On Thu, 2006-04-27 at 10:47 -0400, Daniel Shackelford wrote:
> Message: 8
> Date: Thu, 27 Apr 2006 13:36:56 +0200
> From: "Espen A. Stefansen" <espen.stefansen(a)imr.no>
> Subject: [Fedora-directory-users] Need help syncing between Active
> Directory and FDS
> To: fedora-directory-users(a)redhat.com
> Message-ID: <1146137816.5150.62.camel@itse6848>
> Content-Type: text/plain
> 4. Install PassSync on a Windows Domain Controller (Windows
> - Values:
> --- Hostname: fds.example.com
> --- Port: 686
> --- Username: cn=directory manager,cn=config
> --- Cert Token: ?? (Should this be the password for the certificate?)
> --- Search: dc=example,dc=com
The username here have to be a OU-name in AD. But after looking
carefully at the DC i found out that it didn't run SSL. How to enable
SSL on your DC, have a look here:
After following this explanation and importing the certificate in FDS,
the connection was ok.
> And then imported the certificates from fds.example.com
> 5. Started the console, and enabled "changelog" and "replica"
> "single master".
> 6. I then generated a "windows sync agreement".
> - Values:
> --- domain: example.com
> --- DCH: win.example.com
> --- Enabled SSL
> --- Bind as: cn=directory manager,cn=config
The same goes here. The username must be in AD.
It looks like you are using the FDS Directory Manager account, rather
than a valid AD account. You will need to use an AD account that has
the ability to create/update entries.
I'm using a valid AD account now.
> When I try to do a full sync, it says it cant find the
> error 81. Does that mean the FDS-server?
So now it's starting to synchronize, but nothing shows up in the
database in the console. Do i have to initialize the database as well?
Or is there something else i have to do in the console?
It also give me the following error in the error log: "Replica has no
update vector. It has never been initialized." Any ideas?
> Does anyone have any idea on what might be wrong? And have I
> it correctly?
> Espen Stefansen