Re: SYNC without password ...

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Vipul Ramani wrote:
> Hey Rich ,
>
>
> Do really need *Password policy @ Active directory and Password policy 
> @ FDS needs to be same .... is that i am missing ...
> *
If you don't manually make them the same, then you run the risk that a 
password accepted on AD will be rejected on FDS, or vice versa.
>
>
>
>
>
> On Thu, Oct 16, 2008 at 2:44 PM, Vipul Ramani <vipulramani at gmail.com 
> <mailto:vipulramani at gmail.com>> wrote:
>
>     I enabled logleve 8192 in error log of FDS 
>
>     linux2.test2.com <http://linux2.test2.com> is FDS and  LABDC01 is ADC
>
>     I created sync aggrement between LDAP:636 and ADC:636 , but in
>     logs it shows still *ldap://linux2.test2.com:389
>     <http://linux2.test2.com:389> ---
>
>     ---- error of FDS ----
>     *
>
>     16/Oct/2008:07:33:15 -0700] - acquire_replica, supplier RUV is newer
>     [16/Oct/2008:07:33:15 -0700] NSMMReplicationPlugin -
>     agmt="cn=Vedant" (LABDC01:636): Cancelling linger on the connection
>     [16/Oct/2008:07:33:15 -0700] NSMMReplicationPlugin -
>     windows_acquire_replica returned success (101)
>     [16/Oct/2008:07:33:15 -0700] NSMMReplicationPlugin -
>     agmt="cn=Vedant" (LABDC01:636): State: ready_to_acquire_replica ->
>     sending_updates[16/Oct/2008:07:33:15 -0700] - csngen_adjust_time:
>     gen state before 48f750ab0003:1224167595:0:0
>     [16/Oct/2008:07:33:15 -0700] - _cl5PositionCursorForReplay
>     (agmt="cn=Vedant" (LABDC01:636)): Consumer RUV:
>     [16/Oct/2008:07:33:15 -0700] NSMMReplicationPlugin -
>     agmt="cn=Vedant" (LABDC01:636): {replicageneration}
>     48f373b90000014d0000[16/Oct/2008:07:33:15 -0700]
>     NSMMReplicationPlugin - agmt="cn=Vedant" (LABDC01:636): {replica
>     333 ldap://linux2.test2.com:389 <http://linux2.test2.com:389>}
>     48f3772f0000014d0000 48f74f7b0013014d0000 48f74f7b
>     [16/Oct/2008:07:33:15 -0700] - _cl5PositionCursorForReplay
>     (agmt="cn=Vedant" *(LABDC01:636)*): Supplier
>     RUV:[16/Oct/2008:07:33:15 -0700] NSMMReplicationPlugin -
>     agmt="cn=Vedant" (LABDC01:636): {replicageneration}
>     48f373b90000014d0000
>     [16/Oct/2008:07:33:15 -0700] NSMMReplicationPlugin -
>     agmt="cn=Vedant" (LABDC01:636): {replica 333
>     *ldap://linux2.test2.com:389 <http://linux2.test2.com:389>*}
>     48f3772f0000014d0000 48f750ab0001014d0000 48f750ab
>     [16/Oct/2008:07:33:15 -0700] agmt="cn=Vedant" (LABDC01:636) -
>     session start: anchorcsn=48f74f7b0013014d0000
>     [16/Oct/2008:07:33:15 -0700] NSMMReplicationPlugin - changelog
>     program - agmt="cn=Vedant" (LABDC01:636): CSN 48f74f7b0013014d0000
>     found
>     , position set for replay
>     [16/Oct/2008:07:33:15 -0700] agmt="cn=Vedant" (LABDC01:636) -
>     load=1 rec=1 csn=48f750ab0001014d0000[16/Oct/2008:07:33:15 -0700]
>     NSMMReplicationPlugin - agmt="cn=Vedant" (LABDC01:636):
>     windows_replay_update: Looking at modify operation
>      local dn="uid=vramani,ou=people,dc=tf-lab,dc=test2,dc=com"
>     (ours,user,not group) [16/Oct/2008:07:33:15 -0700]
>     NSMMReplicationPlugin - agmt="cn=Vedant" (LABDC01:636):
>     map_entry_dn_outbound: looking for AD entry for DS
>      dn="uid=vramani,ou=People, dc=tf-lab,dc=test2,dc=com"
>     guid="f96921fe188c4b47a243ab088512103d"
>     [16/Oct/2008:07:33:15 -0700] - Calling windows entry search
>     request plugin[16/Oct/2008:07:33:15 -0700] NSMMReplicationPlugin -
>     agmt="cn=Vedant" (LABDC01:636): Linger timeout has expired on the
>     connection
>     [16/Oct/2008:07:33:15 -0700] - windows_search_entry: recieved 2
>     messages, 1 entries, 0 references
>     [16/Oct/2008:07:33:15 -0700] NSMMReplicationPlugin -
>     agmt="cn=Vedant" (LABDC01:636): map_entry_dn_outbound: return code
>     0 from search f
>     or AD entry dn="<GUID=f96921fe188c4b47a243ab088512103d>" or
>     dn="CN=vipul r,CN=Users,DC=tf-lab,DC=test2,DC=com"
>     [16/Oct/2008:07:33:15 -0700] NSMMReplicationPlugin -
>     agmt="cn=Vedant" (LABDC01:636): windows_replay_update: Processing
>     modify operation
>      local dn="uid=vramani,ou=people,dc=tf-lab,dc=test2,dc=com" remote
>     dn="<GUID=f96921fe188c4b47a243ab088512103d>"
>     [16/Oct/2008:07:33:15 -0700] agmt="cn=Vedant" (LABDC01:636) -
>     clcache_load_buffer: rc=-30989
>
>
>     -----
>
>     i see this *" Linger time out has expired the connection " *
>
>     16/Oct/2008:07:43:16 -0700] NSMMReplicationPlugin -
>     agmt="cn=Vedant" (LABDC01:636): Beginning linger on the connection
>     [16/Oct/2008:07:43:16 -0700] NSMMReplicationPlugin -
>     agmt="cn=Vedant" (LABDC01:636): State: sending_updates ->
>     wait_for_changes
>     [16/Oct/2008:07:43:16 -0700] NSMMReplicationPlugin -
>     agmt="cn=Vedant" (LABDC01:636): *Linger timeout has expired on the
>     connection*
>     [16/Oct/2008:07:43:16 -0700] NSMMReplicationPlugin -
>     agmt="cn=Vedant" (LABDC01:636): Disconnected from the consumer
>
>
>     Any any clue
>
>
>
>     On Wed, Oct 15, 2008 at 2:15 PM, Vipul Ramani
>     <vipulramani at gmail.com <mailto:vipulramani at gmail.com>> wrote:
>
>
>
>         Hi  Rich ,
>
>         But i can login and changed the password of ADC users.  :(
>
>         is there any other way to debug in to the deep ??? Kindly
>         suggest i am ready  ....
>
>
>         I'm not sure, but I think this means that there were no
>         passwords to sync from AD to Fedora DS. It keeps a queue of
>         passwords to send in a file (encrypted).
>
>
>
>
>
>               
>
>         Regards
>         Vipul Ramani
>
>
>
>
>     -- 
>     Regards
>
>     Vipul Ramani
>
>
>
>
> -- 
> Regards
>
> Vipul Ramani
>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3258 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20081017/791b5c8f/attachment.bin 


[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux