Understanding DFSR debug logging (Part 12: Domain Controller Bind and Config Polling on Windows Server 2008)

In this log we will see the DFSR service being started and follow the process of initialization up to the point where the service is fully functional. This is useful to understand in order to troubleshoot issues where problems within Active Directory, Network Communication, XML reading, or Registry reading are preventing the DFSR service from starting or initializing for replication.  

 

(svcstartandpolling – Dfsr00009 – 2008.log)

 

These are two Windows Server 2008 servers called 2008MEM01 and 2008MEM02 in the fabrikam.com domain. The log is from 2008MEM01 where the DFSR service was started. It’s is participating in the TESTRG replication group for the TESTRF replicated folder and its only partner is 2008MEM02.

 

<Upstream> 20080624 14:41:09.203  852 CREG   733 Config::RegConfig::ReadConfigFilePath Location of valueName:Replica Set Configuration File is location:\.C:SYSTEM VOLUME INFORMATIONDFSRConfigReplica_7C81CA1E-F956-4A9E-BCE5-E3A2D1ACDD1D.XML ß find the path to XML from registry

<Upstream> 20080624 14:41:09.203  852 FCFG   131 Configuration::ReadVolumeConfig Reading all volume configuration files.

<Upstream> 20080624 14:41:09.203  852 CREG   733 Config::RegConfig::ReadConfigFilePath Location of valueName:Volume Configuration File is location:\.C:System Volume InformationDFSRConfigVolume_6A7E9F21-4169-11DD-AF51-806E6F6E6963.XML ß find path to XML from registry

<Upstream> 20080624 14:41:09.203  852 CXML  2748 Config::XmlReader::PostProcessVolumeConfig Found volume. path:\.C: volumeId:{6A7E9F21-4169-11DD-AF51-806E6F6E6963}

<Upstream> 20080624 14:41:09.203  852 CXML  2757 Config::XmlReader::PostProcessVolumeConfig Overwriting dbPath. oldPath:\.C:System Volume InformationDFSR newPath:\.C:System Volume InformationDFSR ß location of the DFSR database is forced into XML

<Upstream> 20080624 14:41:19.208  852 CFAD   317 Config::AdConnection::Connect Binding to dcAddr:\10.60.0.1 dcDnsName:\2008DC01.fabrikam.com

<Upstream> 20080624 14:41:19.208  852 CFAD   149 Config::AdConnection::BindToAd Trying to connect. hostName:2008DC01.fabrikam.com

<Upstream> 20080624 14:41:19.238  852 CFAD   168 Config::AdConnection::BindToAd Bound. hostName:2008DC01.fabrikam.com

<Upstream> 20080624 14:41:19.238  852 CFAD   205 Config::AdConnection::BindToDc Try to bind. hostName:\2008DC01.fabrikam.com domainName:<null>

<Upstream> 20080624 14:41:19.318  852 CFAD   215 Config::AdConnection::BindToDc Bound. hostName:\2008DC01.fabrikam.com domainName:<null> ß five lines above cover the bind to DC we will use until DFSR service is restarted (it does not matter if DC goes offline; we will then use the XML files that were read in above instead)

<Upstream> 20080624 14:41:19.318  852 CFAD  7530 Config::AdConfig::ReadRootNamingContexts Default Naming Context DN:DC=fabrikam,DC=com

<Upstream> 20080624 14:41:19.318  852 CFAD  7531 Config::AdConfig::ReadRootNamingContexts Schema Naming Context DN:cn=sites,cn=configuration,dc=fabrikam,dc=com

<Upstream> 20080624 14:41:19.318  852 CFAD  7533 Config::AdConfig::ReadRootNamingContexts Services DN:cn=services,cn=configuration,dc=fabrikam,dc=com

<Upstream> 20080624 14:41:19.318  852 CFAD  7534 Config::AdConfig::ReadRootNamingContexts Domain Controllers DN:ou=domain controllers,DC=fabrikam,DC=com

<Upstream> 20080624 14:41:19.318  852 CFAD  7535 Config::AdConfig::ReadRootNamingContexts Computers DN:cn=computers,DC=fabrikam,DC=com

<Upstream> 20080624 14:41:19.318  852 CFAD  7536 Config::AdConfig::ReadRootNamingContexts System DN:cn=system,DC=fabrikam,DC=com

<Upstream> 20080624 14:41:19.318  852 CFAD  7537 Config::AdConfig::ReadRootNamingContexts Sites DN:cn=sites,cn=configuration,dc=fabrikam,dc=com ß We find the above seven naming contexts, as they may all include DFSR-related information (including SYSVOL information or DFSN usage).

