Forum Discussion
AD Replication Error 1908 (Source DSA)
Hi all,
I’m troubleshooting an Active Directory replication issue (error 1908 – “Could not find the domain controller”) in a multi-site environment with 16 domain controllers across multiple locations.
The problematic Domain Controller (Site A-DC) is displaying a 6% failure in the replication summary with the 1908 error code in the Source DSA but the Destination DSA do not display any errors. If I replsummary in other DCs, I will see the same result. However, If I run the showrepl command, the result displays all successful replications with no errors.
A-DC is used as a replication path and holds the FSMOs roles (Site A is the main DC) and I believe it is also affecting DFSR replication from Site A-FS server to the other file servers. A-FS uses A-DC as its logon server.
The below is what I have verified:
- I have verified that forward and reversed lookup zones have the correct DNS records (Checked SRV records _ldap._tcp.dc._msdcs, _kerberos._tcp, and IP addresses)
- All the DCs resolve correctly A and PTR records
- nltest /dsgetdc:domain.com successfully returns domain controller
- Confirmed Secure channel to be true in A-FS
- Verified KDC is running in A-DC (I have not trying purging the KDC tickets yet but doubt this will resolve the issue)
Troubleshooting performed:
- flushed/re-registered DNS
- Restarted netlogon services
- Time sync wouldn't have a play here since all the other DCs are syncing with A-DC.
Any guidance or similar experiences would be greatly appreciated.
Miguel
4 Replies
Were any changes made to your environment since the last time replication worked, if so what change was made? What is the DNS configuration of this DC, is it pointing to itself and another DC in the same AD Site? When you run repadmin /showrepl from this DC does it show successfull from all the INBOUND NEIGHBORS? What are the error messages, if any? When you run repadmin /replsummary from this DC what result do you see? When you run repadmin /syncall /Aped does push replication complete to any of the DCs?
Hello Miguel,
Ok, for this kind of issue, i can see there's some errors with the KDC. It's either the target KDC or the A-DC itself which is experiencing some issues. So :- : Make sure the KDS (Key Distribution Service) is running on the Domain Controller (the right one, KDC)
- Please, can you lookup in to the logs Event ID : 1925,1926, 1943 and 1125 .
- And check this out , it might help :
https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/ad-replication-error-1908-not-find-domain-controller
Best .
I forgot to mention that the DCs are Windows server 2022 and there are a few that are 2019
I forgot to mention that the DCs are windows server 2022 and there are a few that are Win server 2019.
