Ldap bind failed with error 1326

Ldap bind failed with error 1326

This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Asked by:

Question

Hi All: I have a small 2008R2 domain with several DCs. The AD «administrator» account was not set up with «password never expires», so I have been resetting the password every 3 months.

I noticed recently that I’m getting group policy replication failures, and dcdiag is showing

Starting test: KnowsOfRoleHolders
[SERVER1] DsBindWithSpnEx() failed with error 5,
Access is denied..
Warning: SERVER1is the Schema Owner, but is not responding to DS RPC
Bind.
[SERVER1] LDAP bind failed with error 1326,
Logon failure: unknown user name or bad password..

Is this related to the password expiration on the «administrator» account? If not, what do I need to do to resolve the issue?

This error is not related to «Administrator» account.

There are many causes for this issue, like DNS pointing is not correct, more than 5 minutes time skew between DC, Secure channel issue, Connectivity problem between DC, etc.

And refer this KB article for advanced troubleshooting:
Troubleshooting AD Replication error 5: Access is denied
http://support.microsoft.com/kb/2002013

Abhijit Waikar.
MCSA | MCSA:Messaging | MCITP:SA | MCC:2012
Blog: http://abhijitw.wordpress.com
Disclaimer: This posting is provided «AS IS» with no warranties or guarantees and confers no rights.

this seems to belong to connectivity problems within the domain/DCs. Lets start with an unedited ipconfig /all from ALL DC/DNS servers you use, so we can verify some basic settings.

Is any of your DCs cloned or created from an image that is NOT prepared with sysprep?

Hopefully you use ONLY the domain DNS servers on the NIC and none else like the ISPs one?

Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP — Directory Services
My Blog: http://msmvps.com/blogs/mweber/

Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

this seems to belong to connectivity problems within the domain/DCs. Lets start with an unedited ipconfig /all from ALL DC/DNS servers you use, so we can verify some basic settings.

Is any of your DCs cloned or created from an image that is NOT prepared with sysprep?

Hopefully you use ONLY the domain DNS servers on the NIC and none else like the ISPs one?

Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP — Directory Services
My Blog: http://msmvps.com/blogs/mweber/

Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Thanks Meinholf and Abhijit. I’ve been trying to run through the various links and confirm the settings.

All the servers have a private «LAN» NIC and a public «WAN» NIC. The «LAN» NIC is configured as the first NIC on each server, and on each server, the NS is set to two of the other DCs (there are three DCs in total). I have a forwarder set on each of the DCs (all 3 are running DNS) with the external NS from my colo facility.

I did not set up an authoritative timeserver on the PDC, but all the DCs are using microsoft timeservers and are all synchronized (no time gaps between servers).

All the DCs are normally set up 2008 R2 Standard (no cloning), and on each one I ran DCPROMO. I presume DCPROMO enables all the necessary ports on the firewall, but I didn’t check through the entire list of ports yet. All the firewalls have the AD-related ACLs enabled (they were set up automatically). IPv6 is enabled on all LAN adapters without any manual config.

Источник

Ldap bind failed with error 1326

This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Answered by:

Question

I’m trying to set up DFS between two DCs, the old SERVER, a 2008 box, and the new SERVER2012, a 2012r2 box. I’m logged in as the Domain Administrator and everything seemed to set up okay without any issues, however no replication is happening.

I ran DCDIAG on SERVER2012 and it passed fine. When I ran it on SERVER, it came back with the error message in the title — LDAP bind failed with error 1326 unknown user or bad password. I Googled for hours and haven’t found anything remotely helpful. I’m hoping that once I get this error resolved, I’ll be able to get the DFS issue put to bed as well. Any help would be greatly appreciated.

Just to add to extra info:

* Both machines ping each other by IP and name

* NSLOOKUPs work fine on both machines

* DNS set up so each DC points to the other as main and themselves as secondary

* REPADMIN /SYNCALL and /REPLSUMMARY run with no errors on both machines

No Error MSGS on either machine regarding DNS

Error MSGS on each machine that involve DFS:

SERVER — DFSR 1202

SERVER2012 — DFSR 4612 and 5002

Thanks in advance for any help you can offer.

