Re: Re: Need help syncing between Active, Directory and FDS

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 2006-04-27 at 10:47 -0400, Daniel Shackelford wrote:
> > Message: 8
> > Date: Thu, 27 Apr 2006 13:36:56 +0200
> > From: "Espen A. Stefansen" <espen.stefansen@xxxxxx>
> > Subject:  Need help syncing between Active
> > 	Directory	and FDS
> > To: fedora-directory-users@xxxxxxxxxx
> > Message-ID: <1146137816.5150.62.camel@itse6848>
> > Content-Type: text/plain

<snip>

> > 4. Install PassSync on a Windows Domain Controller (Windows 2003);
> > win.example.com.
> >   - Values: 
> >   --- Hostname: fds.example.com
> >   --- Port: 686
> >   --- Username: cn=directory manager,cn=config
> >   --- Cert Token: ?? (Should this be the password for the certificate?)
> >   --- Search: dc=example,dc=com
> >

The username here have to be a OU-name in AD. But after looking
carefully at the DC i found out that it didn't run SSL. How to enable
SSL on your DC, have a look here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;321051

After following this explanation and importing the certificate in FDS,
the connection was ok.

> >   And then imported the certificates from fds.example.com
> >
> > 5. Started the console, and enabled "changelog" and "replica" as
> > "single master".
> >
> > 6. I then generated a "windows sync agreement".
> >    - Values:
> >    --- domain: example.com
> >    --- DCH: win.example.com
> >    --- Enabled SSL
> >    --- Bind as: cn=directory manager,cn=config

The same goes here. The username must be in AD.

> >
> >   
> It looks like you are using the FDS Directory Manager account, rather 
> than a valid AD account.  You will need to use an AD account that has 
> the ability to create/update entries.

I'm using a valid AD account now.

> > When I try to do a full sync, it says it cant find the LDAP-server,
> > error 81. Does that mean the FDS-server? 

So now it's starting to synchronize, but nothing shows up in the
database in the console. Do i have to initialize the database as well?
Or is there something else i have to do in the console?

It also give me the following error in the error log: "Replica has no
update vector. It has never been initialized." Any ideas?

> > Does anyone have any idea on what might be wrong? And have I installed
> > it correctly?
> >
> > Regards
> > Espen Stefansen

Regards
Espen

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Index of Archives]     [Fedora Directory Users]     [Fedora Directory Devel]     [Fedora Announce]     [Fedora Legacy Announce]     [Kernel]     [Fedora Legacy]     [Share Photos]     [Fedora Desktop]     [PAM]     [Red Hat Watch]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite News]

  Powered by Linux