2:56 p.m.
Hi all.
I have managed to set up FDS with SSL and I am able to sync users from FDS
to windows 2003 AD, but I have a problem syncing groups. I have created a
group called staff but I am unable to sync that group. The error message I
get in the error log is :
NSMMReplicationPlugin - agmt="cn=Active dir" (badabing:636):
windows_replay_update: failed to fetch local entry for add operatio
n dn="cn=rhi_staff,dc=rhi,dc=hi,dc=is"
Can anyone tell me what this error means and how to fix it ?
regards
Jon
3:02 p.m.
Jón Björn Njálsson wrote:
NSMMReplicationPlugin - agmt="cn=Active dir"
(badabing:636):
windows_replay_update: failed to fetch local entry for add operatio
n dn="cn=rhi_staff,dc=rhi,dc=hi,dc=is"
Can anyone tell me what this error means and how to fix it ?
This is rather strange. It's saying that the add operation for
your group was found in the changelog, but when the sync
code tried to fetch the entry from the database, it failed.
I'm not sure how that could have happened (it can't even
happen if the entry is deleted because its tombstone remains).
Did anything out of the ordinary happen between adding
the group entry and the message ? (power outage, restored
database from backup, that kind of thing) ?
4:02 p.m.
No nothing like that. I was wondering how can I create a group with
nt-attributes ?
I noticed that this group doesn´t have an NT attribute.
Could that be the problem ?
Jón Björn Njálsson wrote:
> NSMMReplicationPlugin - agmt="cn=Active dir" (badabing:636):
>windows_replay_update: failed to fetch local entry for add operatio
>n dn="cn=rhi_staff,dc=rhi,dc=hi,dc=is"
>
>Can anyone tell me what this error means and how to fix it ?
>
>
This is rather strange. It's saying that the add operation for
your group was found in the changelog, but when the sync
code tried to fetch the entry from the database, it failed.
I'm not sure how that could have happened (it can't even
happen if the entry is deleted because its tombstone remains).
Did anything out of the ordinary happen between adding
the group entry and the message ? (power outage, restored
database from backup, that kind of thing) ?
--
Fedora-directory-users mailing list
Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
4:48 p.m.
Jón Björn Njálsson wrote:
No nothing like that. I was wondering how can I create a group with
nt-attributes ?
I noticed that this group doesn´t have an NT attribute.
Could that be the problem ?
From GUI, create new group, go to Advanced, add the objectclasses
ntgroup and mailgroup.
Also, add attributes "ntgroupcreatenewgroup" and "ntgroupdeletegroup".
Set these attributes to "true" if you want create/delete to sycn to
Windows, "false" otherwise.
Command line tools like ldapmodify would work too.
>Jón Björn Njálsson wrote:
>
>
>
>>NSMMReplicationPlugin - agmt="cn=Active dir" (badabing:636):
>>windows_replay_update: failed to fetch local entry for add operatio
>>n dn="cn=rhi_staff,dc=rhi,dc=hi,dc=is"
>>
>>Can anyone tell me what this error means and how to fix it ?
>>
>>
>>
>>
>This is rather strange. It's saying that the add operation for
>your group was found in the changelog, but when the sync
>code tried to fetch the entry from the database, it failed.
>I'm not sure how that could have happened (it can't even
>happen if the entry is deleted because its tombstone remains).
>
>Did anything out of the ordinary happen between adding
>the group entry and the message ? (power outage, restored
>database from backup, that kind of thing) ?
>
>
>
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users(a)redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>
>
--
Fedora-directory-users mailing list
Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
5:09 p.m.
Jón Björn Njálsson wrote:
No nothing like that. I was wondering how can I create a group with
nt-attributes ?
I noticed that this group doesn´t have an NT attribute.
Could that be the problem ?
Ah, yes. The error message is therefore a bit misleading.
It means that the entry didn't match the critera for a windows
group.
If you create the group first and then add the nt attributes,
you will need to initiate a full sync in order to get it over to
AD (because otherwise it'll fail in the same way and then the
modify will not get propagated because the entry doesn't
already exist in AD).
6764
days inactive
6764
days old
389-users@lists.fedoraproject.org
4 comments
3 participants
participants (3)
-
David Boreham -
Jón Björn Njálsson -
To Ngan