Источник

Ldap bind failed with error 1326

This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Answered by:

Question

I’m trying to set up DFS between two DCs, the old SERVER, a 2008 box, and the new SERVER2012, a 2012r2 box. I’m logged in as the Domain Administrator and everything seemed to set up okay without any issues, however no replication is happening.

I ran DCDIAG on SERVER2012 and it passed fine. When I ran it on SERVER, it came back with the error message in the title — LDAP bind failed with error 1326 unknown user or bad password. I Googled for hours and haven’t found anything remotely helpful. I’m hoping that once I get this error resolved, I’ll be able to get the DFS issue put to bed as well. Any help would be greatly appreciated.

Just to add to extra info:

* Both machines ping each other by IP and name

* NSLOOKUPs work fine on both machines

* DNS set up so each DC points to the other as main and themselves as secondary

* REPADMIN /SYNCALL and /REPLSUMMARY run with no errors on both machines

No Error MSGS on either machine regarding DNS

Error MSGS on each machine that involve DFS:

SERVER — DFSR 1202

SERVER2012 — DFSR 4612 and 5002

Thanks in advance for any help you can offer.

Источник

Ldap bind failed with error 1326

This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Asked by:

Question

Hi All: I have a small 2008R2 domain with several DCs. The AD «administrator» account was not set up with «password never expires», so I have been resetting the password every 3 months.

I noticed recently that I’m getting group policy replication failures, and dcdiag is showing

Starting test: KnowsOfRoleHolders
[SERVER1] DsBindWithSpnEx() failed with error 5,
Access is denied..
Warning: SERVER1is the Schema Owner, but is not responding to DS RPC
Bind.
[SERVER1] LDAP bind failed with error 1326,
Logon failure: unknown user name or bad password..

Is this related to the password expiration on the «administrator» account? If not, what do I need to do to resolve the issue?

This error is not related to «Administrator» account.

There are many causes for this issue, like DNS pointing is not correct, more than 5 minutes time skew between DC, Secure channel issue, Connectivity problem between DC, etc.

And refer this KB article for advanced troubleshooting:
Troubleshooting AD Replication error 5: Access is denied
http://support.microsoft.com/kb/2002013

Abhijit Waikar.
MCSA | MCSA:Messaging | MCITP:SA | MCC:2012
Blog: http://abhijitw.wordpress.com
Disclaimer: This posting is provided «AS IS» with no warranties or guarantees and confers no rights.

this seems to belong to connectivity problems within the domain/DCs. Lets start with an unedited ipconfig /all from ALL DC/DNS servers you use, so we can verify some basic settings.

Is any of your DCs cloned or created from an image that is NOT prepared with sysprep?

Hopefully you use ONLY the domain DNS servers on the NIC and none else like the ISPs one?

Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP — Directory Services
My Blog: http://msmvps.com/blogs/mweber/

Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

this seems to belong to connectivity problems within the domain/DCs. Lets start with an unedited ipconfig /all from ALL DC/DNS servers you use, so we can verify some basic settings.

Is any of your DCs cloned or created from an image that is NOT prepared with sysprep?

Hopefully you use ONLY the domain DNS servers on the NIC and none else like the ISPs one?

Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP — Directory Services
My Blog: http://msmvps.com/blogs/mweber/

Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Thanks Meinholf and Abhijit. I’ve been trying to run through the various links and confirm the settings.

All the servers have a private «LAN» NIC and a public «WAN» NIC. The «LAN» NIC is configured as the first NIC on each server, and on each server, the NS is set to two of the other DCs (there are three DCs in total). I have a forwarder set on each of the DCs (all 3 are running DNS) with the external NS from my colo facility.

I did not set up an authoritative timeserver on the PDC, but all the DCs are using microsoft timeservers and are all synchronized (no time gaps between servers).

