0

I need some help please.

I have a 2-node Windows cluster configured with WSFC (cluster name = ABCCluster). Node 1 named Node1 Node 2 named Node2

SQL 2019 instance installed and named INSTANCE Availability Group configured and named INSTANCE_AG Availability Group listener prestaged and named AGL_INSTANCE

In Failover Cluster Manager, Cluster Events, I get following error:

Cluster network name resource failed registration of one or more associated DNS names(s) because the access to update the secure DNS Zone was denied. Cluster Network name: 'INSTANCE_AG_AGL_INSTANCE' DNS Zone: 'our.domain.com' Ensure that cluster name object (CNO) is granted permission to the Secure DNS Zone

Question 1: Where has that strange Cluster name come from i.e. 'INSTANCE_AG_AGL_INSTANCE'? The cluster name in Failover Cluster Manager is ABCCluster

Question 2: The prestaged listener name has been attached to that strange cluster name, has prestaging the listener got anything to do with this error message?

Question 3: As it is now, automatic failover for the AG happened from Node1 replica to Node2 replica when I stopped the SQL service on Node1 (which was previously the primary replica in the AG). However, when I stop the service on Node2, it doesn't failover automatically back to Node1. Node1 rather stays in 'RESOLVING' state for some time until the SQL service is started back on Node2 and then the Node1 replica resolves as 'secondary'. So, I have only a one-directional automatic failover.

I would appreciate any ideas on what I'm doing wrong please.

Thank you

1 Answer 1

2

Question 1: Where has that strange Cluster name come from i.e. 'INSTANCE_AG_AGL_INSTANCE'? The cluster name in Failover Cluster Manager is ABCCluster

This is the name of the network name resource created for the listener, this shows you used the wizard to create the listener as the wizard uses the naming convention of #AGName#_#DNSName#. You can create your own and name it how you like without using the wizard. Up to you, this has no bearing on anything, really.

Example: The network name resource has the value of AG3_AG3Listener but that's not the DNS name or the computer object name in AD (as the DNS name and CO name must be the same). You'll notice (I created it with the wizard to show the point) that the naming convention is AGName_ListenerName as the "Name" of the resource in the cluster. cluster resource name

Question 2: The prestaged listener name has been attached to that strange cluster name, has prestaging the listener got anything to do with this error message?

The listener dns name is a property of the cluster resource. The cluster resource has its own name, which is this name. These two are not the same thing.

Example: From the above example, here is what the actual DNS and computer object names in AD are.

dns name

Question 3: As it is now, automatic failover for the AG happened from Node1 replica to Node2 replica when I stopped the SQL service on Node1 (which was previously the primary replica in the AG). However, when I stop the service on Node2, it doesn't failover automatically back to Node1. Node1 rather stays in 'RESOLVING' state for some time until the SQL service is started back on Node2 and then the Node1 replica resolves as 'secondary'. So, I have only a one-directional automatic failover.

Look at your cluster logs, they will tell you why. Since it's a 2 node cluster, chances are you're just hitting the 1 (N-1 failovers by default) failover that you have and thus the cluster says, nope, you hit your configured limit so I'm not failing that over again. This can be changed and is user configurable for number of failures and time period.

Powershell, showing the defaults are set: powershell failover defaults

FCM (GUI) of the same information: gui failover defaults

16
  • thank you so much for your time and patience to guide me through this. You have provided a lot of very helpful information for me to carefully work my way through. Thanks again.
    – PTL_SQL
    Commented Feb 9, 2023 at 0:33
  • 1
    FL is shorthand for format-list in powershell. There are multiple parts to a listener, the AD object, the DNS entries, the cluster resource. All of those need to exist (except in certain scenarios such as workgroup clustering or read-scale). Don't delete anything. Commented Feb 9, 2023 at 15:48
  • 1
    Please create a new question with data, I'm not sure what exactly is being attmpted as you'd intentionally be creating a duplicate IP on the network which is a problem. Commented Feb 15, 2023 at 14:12
  • 1
    No, Ag3_AG3Listener is the cluster resource name, AG3Listener is the DNS name and AG3Listener is the name of the computer object in this AD integrated environment. Commented Feb 27, 2023 at 23:47
  • 1
    In this case, yes. Commented Mar 1, 2023 at 14:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.