in message
> news:e0QkhDyfEHA.1092@TK2MSFTNGP11.phx.gbl...
> > After the replicas had sync'ed subsequent
> > modifications to the application partition could be seen to take place
> > over the private
> > interfaces.
> >
> > I restarted both intstances, retested and replication took place over
the
> > private
> > interfaces. The oddity for me in this is that looking at the output of
> >
> > repadmin /showrepl
> >
> > the Address field for all replicated naming contexts on these instances
> > shows the
> > <public interface DNS name>:GUID
> >
> > but that is not what the transport appears to be using...
>
>

Relevant Pages

  • Re: About Adam Replication Traffic
    ... I would like do it for separate a ADAM replication traffic from other ... network traffic fot not occupy the band.(i have 5 ADAM istance on 5 Server) ... This is the name that every other replication partner will use ... > GetComputerName) does not match the dnsHostName that is stored in the DIT, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Creating a Computer Object in ADAM
    ... I've never replicated an ADAM ... Win 2003 server down to my instance, but fails from my XP instance ... 'The attempt to establish a replication link for the following writable ... Source directory service address: ...
    (microsoft.public.windows.server.active_directory)
  • Re: MS ADAM/AD: Absolute simplest repl/sync solution for MS ADAM on 2 or more WinXP machines?
    ... I would think you could look at it like this: The replication requires ... directory service for clients to query as needed. ... > Each client instance of ADAM will be used by a single user on that WinXP ...
    (microsoft.public.windows.server.active_directory)
  • Re: Moving an ADAM instance
    ... The problem you are having is that ADAM doesn't have its own account policy, it is entirely dependent on the machine's policy and it sounds like the two machines have different password policies. ... I am having some trouble moving an ADAM instance from one physica server to another. ... When looking through the user properties, I noticed that ms-DS-UserPasswordExpired was set to TRUE in the replication instance, but not in the publishing instance. ...
    (microsoft.public.windows.server.active_directory)
  • 15 seconds
    ... What I wanted to know is, if I make changes to ADAM#1, once the replication ... > Connect and bind to the configuration directory partition of the ADAM ... > instance for which you want to configure the replication schedule. ...
    (microsoft.public.windows.server.active_directory)
Loading