All the DCs are normally set up 2008 R2 Standard (no cloning), and on each one I ran DCPROMO. I presume DCPROMO enables all the necessary ports on the firewall, but I didn’t check through the entire list of ports yet. All the firewalls have the AD-related ACLs enabled (they were set up automatically). IPv6 is enabled on all LAN adapters without any manual config.

Источник

Ldap bind failed with error 1326

This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Answered by:

Question

I’m trying to set up DFS between two DCs, the old SERVER, a 2008 box, and the new SERVER2012, a 2012r2 box. I’m logged in as the Domain Administrator and everything seemed to set up okay without any issues, however no replication is happening.

I ran DCDIAG on SERVER2012 and it passed fine. When I ran it on SERVER, it came back with the error message in the title — LDAP bind failed with error 1326 unknown user or bad password. I Googled for hours and haven’t found anything remotely helpful. I’m hoping that once I get this error resolved, I’ll be able to get the DFS issue put to bed as well. Any help would be greatly appreciated.

Just to add to extra info:

* Both machines ping each other by IP and name

* NSLOOKUPs work fine on both machines

* DNS set up so each DC points to the other as main and themselves as secondary

* REPADMIN /SYNCALL and /REPLSUMMARY run with no errors on both machines

No Error MSGS on either machine regarding DNS

Error MSGS on each machine that involve DFS:

SERVER — DFSR 1202

SERVER2012 — DFSR 4612 and 5002

Thanks in advance for any help you can offer.

Источник

Ldap bind failed with error 1326

This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Answered by:

Question

I’m trying to set up DFS between two DCs, the old SERVER, a 2008 box, and the new SERVER2012, a 2012r2 box. I’m logged in as the Domain Administrator and everything seemed to set up okay without any issues, however no replication is happening.

I ran DCDIAG on SERVER2012 and it passed fine. When I ran it on SERVER, it came back with the error message in the title — LDAP bind failed with error 1326 unknown user or bad password. I Googled for hours and haven’t found anything remotely helpful. I’m hoping that once I get this error resolved, I’ll be able to get the DFS issue put to bed as well. Any help would be greatly appreciated.

Just to add to extra info:

* Both machines ping each other by IP and name

* NSLOOKUPs work fine on both machines

* DNS set up so each DC points to the other as main and themselves as secondary

* REPADMIN /SYNCALL and /REPLSUMMARY run with no errors on both machines

No Error MSGS on either machine regarding DNS

Error MSGS on each machine that involve DFS:

SERVER — DFSR 1202

SERVER2012 — DFSR 4612 and 5002

Thanks in advance for any help you can offer.

Источник

Ldap bind failed with error 1326

This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Asked by:

Question

Hi All: I have a small 2008R2 domain with several DCs. The AD «administrator» account was not set up with «password never expires», so I have been resetting the password every 3 months.

I noticed recently that I’m getting group policy replication failures, and dcdiag is showing

Starting test: KnowsOfRoleHolders
[SERVER1] DsBindWithSpnEx() failed with error 5,
Access is denied..
Warning: SERVER1is the Schema Owner, but is not responding to DS RPC
Bind.
[SERVER1] LDAP bind failed with error 1326,
Logon failure: unknown user name or bad password..

Is this related to the password expiration on the «administrator» account? If not, what do I need to do to resolve the issue?

All replies

This error is not related to «Administrator» account.

There are many causes for this issue, like DNS pointing is not correct, more than 5 minutes time skew between DC, Secure channel issue, Connectivity problem between DC, etc.

And refer this KB article for advanced troubleshooting:
Troubleshooting AD Replication error 5: Access is denied
http://support.microsoft.com/kb/2002013

Abhijit Waikar.
MCSA | MCSA:Messaging | MCITP:SA | MCC:2012
Blog: http://abhijitw.wordpress.com
Disclaimer: This posting is provided «AS IS» with no warranties or guarantees and confers no rights.

this seems to belong to connectivity problems within the domain/DCs. Lets start with an unedited ipconfig /all from ALL DC/DNS servers you use, so we can verify some basic settings.

Is any of your DCs cloned or created from an image that is NOT prepared with sysprep?

Hopefully you use ONLY the domain DNS servers on the NIC and none else like the ISPs one?

Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP — Directory Services
My Blog: http://msmvps.com/blogs/mweber/

Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

this seems to belong to connectivity problems within the domain/DCs. Lets start with an unedited ipconfig /all from ALL DC/DNS servers you use, so we can verify some basic settings.

Is any of your DCs cloned or created from an image that is NOT prepared with sysprep?

Hopefully you use ONLY the domain DNS servers on the NIC and none else like the ISPs one?

Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP — Directory Services
My Blog: http://msmvps.com/blogs/mweber/

Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Thanks Meinholf and Abhijit. I’ve been trying to run through the various links and confirm the settings.

All the servers have a private «LAN» NIC and a public «WAN» NIC. The «LAN» NIC is configured as the first NIC on each server, and on each server, the NS is set to two of the other DCs (there are three DCs in total). I have a forwarder set on each of the DCs (all 3 are running DNS) with the external NS from my colo facility.

I did not set up an authoritative timeserver on the PDC, but all the DCs are using microsoft timeservers and are all synchronized (no time gaps between servers).

All the DCs are normally set up 2008 R2 Standard (no cloning), and on each one I ran DCPROMO. I presume DCPROMO enables all the necessary ports on the firewall, but I didn’t check through the entire list of ports yet. All the firewalls have the AD-related ACLs enabled (they were set up automatically). IPv6 is enabled on all LAN adapters without any manual config.

Источник

Ldap bind failed with error 1326

This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Asked by:

Question

Hi All: I have a small 2008R2 domain with several DCs. The AD «administrator» account was not set up with «password never expires», so I have been resetting the password every 3 months.

I noticed recently that I’m getting group policy replication failures, and dcdiag is showing

Starting test: KnowsOfRoleHolders
[SERVER1] DsBindWithSpnEx() failed with error 5,
Access is denied..
Warning: SERVER1is the Schema Owner, but is not responding to DS RPC
Bind.
[SERVER1] LDAP bind failed with error 1326,
Logon failure: unknown user name or bad password..

Is this related to the password expiration on the «administrator» account? If not, what do I need to do to resolve the issue?

All replies

This error is not related to «Administrator» account.

There are many causes for this issue, like DNS pointing is not correct, more than 5 minutes time skew between DC, Secure channel issue, Connectivity problem between DC, etc.

And refer this KB article for advanced troubleshooting:
Troubleshooting AD Replication error 5: Access is denied
http://support.microsoft.com/kb/2002013

Abhijit Waikar.
MCSA | MCSA:Messaging | MCITP:SA | MCC:2012
Blog: http://abhijitw.wordpress.com
Disclaimer: This posting is provided «AS IS» with no warranties or guarantees and confers no rights.

this seems to belong to connectivity problems within the domain/DCs. Lets start with an unedited ipconfig /all from ALL DC/DNS servers you use, so we can verify some basic settings.

Is any of your DCs cloned or created from an image that is NOT prepared with sysprep?

Hopefully you use ONLY the domain DNS servers on the NIC and none else like the ISPs one?

Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP — Directory Services
My Blog: http://msmvps.com/blogs/mweber/

Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

this seems to belong to connectivity problems within the domain/DCs. Lets start with an unedited ipconfig /all from ALL DC/DNS servers you use, so we can verify some basic settings.

Is any of your DCs cloned or created from an image that is NOT prepared with sysprep?

Hopefully you use ONLY the domain DNS servers on the NIC and none else like the ISPs one?

Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP — Directory Services
My Blog: http://msmvps.com/blogs/mweber/

Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Thanks Meinholf and Abhijit. I’ve been trying to run through the various links and confirm the settings.

