----- Original Message ----- > --[ UxBoD ]-- wrote: > > ----- Original Message ----- > > <SNIP> > > > > >>> Hi Rich, > >>> > >>> that is what I did not get the error message. Here is the complete > >>> output: > >>> > >>> [20/Jul/2010:10:42:20 -0400] NSMMReplicationPlugin - > >>> agmt="cn=DomainAD" (adc01:636): Received result code 32 (0000208D: > >>> NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best > >>> match > >>> of: 'CN=Users,DC=ad,DC=domain,DC=com' ) for add operation > >>> > >>> > >> This is saying that the DN mapping is not working - are you trying > >> to > >> add an RHDS entry like uid=foo,ou=bar,ou=people,DC=domain,DC=com to > >> AD, > >> but AD doesn't have ou=bar,CN=Users,DC=ad,DC=domain,DC=com > >> > >> ? Note that winsync will not add sub-ou containers > >> > >>> [20/Jul/2010:10:42:20 -0400] NSMMReplicationPlugin - > >>> agmt="cn=DomainAD" (adc01:636): windows_replay_update: Cannot > >>> replay > >>> add operation. > >>> [20/Jul/2010:10:42:20 -0400] NSMMReplicationPlugin - > >>> agmt="cn=DomainAD" (adc01:636): Beginning linger on the connection > >>> [20/Jul/2010:10:42:20 -0400] NSMMReplicationPlugin - > >>> agmt="cn=DomainAD" (adc01:636): windows_tot_run: failed to obtain > >>> data to send to the consumer; LDAP error - 1 > >>> [20/Jul/2010:10:42:20 -0400] NSMMReplicationPlugin - > >>> agmt="cn=DomainAD" (adc01:636): No linger to cancel on the > >>> connection > >>> [20/Jul/2010:10:42:20 -0400] NSMMReplicationPlugin - > >>> agmt="cn=DomainAD" (adc01:636): Disconnected from the consumer > >>> [20/Jul/2010:10:42:20 -0400] NSMMReplicationPlugin - > >>> agmt="cn=DomainAD" (adc01:636): State: start -> > >>> ready_to_acquire_replica > >>> > >>> > >>> > > > > In AD we have the standard mappings of > > CN=Users,DC=ad,DC=domain,DC=com and we are trying to sync across > > users from RHDS DS o=Internal,dc=domain,dc=com. Our RHDS schema > > looks like: > > > > dc=domain,dc=com > > |_ o=Internal > > |___o=a0000 > > |____ou=Desktops > > |_____uid=fred > > > > Am I right in assuming that we would need to create those levels in > > AD manually instead of the replication plugin creating them ? > > > Yes. Thanks Rich Would the entry look something like cn=fred,ou=Desktops,ou=a0000,ou=Internal,dc=ad,dc=domain,dc=com Just trying to visualise how to set it up in AD. -- Thanks, Phil