FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora Directory

 
 
LinkBack Thread Tools
 
Old 05-06-2011, 10:37 AM
Carsten Grzemba
 
Default Problem syncing DS with AD W2k3

Hi,

I have a problem with syncing users with AD W2k3. The Setup works fine with W2k8.

If I start a replica initialization
send_dirsync_search
got no results from W2k3 AD. No errors seen in the log.

[06/May/2011:10:59:20 +0200] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=MDVH" (srv-dc-vlan:636)".
[06/May/2011:10:59:20 +0200] - => windows_private_null_dirsync_control
[06/May/2011:10:59:20 +0200] - <= windows_private_null_dirsync_control
[06/May/2011:10:59:20 +0200] - => windows_private_get_windows_subtree
[06/May/2011:10:59:20 +0200] - <= windows_private_get_windows_subtree
[06/May/2011:10:59:20 +0200] - => windows_private_get_directory_replarea
[06/May/2011:10:59:20 +0200] - <= windows_private_get_directory_replarea
[06/May/2011:10:59:20 +0200] - => windows_private_get_api_cookie
[06/May/2011:10:59:20 +0200] - <= windows_private_get_api_cookie
[06/May/2011:10:59:20 +0200] - => windows_dirsync_inc_run
[06/May/2011:10:59:20 +0200] - => send_dirsync_search
[06/May/2011:10:59:20 +0200] - => windows_conn_connected
[06/May/2011:10:59:20 +0200] - <= windows_conn_connected
[06/May/2011:10:59:20 +0200] - => windows_private_get_windows_subtree
[06/May/2011:10:59:20 +0200] - <= windows_private_get_windows_subtree
[06/May/2011:10:59:20 +0200] - => windows_private_dirsync_control
[06/May/2011:10:59:20 +0200] - <= windows_private_dirsync_control
[06/May/2011:10:59:20 +0200] - Calling dirsync search request plugin
[06/May/2011:10:59:20 +0200] - => windows_private_get_api_cookie
[06/May/2011:10:59:20 +0200] - <= windows_private_get_api_cookie
[06/May/2011:10:59:20 +0200] - Sending dirsync search request
[06/May/2011:10:59:20 +0200] - <= send_dirsync_search
[06/May/2011:10:59:20 +0200] - => windows_conn_get_search_result
[06/May/2011:10:59:20 +0200] - => windows_conn_connected
[06/May/2011:10:59:20 +0200] - <= windows_conn_connected
[06/May/2011:10:59:20 +0200] - => windows_private_dirsync_has_more
[06/May/2011:10:59:20 +0200] - <= windows_private_dirsync_has_more
[06/May/2011:10:59:20 +0200] - <= windows_conn_get_search_result
[06/May/2011:10:59:21 +0200] - => windows_private_dirsync_has_more
[06/May/2011:10:59:21 +0200] - <= windows_private_dirsync_has_more
[06/May/2011:10:59:21 +0200] - <= windows_dirsync_inc_run
[06/May/2011:10:59:21 +0200] - => windows_private_save_dirsync_cookie
[06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 1.3.6.1.4.1.42.2.27.8.5.1)[06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS)
[06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.12)
[06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS)
[06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.18)
[06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS)
[06/May/2011:10:59:21 +0200] - modify_update_last_modified_attr
[06/May/2011:10:59:21 +0200] - Calling plugin 'Distributed Numeric Assignment internal preop plugin' #0 type 421
[06/May/2011:10:59:21 +0200] dna-plugin - --> dna_pre_op
[06/May/2011:10:59:21 +0200] dna-plugin - --> dna_get_dn
[06/May/2011:10:59:21 +0200] dna-plugin - <-- dna_get_dn
[06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.12)
[06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS)
[06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.18)
[06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS)
[06/May/2011:10:59:21 +0200] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=2
[06/May/2011:10:59:21 +0200] - <= slapi_reslimit_get_integer_limit() returning NO VALUE
[06/May/2011:10:59:21 +0200] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=1
[06/May/2011:10:59:21 +0200] - <= slapi_reslimit_get_integer_limit() returning NO VALUE
[06/May/2011:10:59:21 +0200] - => compute_limits: sizelimit=-1, timelimit=-1
[06/May/2011:10:59:21 +0200] - Calling plugin 'ACL preoperation' #1 type 403
[06/May/2011:10:59:21 +0200] - Calling plugin 'deref' #3 type 403
[06/May/2011:10:59:21 +0200] deref-plugin - --> deref_pre_search
[06/May/2011:10:59:21 +0200] deref-plugin - <-- deref_pre_op
[06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication preoperation plugin' #6 type
403
[06/May/2011:10:59:21 +0200] - Calling plugin 'Multimaster replication preoperation plugin' #8
type 403
[06/May/2011:10:59:21 +0200] - => send_ldap_search_entry (cn=MDVH,cn=replica,cn=dc3Dmdvh2Cdc3Ddom,cn=mappin g tree,cn=config)
[06/May/2011:10:59:21 +0200] - Calling plugin 'deref' #3 type 410
[06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication preoperation plugin' #6 type
410
[06/May/2011:10:59:21 +0200] - <= send_ldap_search_entry
[06/May/2011:10:59:21 +0200] - => send_ldap_result 0::
[06/May/2011:10:59:21 +0200] - <= send_ldap_result
[06/May/2011:10:59:21 +0200] - => entry_apply_mods
[06/May/2011:10:59:21 +0200] - <= entry_apply_mods 0
[06/May/2011:10:59:21 +0200] dna-plugin - --> dna_is_config
[06/May/2011:10:59:21 +0200] dna-plugin - <-- dna_is_config
[06/May/2011:10:59:21 +0200] dna-plugin - <-- dna_pre_op
[06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication internal preoperation plugin' #1 type 421
[06/May/2011:10:59:21 +0200] - Calling plugin 'Multimaster replication internal preoperation plugin' #2 type 421
[06/May/2011:10:59:21 +0200] - => entry_apply_mods
[06/May/2011:10:59:21 +0200] - <= entry_apply_mods 0
[06/May/2011:10:59:21 +0200] - => send_ldap_result 0::
[06/May/2011:10:59:21 +0200] - <= send_ldap_result
[06/May/2011:10:59:21 +0200] - ps_service_persistent_searches: entry "cn=MDVH,cn=replica,cn=dc3Dmdvh2Cdc3Ddom,cn=mappin g tree,cn=config" not enqueued on any persistent search lists
[06/May/2011:10:59:21 +0200] - Calling plugin 'Retrocl internal postoperation plugin' #0 type 521
[06/May/2011:10:59:21 +0200] - not applying change if not logging
[06/May/2011:10:59:21 +0200] - Calling plugin 'Class of Service internalpostoperation plugin' #1 type 521
[06/May/2011:10:59:21 +0200] - --> cos_post_op
[06/May/2011:10:59:21 +0200] - --> cos_cache_change_notify
[06/May/2011:10:59:21 +0200] - --> cos_cache_template_index_bsearch
[06/May/2011:10:59:21 +0200] - --> cos_cache_getref
[06/May/2011:10:59:21 +0200] - <-- cos_cache_getref
[06/May/2011:10:59:21 +0200] - <-- cos_cache_template_index_bsearch
[06/May/2011:10:59:21 +0200] - <-- cos_cache_change_notify
[06/May/2011:10:59:21 +0200] - <-- cos_post_op
[06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication internal postoperation plugin' #2 type 521
[06/May/2011:10:59:21 +0200] - Calling plugin 'Linked Attributes internal postop plugin' #3 type 521
[06/May/2011:10:59:21 +0200] linkedattrs-plugin - --> linked_attrs_mod_post_op
[06/May/2011:10:59:21 +0200] - Calling plugin 'Managed Entries internal postop plugin' #4 type
521
[06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_mod_post_op
[06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_oktodo
[06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_oktodo
[06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_get_dn
[06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_get_dn
[06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_dn_is_config
[06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_dn_is_config
[06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_isrepl
[06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_isrepl
[06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_mod_post_op
[06/May/2011:10:59:21 +0200] - Calling plugin 'Multimaster replication internal postoperation plugin' #5 type 521
[06/May/2011:10:59:21 +0200] - Calling plugin 'Roles internalpostoperation plugin' #6 type 521
[06/May/2011:10:59:21 +0200] - <= windows_private_save_dirsync_cookie
[06/May/2011:10:59:21 +0200] - => windows_release_replica
[06/May/2011:10:59:21 +0200] - => windows_conn_start_linger
[06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - agmt="cn=MDVH" (srv-dc-vlan:636): Beginning linger on the connection
[06/May/2011:10:59:21 +0200] - => windows_conn_connected
[06/May/2011:10:59:21 +0200] - <= windows_conn_connected
[06/May/2011:10:59:21 +0200] - <= windows_conn_start_linger
[06/May/2011:10:59:21 +0200] - <= windows_release_replica
[06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - Finished total update of replica "agmt="cn=MDVH" (srv-dc-vlan09:636)". Sent 0 entries.
[06/May/2011:10:59:21 +0200] - total update setting consumer RUV:
[06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - consumer: {replicageneration} 4da43ace0000004c0000
[06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - consumer: {replica 76 ldap://ux-ldap01.mdvh.dom:389} 4da45acc0000004c0000 4da45ad90000004c0000 00000000
...