All the servers have a private «LAN» NIC and a public «WAN» NIC. The «LAN» NIC is configured as the first NIC on each server, and on each server, the NS is set to two of the other DCs (there are three DCs in total). I have a forwarder set on each of the DCs (all 3 are running DNS) with the external NS from my colo facility.

I did not set up an authoritative timeserver on the PDC, but all the DCs are using microsoft timeservers and are all synchronized (no time gaps between servers).

All the DCs are normally set up 2008 R2 Standard (no cloning), and on each one I ran DCPROMO. I presume DCPROMO enables all the necessary ports on the firewall, but I didn’t check through the entire list of ports yet. All the firewalls have the AD-related ACLs enabled (they were set up automatically). IPv6 is enabled on all LAN adapters without any manual config.

Источник

Ldap bind failed with error 1326

This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Asked by:

Question

Hi All: I have a small 2008R2 domain with several DCs. The AD «administrator» account was not set up with «password never expires», so I have been resetting the password every 3 months.

I noticed recently that I’m getting group policy replication failures, and dcdiag is showing

Starting test: KnowsOfRoleHolders
[SERVER1] DsBindWithSpnEx() failed with error 5,
Access is denied..
Warning: SERVER1is the Schema Owner, but is not responding to DS RPC
Bind.
[SERVER1] LDAP bind failed with error 1326,
Logon failure: unknown user name or bad password..

Is this related to the password expiration on the «administrator» account? If not, what do I need to do to resolve the issue?

All replies

This error is not related to «Administrator» account.

There are many causes for this issue, like DNS pointing is not correct, more than 5 minutes time skew between DC, Secure channel issue, Connectivity problem between DC, etc.

And refer this KB article for advanced troubleshooting:
Troubleshooting AD Replication error 5: Access is denied
http://support.microsoft.com/kb/2002013

Abhijit Waikar.
MCSA | MCSA:Messaging | MCITP:SA | MCC:2012
Blog: http://abhijitw.wordpress.com
Disclaimer: This posting is provided «AS IS» with no warranties or guarantees and confers no rights.

this seems to belong to connectivity problems within the domain/DCs. Lets start with an unedited ipconfig /all from ALL DC/DNS servers you use, so we can verify some basic settings.

Is any of your DCs cloned or created from an image that is NOT prepared with sysprep?

Hopefully you use ONLY the domain DNS servers on the NIC and none else like the ISPs one?

Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP — Directory Services
My Blog: http://msmvps.com/blogs/mweber/

Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

this seems to belong to connectivity problems within the domain/DCs. Lets start with an unedited ipconfig /all from ALL DC/DNS servers you use, so we can verify some basic settings.

Is any of your DCs cloned or created from an image that is NOT prepared with sysprep?

Hopefully you use ONLY the domain DNS servers on the NIC and none else like the ISPs one?

Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP — Directory Services
My Blog: http://msmvps.com/blogs/mweber/

Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Thanks Meinholf and Abhijit. I’ve been trying to run through the various links and confirm the settings.

All the servers have a private «LAN» NIC and a public «WAN» NIC. The «LAN» NIC is configured as the first NIC on each server, and on each server, the NS is set to two of the other DCs (there are three DCs in total). I have a forwarder set on each of the DCs (all 3 are running DNS) with the external NS from my colo facility.

I did not set up an authoritative timeserver on the PDC, but all the DCs are using microsoft timeservers and are all synchronized (no time gaps between servers).

All the DCs are normally set up 2008 R2 Standard (no cloning), and on each one I ran DCPROMO. I presume DCPROMO enables all the necessary ports on the firewall, but I didn’t check through the entire list of ports yet. All the firewalls have the AD-related ACLs enabled (they were set up automatically). IPv6 is enabled on all LAN adapters without any manual config.

