Re: [389-users] Sync AD with 389-DS Unable to parse response

Rich Megginson <rmeggins@xxxxxxxxxx> · Fri, 21 Jan 2011 13:24:33 -0700



      Date: 
      Fri, 21 Jan 2011 10:25:56 +0100
      
        
              To:
              
              "General discussion list for the 389 Directory server
              project." <389-users@xxxxxxxxxxxxxxxxxxxxxxx>
          
        
      Hi Rich,

      
      Thanks for this usefull link.

      
      I have successfully initiate replica between Windows AD and my
      server 389-DS. Ldapsearch is working. But even if everything seems
      to be ok, the update does not work and I do not see any error in
      the log files... So, my AD server stay empty, the accounts are not
      migrate...

      
      Here you have my access log file which is more verbose... (mydomain.com for the example) :
    <snip>

    Obviously I am connecting to the server
      389-DS itself whereas it can resolve the DNS name of my Windows
      server... There is no error in the AD event viewer while I could
      see errors on it when it was misconfigured
      (like DirSync errors)... So, basically, the Windows server is
      contacted to my DS-Server over 2 different networks.

      
      Do you think I have to open the ports described in my message ?

      
      -Regards.
    I don't know.Â There is no winsync information in the access log.Â
    Note that the access log records client accesses to the directory
    server, and in winsync, the directory server itself acts as a client
    to AD, so winsync will log nothing in the access log.Â The errors
    log could be helpful, and especially using the replication log level
    (which is also used for winsync logging).Â The Windows Event Viewer
    is useless for winsync issues.

  
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users