Intersite Replication Fails with Error 1783 RPC_X_BAD_STUB_DATA

Intersite replication continiously fails with error 1783 RPC_X_BAD_STUB_DATA.

Additional the following events may be logged in the Directory Services log:

Event Type: Warning
Event Source: NTDS Replication
Event Category: Replication
Event ID: 1061
Description:
Internal event: The directory replication agent request returned the following status.
Additional Data Error value: 1783 The stub received bad data.

Event Type: Warning
Event Source: NTDS Replication
Event Category: Replication
Event ID: 1085
User: NT AUTHORITY\ANONYMOUS LOGON
Description: Internal event: Active Directory could not synchronize the following directory partition with the domain controller at the following network address.
Directory partition: <NC>
Network address: <GUID-based DC name>
If this error continues, the Knowledge Consistency Checker (KCC) will reconfigure the replication links and bypass the domain controller.
User Action
Verify that the network address can be resolved with a DNS query.
Additional Data Error value: 1783 The stub received bad data.

Event Type: Warning
Event Source: NTDS General
Event Category: Internal Processing
Event ID: 1173
User: NT AUTHORITY\ANONYMOUS LOGON
Description: Internal event: Active Directory has encountered the following exception and associated parameters. Exception: e0010002 Parameter: 0 Additional
Data Error value: 1783
Internal ID: 5001047

The issue occurs when the replication partner (source domain controller) sends a RPC packet that exceeds the 10 MB hard-coded limit.

As the packet size exceeds the predefined maximum size, the packet does not pass the receiving replication partners (destination domain controller) size validation check.

As a result replication fails with error 1783 RPC_X_BAD_STUB_DATA, and replication of the naming context is blocked from that point forwards.

Method 1

Reduce the intra-site RPC packet size:

1. Start Regedit.exe
   
   
2. Edit the following registry value:
   
   HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters
   Value Type: DWORD
   Value Name: Replicator inter site packet size (bytes)
   Value Data: 0x00800000
   
   
3. Restart the domain controller.
   

NOTE: In this example we are reducing the RPC packet size to 8 MB (0x00800000), but you can adjust this value to suit your environment. For more information see:

Replicator inter site packet size (bytes)
http://technet.microsoft.com/en-us/library/cc737324(WS.10).aspx

Method 2

Disable intra-site replication RPC compression:

• To disable compression for all connections for a given site link, OR in the NTDSSITELINK_OPT_DISABLE_COMPRESSION bit (0x4) on the �options� attribute of the Site Link in the appropriate transport container (e.g. CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration�)
  
  
• To disable compression on an individual connection object basis, OR in the NTDSCONN_OPT_DISABLE_INTERSITE_COMPRESSION bit (0x4) on the �options� attribute of the connection object.

DC (NTDSSITELINK_OPT_DISABLE_COMPRESSION, 0x00000004): If present, disables compression of IDL_DRSGetNCChanges response messages sent between domain controllers in different sites in the siteList.

http://msdn.microsoft.com/en-us/library/cc223552(PROT.13).aspx

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.