Its a binary, build by myself:
bash-3.00# /opt/389ds/sbin/ns-slapd -v
389 Project
389-Directory/1.2.9.a1 B2011.125.756

Any hints?

Thanks
Carsten
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
 
Old 05-06-2011, 01:10 PM
Rich Megginson
 
Default Problem syncing DS with AD W2k3

On 05/06/2011 04:37 AM, Carsten Grzemba wrote:

Hi,

I have a problem with syncing users with AD W2k3. The Setup works fine with W2k8.

If I start a replica initialization
send_dirsync_search
got no results from W2k3 AD. No errors seen in the log.

[06/May/2011:10:59:20 +0200] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=MDVH" (srv-dc-vlan:636)".
[06/May/2011:10:59:20 +0200] - => windows_private_null_dirsync_control
[06/May/2011:10:59:20 +0200] - <= windows_private_null_dirsync_control
[06/May/2011:10:59:20 +0200] - => windows_private_get_windows_subtree
[06/May/2011:10:59:20 +0200] - <= windows_private_get_windows_subtree
[06/May/2011:10:59:20 +0200] - => windows_private_get_directory_replarea
[06/May/2011:10:59:20 +0200] - <= windows_private_get_directory_replarea
[06/May/2011:10:59:20 +0200] - => windows_private_get_api_cookie
[06/May/2011:10:59:20 +0200] - <= windows_private_get_api_cookie
[06/May/2011:10:59:20 +0200] - => windows_dirsync_inc_run
[06/May/2011:10:59:20 +0200] - => send_dirsync_search
[06/May/2011:10:59:20 +0200] - => windows_conn_connected
[06/May/2011:10:59:20 +0200] - <= windows_conn_connected
[06/May/2011:10:59:20 +0200] - => windows_private_get_windows_subtree
[06/May/2011:10:59:20 +0200] - <= windows_private_get_windows_subtree
[06/May/2011:10:59:20 +0200] - => windows_private_dirsync_control
[06/May/2011:10:59:20 +0200] - <= windows_private_dirsync_control
[06/May/2011:10:59:20 +0200] - Calling dirsync search request plugin
[06/May/2011:10:59:20 +0200] - => windows_private_get_api_cookie
[06/May/2011:10:59:20 +0200] - <= windows_private_get_api_cookie
[06/May/2011:10:59:20 +0200] - Sending dirsync search request
[06/May/2011:10:59:20 +0200] - <= send_dirsync_search
[06/May/2011:10:59:20 +0200] - => windows_conn_get_search_result
[06/May/2011:10:59:20 +0200] - => windows_conn_connected
[06/May/2011:10:59:20 +0200] - <= windows_conn_connected
[06/May/2011:10:59:20 +0200] - => windows_private_dirsync_has_more
[06/May/2011:10:59:20 +0200] - <= windows_private_dirsync_has_more
[06/May/2011:10:59:20 +0200] - <= windows_conn_get_search_result
[06/May/2011:10:59:21 +0200] - => windows_private_dirsync_has_more
[06/May/2011:10:59:21 +0200] - <= windows_private_dirsync_has_more
[06/May/2011:10:59:21 +0200] - <= windows_dirsync_inc_run
[06/May/2011:10:59:21 +0200] - => windows_private_save_dirsync_cookie
[06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 1.3.6.1.4.1.42.2.27.8.5.1)[06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS)
[06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.12)
[06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS)
[06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.18)
[06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS)
[06/May/2011:10:59:21 +0200] - modify_update_last_modified_attr
[06/May/2011:10:59:21 +0200] - Calling plugin 'Distributed Numeric Assignment internal preop plugin' #0 type 421