Источник

dcpromoui 110.B6C 02D5 08:52:52.578 Enter ValidateForestConfig
dcpromoui 110.B6C 02D6 08:52:52.593   Enter DS::ExamineForest
dcpromoui 110.B6C 02D7 08:52:52.593     Enter State::GetOperation REPLICA
dcpromoui 110.B6C 02D8 08:52:52.593     Enter State::GetForestName example.local
dcpromoui 110.B6C 02D9 08:52:52.593     Enter State::GetReplicationPartnerDomainName
dcpromoui 110.B6C 02DA 08:52:52.593       Enter State::GetOperation REPLICA
dcpromoui 110.B6C 02DB 08:52:52.593       Enter State::GetReplicaDomainDNSName example.local
dcpromoui 110.B6C 02DC 08:52:52.593     ldapUserName <- «administrator»
dcpromoui 110.B6C 02DD 08:52:52.593     ldapPassword <- «<password>»
dcpromoui 110.B6C 02DE 08:52:52.593     ldapDomain <- «example.local»
dcpromoui 110.B6C 02DF 08:52:52.593     domainDnsName <- «example.local»
dcpromoui 110.B6C 02E0 08:52:52.593     forestDnsName <- «example.local»
dcpromoui 110.B6C 02E1 08:52:52.593     operationType <- «replica»
dcpromoui 110.B6C 02E2 08:52:52.593     Enter CLdapContext::ExecuteScript opMode=run-read-only
dcpromoui 110.B6C 02E3 08:52:52.593       Enter CLdapOperationBlock::Execute
dcpromoui 110.B6C 02E4 08:52:52.593         Enter CLdapOperationIf::Execute
dcpromoui 110.B6C 02E5 08:52:52.593           Enter CLdapExpressionNot::Compute
dcpromoui 110.B6C 02E6 08:52:52.593             Enter CLdapExpressionPresent::Compute pattern=domainDnsName
dcpromoui 110.B6C 02E7 08:52:52.593               ==> true (example.local)
dcpromoui 110.B6C 02E8 08:52:52.593             ==> false
dcpromoui 110.B6C 02E9 08:52:52.593           Condition == false
dcpromoui 110.B6C 02EA 08:52:52.593         Enter CLdapOperationIf::Execute
dcpromoui 110.B6C 02EB 08:52:52.593           Enter CLdapExpressionNot::Compute
dcpromoui 110.B6C 02EC 08:52:52.593             Enter CLdapExpressionPresent::Compute pattern=forestDnsName
dcpromoui 110.B6C 02ED 08:52:52.593               ==> true (example.local)
dcpromoui 110.B6C 02EE 08:52:52.593             ==> false
dcpromoui 110.B6C 02EF 08:52:52.593           Condition == false
dcpromoui 110.B6C 02F0 08:52:52.593         Enter CLdapOperationIf::Execute
dcpromoui 110.B6C 02F1 08:52:52.593           Enter CLdapExpressionNot::Compute
dcpromoui 110.B6C 02F2 08:52:52.593             Enter CLdapExpressionPresent::Compute pattern=operationType
dcpromoui 110.B6C 02F3 08:52:52.593               ==> true (replica)
dcpromoui 110.B6C 02F4 08:52:52.593             ==> false
dcpromoui 110.B6C 02F5 08:52:52.593           Condition == false
dcpromoui 110.B6C 02F6 08:52:52.593         Enter CLdapOperationConnect::Execute target=$(domainDnsName), options=0x10
dcpromoui 110.B6C 02F7 08:52:52.593           DsGetDcNameW() returned SERVER.example.local
dcpromoui 110.B6C 02F8 08:52:52.750           Calling ldap_bind_sW(ld, NULL, pCreds, 1158)
dcpromoui 110.B6C 02F9 08:52:56.609           _lastLdapError_ <- «1326»
dcpromoui 110.B6C 02FA 08:52:56.609           ldap_bind() failed, err=53

dcpromoui 110.B6C 02FB 08:52:56.609           Enter GetErrorMessage 8007052E
dcpromoui 110.B6C 02FC 08:52:56.609       ***** EXCEPTION: 8007052e The operation cannot continue because LDAP connect/bind operation failed: error: 1326 (Logon failure: unknown user name or bad password.).
dcpromoui 110.B6C 02FD 08:52:56.609     ExecuteScript() failed:
The operation cannot continue because LDAP connect/bind operation failed: error: 1326 (Logon failure: unknown user name or bad password.).