<Upstream> 20080624 14:41:19.328  852 CFAD  7697 Config::AdConfig::CheckSchemaVersion DMD object:CN=Schema,CN=Configuration,DC=fabrikam,DC=com, objectVersion:44 ß Schema version is checked so that service knows if DFSR is supported by the forest

<Upstream> 20080624 14:41:19.368  852 CREG  1207 Config::RegReader::IsSysVolCommitFlagSet key: SystemCurrentControlSetServicesDFSRParametersSysVolsDemoting SysVols valueName:’SysVol Information is Committed’ result:0

<Upstream> 20080624 14:41:19.378  852 EVNT   725 EventLog::Report Logging eventId:1206 parameterCount:1

<Upstream> 20080624 14:41:19.378  852 EVNT   745 EventLog::Report         eventId:1206 parameter1:\2008DC01.fabrikam.com ß event log is updated with 1206 to reflect which DC was bound

<Upstream> 20080624 14:41:19.398  852 ADWR  1038 Config::AdWriter::CreateSysVolObjects [SYSVOL] IsDc:0 isSysVolCreated:0

<Upstream> 20080624 14:41:19.398  852 ADWR  1041 Config::AdWriter::CreateSysVolObjects [SYSVOL] Not a DC ß determine that this server is not a DC and SYSVOL operations will not be possible

<Upstream> 20080624 14:41:19.448  852 CFAD  7348 Config::AdConfig::TranslateDn Cracked Domain:fabrikam.com

<Upstream> 20080624 14:41:19.448  852 CFAD  7349 Config::AdConfig::TranslateDn Cracked Name  :FABRIKAM2008MEM02$ ß get NetBIOS SAM name of DFSR partner server given the above domain

<Upstream> 20080624 14:41:19.448  852 CFAD  7348 Config::AdConfig::TranslateDn Cracked Domain:fabrikam.com

<Upstream> 20080624 14:41:19.448  852 CFAD  7349 Config::AdConfig::TranslateDn Cracked Name  :S-1-5-21-2013982821-2378084203-3048728933-1104 <-get domain SID of DFSR partner server given the above domain

<Upstream> 20080624 14:41:19.458  852 CCTX  1251 VolumeIdTable::Rebuild Processing volume:\?Volume{6a7e9f21-4169-11dd-af51-806e6f6e6963} path:\.C: serialNumber:5236588249460846150 ß find volumes and their serial numbers

<Upstream> 20080624 14:41:19.478  852 CCTX  1099 VolumeIdTable::ReadVolumeInfo Ignoring volume:\?Volume{6a7e9f24-4169-11dd-af51-806e6f6e6963} (remote, cd-rom or removable)

<Upstream> 20080624 14:41:19.478  852 CCTX  1099 VolumeIdTable::ReadVolumeInfo Ignoring volume:\?Volume{6a7e9f25-4169-11dd-af51-806e6f6e6963} (remote, cd-rom or removable)

<Upstream> 20080624 14:41:19.578  852 CFAD  8625 Config::AdConfig::UpdateSpn Binding to dcAddr:\10.60.0.1 dcDnsName:\2008DC01.fabrikam.com

<Upstream> 20080624 14:41:19.578  852 CFAD  8653 Config::AdConfig::UpdateSpn spnList:Dfsr-12F9A27C-BF97-4787-9364-D31B6C55EB04/2008mem01.fabrikam.com

<Upstream> 20080624 14:41:19.578  852 CFAD  8659 Config::AdConfig::UpdateSpn SPN already registered. spn:Dfsr-12F9A27C-BF97-4787-9364-D31B6C55EB04/2008mem01.fabrikam.com ß