Emmanuel BILLOT a écrit :
Hi,
Windows Sync does not work.
We use administrtor account to bind.
Ok i found what was wrong.
First do not forget to give AD replication user replication rights.
There was an error when creating replication.
AD names OU objetcs with a CN= whereas real LDAP uses OU=
BR,
Extract from log :
02/Oct/2009:17:11:22 +0200] - _csngen_adjust_local_time: gen state
before 4ac618150001:1254496277:0:0
[02/Oct/2009:17:11:22 +0200] - _csngen_adjust_local_time: gen state
after 4ac6181a0000:1254496282:0:0
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin -
ruv_add_csn_inprogress: successfully inserted csn 4ac6181a000000010000
into pending list
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin -
csn=4ac6181a000000010000 process postop: canceling operation csn
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - add operation of
entry uid=zizou,ou=People,ou=orleans,dc=ird,dc=fr returned: 32
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - received entry
from dirsync: CN=Duplicateurs,CN=Builtin,DC=maqird,DC=fr
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - received entry
from dirsync: CN=Administrateurs de l'entreprise,CN=Users,DC=maqird,DC=fr
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - received entry
from dirsync: CN=jean bon,OU=utilisateurs,OU=ORLEANS,DC=maqird,DC=fr
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): map_entry_dn_inbound: looking for local entry
matching AD entry [CN=jean
bon,OU=utilisateurs,OU=ORLEANS,DC=maqird,DC=fr]
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): map_entry_dn_inbound: looking for local entry by
guid [6615b9abafd05c4da997ca3c89b7ab1b]
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): map_entry_dn_inbound: problem looking for guid: -1
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): map_entry_dn_inbound: looking for local entry by
uid [bon]
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): map_entry_dn_inbound: problem looking for
username: -1
[02/Oct/2009:17:11:22 +0200] - Windows sync entry: Adding new local
entry dn: uid=bon,ou=People,ou=orleans,dc=ird,dc=fr
objectClass: top
objectClass: person
objectClass: organizationalperson
objectClass: inetOrgPerson
objectClass: ntUser
ntUserDeleteAccount: true
uid: bon
sn: bon
givenName: jean
cn: jean bon
ntUserCodePage: 0
ntUserAcctExpires: 9223372036854775807
ntUserDomainId: bon
ntUniqueId: 6615b9abafd05c4da997ca3c89b7ab1b
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin -
ruv_add_csn_inprogress: successfully inserted csn 4ac6181a000100010000
into pending list
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin -
csn=4ac6181a000100010000 process postop: canceling operation csn
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - add operation of
entry uid=bon,ou=People,ou=orleans,dc=ird,dc=fr returned: 32
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - received entry
from dirsync: OU=utilisateurs,OU=ORLEANS,DC=maqird,DC=fr
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): map_entry_dn_inbound: looking for local entry
matching AD entry [OU=utilisateurs,OU=ORLEANS,DC=maqird,DC=fr]
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): map_entry_dn_inbound: looking for local entry by
guid [6bb1176df971904f9e2ea760d58ac3b3]
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): map_entry_dn_inbound: problem looking for guid: -1
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): map_entry_dn_inbound: AD entry has no username!
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): windows_process_dirsync_entry: failed to map
inbound entry OU=utilisateurs,OU=ORLEANS,DC=maqird,DC=fr - rc is -1 dn
is [null].
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - received entry
from dirsync: CN=Administrateurs du schéma,CN=Users,DC=maqird,DC=fr
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - received entry
from dirsync: CN=Admins du domaine,CN=Users,DC=maqird,DC=fr
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - received entry
from dirsync: OU=ORLEANS,DC=maqird,DC=fr
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): Beginning linger on the connection
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): windows_tot_run: failed to obtain data to send to
the consumer; LDAP error - 32
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): No linger to cancel on the connection
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): Disconnected from the consumer
[02/Oct/2009:17:11:22 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): State: start -> ready_to_acquire_replica
[02/Oct/2009:17:11:22 +0200] - acquire_replica, supplier RUV:
[02/Oct/2009:17:11:23 +0200] NSMMReplicationPlugin - supplier:
{replicageneration} 4a1e8d0b000000010000
[02/Oct/2009:17:11:23 +0200] NSMMReplicationPlugin - supplier:
{replica 1 ldap://obiwan:389} 4a1e9575000000010000
4ac616f7000100010000 4ac616f8
[02/Oct/2009:17:11:23 +0200] - acquire_replica, consumer RUV:
[02/Oct/2009:17:11:23 +0200] - acquire_replica, consumer RUV = null
[02/Oct/2009:17:11:23 +0200] - acquire_replica, supplier RUV is newer
[02/Oct/2009:17:11:23 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): Trying secure slapi_ldap_init_ext
[02/Oct/2009:17:11:23 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): binddn =
cn=administrateur,cn=Users,dc=maqird,dc=fr, passwd =
{DES}NfWmOGRvsgfwJqTMBJagtA==
[02/Oct/2009:17:11:23 +0200] - windows_conn_connect : detected Win2k3
peer
[02/Oct/2009:17:11:23 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): No linger to cancel on the connection
[02/Oct/2009:17:11:23 +0200] - _csngen_adjust_local_time: gen state
before 4ac6181a0002:1254496282:0:0
[02/Oct/2009:17:11:23 +0200] - _csngen_adjust_local_time: gen state
after 4ac6181b0000:1254496283:0:0
[02/Oct/2009:17:11:23 +0200] NSMMReplicationPlugin -
windows_acquire_replica returned success (101)
[02/Oct/2009:17:11:23 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): State: ready_to_acquire_replica -> sending_updates
[02/Oct/2009:17:11:23 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): Replica has no update vector. It has never been
initialized.
[02/Oct/2009:17:11:23 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): Beginning linger on the connection
[02/Oct/2009:17:11:23 +0200] NSMMReplicationPlugin - agmt="cn=x"
(maqsvrdc0001:636): Linger timeout has expired on the connection
--
==========================================
Emmanuel BILLOT
IRD - Orléans
Délégation aux Systèmes d'Information (DSI)
tél : 02 38 49 95 88
==========================================
--
389 users mailing list
389-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users