09-20-2019 07:54 AM
Hi Gang,
ISE has been fine and recently, this warning has occurred:
"SRV Record Found. Not All SRV Records Have IP, Will Need To Run Additional Query For Get IP."
I've checked our AD SRV records by using:
What exactly is happening here and how does one resolve this error?
We are running ISE 2.4 with Patch 9.
Thanks Gang!
Dan
Solved! Go to Solution.
09-29-2019 08:22 AM
Yes, you are correct about the DNS records. If possible, please reduce the number of records to make it more efficient.
09-29-2019 08:22 AM
Yes, you are correct about the DNS records. If possible, please reduce the number of records to make it more efficient.
09-30-2019 01:11 AM
Thanks for getting back yo me hslai!
Thank you for confirming this expected bevahiour.
09-30-2019 06:18 AM
Adding comments:
If using AD as an external ID source a good troubleshooting tool via your PAN gui can be found here: Administration->Identity Management->External ID Stores-><your respective source>
Click one of you nodes & run the Diagnostic tool
This can allow you to check whether or not things such as SRV records, etc. are good from ISE perspective.
08-11-2020 01:20 PM
You may need to check AD debugs on ISE as well to confirm the response is "ok" for SRV test.
DNSDiag::resQueryDomainSRVrecordsInAllNS() - Query response is ok for _ldap._tcp.dc._msdcs.Domain_Name DNSDiag::doTest() - Completed running test DNS SRV record query
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide