ken oh
2008-Aug-18 12:00 UTC
Re: [Fedora-directory-users] Problem with the synchronization agreement
Hi,
I''m back from my vacations.
I sync the clock on fedora and windows 2003 server.
When I use the ldapsearch from the command line to bind and search the AD
from fedora on port 389, I still have the same result :
ldap_sasl_bind(SIMPLE): Can''t contact LDAP server (-1)
I also used ldp.exe from Win 2003 server to test the connection between the 2
server and I got this message :
ld = cldap_open("servertest.tc.iut", 389);
Established connection to servertest.tc.iut.
Retrieving base DSA information...
Server error: <empty>
Error<94>: ldap_parse_result failed: No result present in message
Getting 0 entries:
So my problem comes from something else. For information I''m using
fedora 9 under vmware workstation. Maybe the problem comes from here.
Or I''ve thought that the problem comes perhaps from a bad configured
file.
Thanks
Date: Fri, 25 Jul 2008 14:52:57 +0530
Hi,
While creating sync agrement Dont check the Enable ssl option,it
will work , and also check your certificates are proper on both
windows and linux directory server.Make sure CLOCK is in sync on both
windows and linux.
Regards,
pradeep
On 7/25/08, ken oh <kenoh23 yahoo fr> wrote:> Thanks for your help
>
> I try your command with the right hostname "anubis" (and not
anubix) using
> the the sync and next the admin account in the command line and I get this
> result for both account :
> ldap_sasl_bind(SIMPLE): Can''t contact LDAP server (-1)
>
> I don''t know if this info can help but my ad server is in native
mode.
>
From: Rich Megginson <rmeggins redhat com>To: kenoh23 yahoo fr,
"General discussion list for the Fedora Directory server project."
<fedora-directory-users redhat com>Cc: Subject: Re:
[Fedora-directory-users] Problem with the synchronization agreementDate: Thu, 24
Jul 2008 08:39:59 -0600
ken oh wrote:
Hi everybody,
I''m at the Windows Sync Server Info screen, I have completed all the
fields. And when I click next, I got the message "Unable to contact
Active Directory server, continue ?" using the ssl connection or not.
>From each side, I ping and I use a nslookup command to verify if the
domain name is correct; and everything is ok.
So I would like to know if someone can help me with what goes wrong,
thanks.
Try using ldapsearch from the command line to bind and search the AD
from your linux box:
ldapsearch -x -h anubix -p 389 -D
"cn=sync,cn=users,dc=tc-gea,dc=iut,dc=univ-metz,dc=fr" -w password -s
base -b "cn=users,dc=tc-gea,dc=iut,dc=univ-metz,dc=fr"
"(objectclass=*)"
Try 389 first to see if ldap is working - you''ll have to do some
additional configuration to get SSL working with ldapsearch.
I''m assuming you''ve done all of the SSL setup correctly -
http://directory.fedoraproject.org/wiki/Howto:WindowsSync and
http://directory.fedoraproject.org/wiki/Howto:SSL
This is my Windows Sync Server Info screen, if that can help :
http://img291.imageshack.us/img291/4323/sync2ur5.jpg
_____________________________________________________________________________
Envoyez avec Yahoo! Mail. Une boite mail plus intelligente http://mail.yahoo.fr