[06/May/2011:10:59:21 +0200] dna-plugin - --> dna_pre_op
[06/May/2011:10:59:21 +0200] dna-plugin - --> dna_get_dn
[06/May/2011:10:59:21 +0200] dna-plugin - <-- dna_get_dn
[06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.12)
[06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS)
[06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.18)
[06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS)
[06/May/2011:10:59:21 +0200] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=2
[06/May/2011:10:59:21 +0200] - <= slapi_reslimit_get_integer_limit() returning NO VALUE
[06/May/2011:10:59:21 +0200] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=1
[06/May/2011:10:59:21 +0200] - <= slapi_reslimit_get_integer_limit() returning NO VALUE
[06/May/2011:10:59:21 +0200] - => compute_limits: sizelimit=-1, timelimit=-1
[06/May/2011:10:59:21 +0200] - Calling plugin 'ACL preoperation' #1 type 403
[06/May/2011:10:59:21 +0200] - Calling plugin 'deref' #3 type 403
[06/May/2011:10:59:21 +0200] deref-plugin - --> deref_pre_search
[06/May/2011:10:59:21 +0200] deref-plugin - <-- deref_pre_op
[06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication preoperation plugin' #6 type
403
[06/May/2011:10:59:21 +0200] - Calling plugin 'Multimaster replication preoperation plugin' #8
type 403
[06/May/2011:10:59:21 +0200] - => send_ldap_search_entry (cn=MDVH,cn=replica,cn=dc3Dmdvh2Cdc3Ddom,cn=mappin g tree,cn=config)
[06/May/2011:10:59:21 +0200] - Calling plugin 'deref' #3 type 410
[06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication preoperation plugin' #6 type
410
[06/May/2011:10:59:21 +0200] - <= send_ldap_search_entry
[06/May/2011:10:59:21 +0200] - => send_ldap_result 0::
[06/May/2011:10:59:21 +0200] - <= send_ldap_result
[06/May/2011:10:59:21 +0200] - => entry_apply_mods
[06/May/2011:10:59:21 +0200] - <= entry_apply_mods 0
[06/May/2011:10:59:21 +0200] dna-plugin - --> dna_is_config
[06/May/2011:10:59:21 +0200] dna-plugin - <-- dna_is_config
[06/May/2011:10:59:21 +0200] dna-plugin - <-- dna_pre_op
[06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication internal preoperation plugin' #1 type 421
[06/May/2011:10:59:21 +0200] - Calling plugin 'Multimaster replication internal preoperation plugin' #2 type 421
[06/May/2011:10:59:21 +0200] - => entry_apply_mods
[06/May/2011:10:59:21 +0200] - <= entry_apply_mods 0
[06/May/2011:10:59:21 +0200] - => send_ldap_result 0::
[06/May/2011:10:59:21 +0200] - <= send_ldap_result
[06/May/2011:10:59:21 +0200] - ps_service_persistent_searches: entry "cn=MDVH,cn=replica,cn=dc3Dmdvh2Cdc3Ddom,cn=mappin g tree,cn=config" not enqueued on any persistent search lists
[06/May/2011:10:59:21 +0200] - Calling plugin 'Retrocl internal postoperation plugin' #0 type 521
[06/May/2011:10:59:21 +0200] - not applying change if not logging
[06/May/2011:10:59:21 +0200] - Calling plugin 'Class of Service internalpostoperation plugin' #1 type 521
[06/May/2011:10:59:21 +0200] - --> cos_post_op
[06/May/2011:10:59:21 +0200] - --> cos_cache_change_notify
[06/May/2011:10:59:21 +0200] - --> cos_cache_template_index_bsearch
[06/May/2011:10:59:21 +0200] - --> cos_cache_getref