dcpromoui 110.B6C 02FE 08:52:56.609   ExamineForest failed.  The error is The operation cannot continue because LDAP connect/bind operation failed: error: 1326 (Logon failure: unknown user name or bad password.).
dcpromoui 110.0EC 02FF 08:52:56.609             Enter Popup::Error
dcpromoui 110.0EC 0300 08:52:56.609               MessageBox: Active Directory Domain Services Installation Wizard : Failed to examine the Active Directory forest. The error was: The operation cannot continue because LDAP connect/bind operation failed: error: 1326 (Logon failure: unknown user name or bad password.).
dcpromoui 110.0EC 0301 08:53:27.343           Enter Wizard::SetNextPageID id = -1

I am having difficulties in joining my Windows Server to the domain, may I know what could be the problem ?

I suspect that there is a firewall in between this DR internal site and the DMZ where this Forefront TMG 2010 is deployed ?

DCDiag /s: result:

Directory Server Diagnosis

Performing initial setup:
   [DCDNS01.domain.com] LDAP bind failed with error 1326,
   Win32 Error 1326.
   Server DCDNS01.domain.com resolved to these IP addresses: 192.168.127.10,
   but none of the addresses could be reached (pinged). Please check the
   network.
   Error: 0x2b02 "Win32 Error 11010"
   This error more often means that the targeted server is shutdown or
   disconnected from the network.

ok, from the portqry I get the following result
while the rest with exits with return code 0x00000000 means that is OK ?
so why there are some with Exit code 1 and 2 ?

UDP port 389 (unknown service): LISTENING or FILTERED

Using ephemeral source port
Sending LDAP query to UDP port 389...

LDAP query to port 389 failed
Server did not respond to LDAP query

portqry.exe -n 192.168.12.5 -e 389 -p BOTH exits with return code 0x00000001.
=============================================

 Starting portqry.exe -n 192.168.12.5 -e 53 -p BOTH ...


Querying target system called:

 192.168.12.5

Attempting to resolve IP address to a name...


IP address resolved to DR-DCDNS01-vm.domain.com

querying...

TCP port 53 (domain service): LISTENING

UDP port 53 (domain service): LISTENING or FILTERED

Sending DNS query to UDP port 53...

DNS query timed out
portqry.exe -n 192.168.12.5 -e 53 -p BOTH exits with return code 0x00000002.
=============================================

 Starting portqry.exe -n 192.168.12.5 -e 88 -p BOTH ...


Querying target system called:

 192.168.12.5

Attempting to resolve IP address to a name...


IP address resolved to DR-DCDNS01-vm.domain.com

querying...

TCP port 88 (kerberos service): LISTENING

UDP port 88 (kerberos service): LISTENING or FILTERED
portqry.exe -n 192.168.12.5 -e 88 -p BOTH exits with return code 0x00000002.
=============================================

 Starting portqry.exe -n 192.168.12.5 -e 138 -p UDP ...


Querying target system called:

 192.168.12.5

Attempting to resolve IP address to a name...


IP address resolved to DR-DCDNS01-vm.domain.com

querying...

UDP port 138 (netbios-dgm service): LISTENING or FILTERED
portqry.exe -n 192.168.12.5 -e 138 -p UDP exits with return code 0x00000002.
=============================================

 Starting portqry.exe -n 192.168.12.5 -e 42 -p TCP ...


Querying target system called:

 192.168.12.5

Attempting to resolve IP address to a name...


IP address resolved to DR-DCDNS01-vm.domain.com

querying...

TCP port 42 (nameserver service): FILTERED
portqry.exe -n 192.168.12.5 -e 42 -p TCP exits with return code 0x00000002.

any kind of help would be greatly appreciated.