Andreas, The error doesn’t indicate that there is something wrong with the windows sync, but the duplicate value 20120228131234.0Z (timestamp) for a custom attribute dscorepropagationdata is not right. I’d do an ldapsearch for one of those user on both 389 servers and see what’s going on. Maybe your 389 servers have fallen out of sync and did not push over your custom attributes. Dan From: 389-users-bounces@xxxxxxxxxxxxxxxxxxxxxxx [mailto:389-users-bounces@xxxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Andreas Kekkou
Sent: Friday, November 9, 2012 7:49 AM
To: 389-users@xxxxxxxxxxxxxxxxxxxxxxx
Subject: Sync with AD Hi all,
I'm currently running CentOS DS 8.1(CDS) in multi-master mode with two servers. Recently I'€™ve decided to sync with Active Directory. 389 Password Sync utility has been installed on all Windows Domain Controllers and it is configured to communicate with the same CDS server. Sync is working, and password changes are sent from Windows to CDS. Any password change in the LDAP environment is sync between the two CDS, but is only sent to the Windows if the change is performed on the CDS with the Windows Sync Agreement. Also in the error log I get the following errors:
[09/Nov/2012:08:13:49 +0200] - add value "20120228131234.0Z" to attribute type "dscorepropagationdata" in entry "CN=..." failed: duplicate new value
[09/Nov/2012:10:38:50 +0200] - add value "20120228131028.0Z" to attribute type "dscorepropagationdata" in entry "CN=..." failed: duplicate new value
[09/Nov/2012:10:38:53 +0200] - add value "20120228131028.0Z" to attribute type "dscorepropagationdata" in entry "CN=..." failed: duplicate new value
[09/Nov/2012:11:43:53 +0200] - add value "20120228131234.0Z" to attribute type "dscorepropagationdata" in entry "CN=..." failed: duplicate new value
[09/Nov/2012:12:48:53 +0200] - add value "20120228131028.0Z" to attribute type "dscorepropagationdata" in entry "CN=..." failed: duplicate new value
[09/Nov/2012:12:48:53 +0200] - add value "20120228131028.0Z" to attribute type "dscorepropagationdata" in entry "CN=..." failed: duplicate new value
[09/Nov/2012:13:08:53 +0200] - add value "20120228131028.0Z" to attribute type "dscorepropagationdata" in entry "CN=..." failed: duplicate new value
[09/Nov/2012:13:08:53 +0200] - add value "20120228131028.0Z" to attribute type "dscorepropagationdata" in entry "CN=..." failed: duplicate new value
The dots after CN represent actual users. Any idea how this can be resolved?
Andreas |
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