[06/May/2011:10:59:21 +0200] - <-- cos_cache_getref
[06/May/2011:10:59:21 +0200] - <-- cos_cache_template_index_bsearch
[06/May/2011:10:59:21 +0200] - <-- cos_cache_change_notify
[06/May/2011:10:59:21 +0200] - <-- cos_post_op
[06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication internal postoperation plugin' #2 type 521
[06/May/2011:10:59:21 +0200] - Calling plugin 'Linked Attributes internal postop plugin' #3 type 521
[06/May/2011:10:59:21 +0200] linkedattrs-plugin - --> linked_attrs_mod_post_op
[06/May/2011:10:59:21 +0200] - Calling plugin 'Managed Entries internal postop plugin' #4 type
521
[06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_mod_post_op
[06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_oktodo
[06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_oktodo
[06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_get_dn
[06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_get_dn
[06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_dn_is_config
[06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_dn_is_config
[06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_isrepl
[06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_isrepl
[06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_mod_post_op
[06/May/2011:10:59:21 +0200] - Calling plugin 'Multimaster replication internal postoperation plugin' #5 type 521
[06/May/2011:10:59:21 +0200] - Calling plugin 'Roles internalpostoperation plugin' #6 type 521
[06/May/2011:10:59:21 +0200] - <= windows_private_save_dirsync_cookie
[06/May/2011:10:59:21 +0200] - => windows_release_replica
[06/May/2011:10:59:21 +0200] - => windows_conn_start_linger
[06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - agmt="cn=MDVH" (srv-dc-vlan:636): Beginning linger on the connection
[06/May/2011:10:59:21 +0200] - => windows_conn_connected
[06/May/2011:10:59:21 +0200] - <= windows_conn_connected
[06/May/2011:10:59:21 +0200] - <= windows_conn_start_linger
[06/May/2011:10:59:21 +0200] - <= windows_release_replica
[06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - Finished total update of replica "agmt="cn=MDVH" (srv-dc-vlan09:636)". Sent 0 entries.
[06/May/2011:10:59:21 +0200] - total update setting consumer RUV:
[06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - consumer: {replicageneration} 4da43ace0000004c0000
[06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - consumer: {replica 76 ldap://ux-ldap01.mdvh.dom:389} 4da45acc0000004c0000 4da45ad90000004c0000 00000000
...

Its a binary, build by myself:
bash-3.00# /opt/389ds/sbin/ns-slapd -v
389 Project
389-Directory/1.2.9.a1 B2011.125.756

Any hints?


Try it with the replication error log level -
http://directory.fedoraproject.org/wiki/FAQ#Troubleshooting



Also, looks like you are using the master branch from the git
repository.* That is currently unstable.* I suggest using the latest
stable branch 389-ds-base-1.2.8



Thanks
Carsten



--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users





--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
 

Thread Tools




All times are GMT. The time now is 12:04 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org