<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 04/10/2013 09:07 AM, Kevin Thorpe
wrote:<br>
</div>
<blockquote
cite="mid:CAFMa6BZ4EWGUwbo2ojEaJFWYrDjWrhE0=XdE9UakvA8-ur6qOg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>I followed these instructions and managed to chain to a
client's external LDAP<br>
domain once. Deleted it while fiddling about and now I'm
getting 'Critical extension<br>
unavailable'. WHICH extension? Nothing in the logs either so I
have no clue as to <br>
where to look.<br>
<br>
<a moz-do-not-send="true"
href="http://directory.fedoraproject.org/wiki/Howto:ChainToAD">http://directory.fedoraproject.org/wiki/Howto:ChainToAD</a><br
clear="all">
<br>
</div>
</div>
</blockquote>
What platform? What version of 389-ds-base?<br>
Looking at the code, it looks like this means that one of the
controls in the LDAP request is marked as critical, but is not in
the list of forwarded controls (nsTransmittedControls). What is the
LDAP client? What is the requested operation? Is there a way to
get the list of controls used by the client?<br>
<br>
You might be able to get some additional logging by using the PLUGIN
log level<br>
<a class="moz-txt-link-freetext" href="http://port389.org/wiki/FAQ#Troubleshooting">http://port389.org/wiki/FAQ#Troubleshooting</a><br>
<br>
<blockquote
cite="mid:CAFMa6BZ4EWGUwbo2ojEaJFWYrDjWrhE0=XdE9UakvA8-ur6qOg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>-- <br>
Kevin Thorpe<br>
Chief Technical Officer<br>
PI Benchmark</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">--
389 users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>
<a class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></pre>
</blockquote>
<br>
</body>
</html>