<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Dear 389-users,<br>
<br>
I am trying to make working a sync between my AD win 2008 R2 and
FreeIPA (fedora 20) server. <br>
My goal is to retrieve all my AD users in freeIPA database. <br>
This is my 389 ds version :<br>
<b># rpm -q 389-ds-base</b><b><br>
</b><b>389-ds-base-1.3.2.23-1.fc20.x86_64</b><br>
<br>
<br>
With "ipa-replica-manage connect --winsync ...", I succeeded to copy
users from AD to FreeIPA (via the sync agreement).<br>
<br>
I tried then to sync posix attributes (from my AD which has
"Subsystem for UNIX-based Applications") into the freeIPA server
with activating the posix winsync plugin <br>
I would like to extract attributes from my AD like : <br>
- uidNumber <br>
- gidNumber <br>
- unixHomeDirectory <br>
- loginShell <br>
- msSFU30NisDomain <br>
<br>
For this, I turn on the posix winsync plugin according to the
documentation :<br>
<a class="moz-txt-link-freetext"
href="http://www.port389.org/docs/389ds/design/winsync-posix.html">http://www.port389.org/docs/389ds/design/winsync-posix.html</a><br>
<br>
1. I enable the plugin this way : <br>
ldapmodify -D "cn=directory manager" -w xxxxx <br>
dn: cn=Posix Winsync API,cn=plugins,cn=config <br>
changetype: modify <br>
replace: nsslapd-pluginEnabled <br>
nsslapd-pluginEnabled: on<br>
<br>
2. And I also added a nisDomain attribut like this :<br>
ldapmodify -x -D "cn=directory manager" -w xxxxx<br>
dn: dc=lmsipa,dc=polytechnique,dc=fr<br>
changetype: modify<br>
replace: nisDomain<br>
nisDomain: lmsadtest<br>
<br>
The nisDomain is the same than the msSFU30NisDomain (lmsadtest) in
my AD.<br>
<br>
3. I restarted the ipa server (ipa-ctl restart).<br>
<br>
However, I do not succeed in syncing the posix attributes...<br>
<br>
<br>
4. I turned on the replication logging level<br>
and this is the log for sync of 1 user account :<br>
...<br>
<small>05/Nov/2014:10:37:28 +0100] NSMMReplicationPlugin - windows
sync - agmt="cn=meTolmscad1test.lmsadtest.polytechnique.fr"
(lmscad1test:389): map_entry_dn_outbound: looking for AD entry for
DS
dn="uid=guigne,cn=users,cn=accounts,dc=lmsipa,dc=polytechnique,dc=fr"
username="guigne"<br>
[05/Nov/2014:10:37:28 +0100] - Calling windows entry search
request plugin<br>
[05/Nov/2014:10:37:28 +0100] - windows_search_entry: received 2
messages, 1 entries, 0 references<br>
[05/Nov/2014:10:37:29 +0100] NSMMReplicationPlugin - windows sync
- agmt="cn=meTolmscad1test.lmsadtest.polytechnique.fr"
(lmscad1test:389): map_entry_dn_outbound: found AD entry
dn="CN=Edouard Guigné,OU=lms,DC=lmsadtest,DC=polytechnique,DC=fr"<br>
[05/Nov/2014:10:37:29 +0100] - Calling windows entry search
request plugin<br>
[05/Nov/2014:10:37:29 +0100] - windows_search_entry: received 2
messages, 1 entries, 0 references<br>
[05/Nov/2014:10:37:29 +0100] NSMMReplicationPlugin - windows sync
- windows_generate_update_mods:
uid=guigne,cn=users,cn=accounts,dc=lmsipa,dc=polytechnique,dc=fr,
