On 07/11/2011 09:31 PM, Josh Miller wrote: > Using: > - 389 DS 8.1 8.1???? Platform? rpm -qi 389-ds-base > - AD 2003/2008 > > > I am trying to sync from AD (one way) to 389 DS and getting the > following error: > > R00002105: LdapErr: DSID-0C0907C9, comment: Error processing control, > data 0, vece. > > A tcpdump does not appear to reveal anything in the way of errors Could you post an excerpt from it? > and I > got the above error from the packet capture. > > Any idea how to continue troubleshooting or resolve this issue? > > I can query AD via ldapsearch using the AD credential set that I have > configured in the sync agreement. 389 uses the AD DirSync Control for reading the list of changes. The bind DN you are using to connect to AD must have Replicator rights in order to use this control. > Thanks, -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users