SGD cannot access Active Directory

Question

hello everyone
I have sgd server and Active Directory server in a segment before , they worked well.
now I place my sgdservers in a DMZ segment , and place the AD server in backend segment.
there is a firewall between the two segments. now sgd cannot access the ad in the web console.
I know there are some ports which must be opened as the manual said. but even if I open all ports between the two server(SGD server and AD server) , sgd still cannot access the active directory.
SGD Server : SGD4.4.1907 Solaris10
AD Server: windows2008
it seems that there is no problem when using nslookup
# nslookup adsrv1.mydomainname
Server:         10.0.4.111
Address:        10.0.4.111#53
Name:   adsrv1.mydomainname
Address: 10.0.4.111
# nslookup 10.0.4.111
Server:         10.0.4.111
Address:        10.0.4.111#53
111.4.0.10.in-addr.arpa name = adsrv1.mydomainname.
# nslookup -querytype=any _gc._tcp.mydomainname
Server:         10.0.4.111
Address:        10.0.4.111#53
_gc._tcp.mydomainname     service = 0 100 3268 adsrv2.mydomainname.
_gc._tcp.mydomainname     service = 0 100 3268 adsrv1.mydomainname.
# nslookup -querytype=any _ldap._tcp.mydomainname
Server:         10.0.4.111
Address:        10.0.4.111#53
_ldap._tcp.mydomainname   service = 0 100 389 adsrv2.mydomainname.
_ldap._tcp.mydomainname   service = 0 100 389 adsrv1.mydomainname.Any prompt reply will be appreciated

Answer 1

I also use "dig" command to check DNS setting.
It is surprised that , I cannot dig with sgd server's hostname , but dig with sgd server's FQDN is successful .
# dig sgdsrv01
; <<>> DiG 9.3.4-P1 <<>> sgdsrv01
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: *SERVFAIL*, id: 1361
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;sgdsrv01.                      IN      A
;; Query time: 1 msec
;; SERVER: 10.0.4.111#53(10.0.4.111)
;; WHEN: Tue Jan 20 10:44:20 2009
;; MSG SIZE  rcvd: 26
# dig sgdsrv01.mydomain.com
; <<>> DiG 9.3.4-P1 <<>> sgdsrv01.mydomain.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: *NOERROR*, id: 1613
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;sgdsrv01.mydomain.com.   IN      A
;; ANSWER SECTION:
sgdsrv01.mydomain.com. 3600 IN    A       10.0.6.41
;; Query time: 1 msec
;; SERVER: 10.0.4.111#53(10.0.4.111)
;; WHEN: Tue Jan 20 10:44:37 2009
;; MSG SIZE  rcvd: 61AND I also set /etc/hosts file as the following:
127.0.0.1       localhost
::1     localhost
10.0.6.41     sgdsrv01   sgdsrv01.mydomain.com telford
10.0.6.42     sgdsrv02.mydomain.com   sgdsrv02
10.0.4.111    adsrv1.mydomain.com     adsrv1
10.0.4.112    adsrv2.mydomain.com     adsrv2
10.0.4.101    apsrv01.mydomain.com    apsrv01
10.0.4.102    apsrv02.mydomain.com    apsrv02