<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>
<style>.hmmessage P{margin:0px;padding:0px}body.hmmessage{FONT-SIZE: 10pt;FONT-FAMILY:Tahoma}</style>Hi,<br><br>This is driving me crazy.... <br><br>I'm trying to setup a SSL communication between Directory Server and AD.<br><br>Without SSL, the synchronization works very well, I can see all user accounts in DS, but I need SSL to be able to synchronize the passwords as well.<br><br>So, here what I did:<br><br>On AD, I opened IE on this following address:<br><br>http://localhost/certsrv/<br><br>I requested a new certificate and installed it. I can see the new certificate in MMC console, in Certificate->Personal->Certificates.<br><br>After, I exported the CA Certificate from DS like this:<br><br>pk12util -d . -o CAcert.pfx -n CAcert<br><br>I transfered the file to AD and imported it right here:<br><br>MMC Console->Certificate->Trusted Root Certification Authorites->Certificates<br><br>Then, I exported the CA Certificate (from AD) from the same directory as above and imported in DS with the DS Console (section Manage Certificates->CA Certs)<br><br>I tested the communication by doing this:<br><br>/usr/lib/mozldap6/ldapsearch -Z -P /etc/dirsrv/slapd-myinst/cert8.db -h 1.1.1.1 -p 636 -D "cn=Windows Sync,cn=users,dc=domain,dc=local" -w _PASS_ -s sub -b "ou=users,dc=domain,dc=local" "(objectClass=*)"<br><br>Work well, I have a listing of user accounts.<br><br>Then, I re-created a new Windows Sync agreement (with SSL and port 636) and I'm always getting this following error:<br>
<br>The consumer initialization has unsuccessfully completed.<br>The error received by the replica is: 48 - LDAP error: Inappropriate authentication<br><br>Thank you for your help in advance.<br><br><br /><hr /> <a href='' target='_new'></a></body>
</html>