sn : values are equal<br>
[05/Nov/2014:10:37:29 +0100] NSMMReplicationPlugin - windows sync
- windows_generate_update_mods:
uid=guigne,cn=users,cn=accounts,dc=lmsipa,dc=polytechnique,dc=fr,
description : values are equal<br>
[05/Nov/2014:10:37:29 +0100] NSMMReplicationPlugin - windows sync
- windows_generate_update_mods:
uid=guigne,cn=users,cn=accounts,dc=lmsipa,dc=polytechnique,dc=fr,
givenName : values are equal<br>
[05/Nov/2014:10:37:29 +0100] NSMMReplicationPlugin - windows sync
- windows_generate_update_mods:
uid=guigne,cn=users,cn=accounts,dc=lmsipa,dc=polytechnique,dc=fr,
codePage : values not present on peer entry<br>
[05/Nov/2014:10:37:29 +0100] NSMMReplicationPlugin - windows sync
- windows_generate_update_mods:
uid=guigne,cn=users,cn=accounts,dc=lmsipa,dc=polytechnique,dc=fr,
scriptPath : values not present on peer entry<br>
[05/Nov/2014:10:37:29 +0100] NSMMReplicationPlugin - windows sync
- windows_generate_update_mods:
uid=guigne,cn=users,cn=accounts,dc=lmsipa,dc=polytechnique,dc=fr,
accountExpires : values not present on peer entry<br>
[05/Nov/2014:10:37:29 +0100] NSMMReplicationPlugin - windows sync
- windows_generate_update_mods:
uid=guigne,cn=users,cn=accounts,dc=lmsipa,dc=polytechnique,dc=fr,
sAMAccountName : values not present on peer entry<br>
[05/Nov/2014:10:37:29 +0100] NSMMReplicationPlugin - windows sync
- windows_generate_update_mods:
uid=guigne,cn=users,cn=accounts,dc=lmsipa,dc=polytechnique,dc=fr,
mail : values are equal<br>
<b>[05/Nov/2014:10:37:29 +0100] posix-winsync - getNisDomainName:
no nisdomainname found in DC=fr, LDAP Err-1</b><br>
[05/Nov/2014:10:37:29 +0100] - smod - windows sync<br>
[05/Nov/2014:10:37:29 +0100] - smod 0 - add: codePage<br>
[05/Nov/2014:10:37:29 +0100] - smod 0 - value: codePage: 0<br>
[05/Nov/2014:10:37:29 +0100] - smod 1 - add: scriptPath<br>
[05/Nov/2014:10:37:29 +0100] - smod 1 - value: scriptPath:
Logon_guigne.bat<br>
[05/Nov/2014:10:37:29 +0100] - smod 2 - add: accountExpires<br>
[05/Nov/2014:10:37:29 +0100] - smod 2 - value: accountExpires:
9223372036854775807<br>
[05/Nov/2014:10:37:29 +0100] - smod 3 - add: sAMAccountName<br>
[05/Nov/2014:10:37:29 +0100] - smod 3 - value: sAMAccountName:
guigne<br>
[05/Nov/2014:10:37:29 +0100] - smod 4 - add: msSFU30uidnumber<br>
[05/Nov/2014:10:37:29 +0100] - smod 4 - value: msSFU30uidnumber:
12069<br>
[05/Nov/2014:10:37:29 +0100] - smod 5 - add: msSFU30gidnumber<br>
[05/Nov/2014:10:37:29 +0100] - smod 5 - value: msSFU30gidnumber:
4400<br>
[05/Nov/2014:10:37:30 +0100] - smod 6 - add: msSFU30loginshell<br>
[05/Nov/2014:10:37:30 +0100] - smod 6 - value: msSFU30loginshell:
/bin/bash<br>
[05/Nov/2014:10:37:30 +0100] NSMMReplicationPlugin - windows sync
- windows_update_remote_entry: modifying entry CN=Edouard
Guigné,OU=lms,DC=lmsadtest,DC=polytechnique,DC=fr<br>
[05/Nov/2014:10:37:30 +0100] NSMMReplicationPlugin - windows sync
- agmt="cn=meTolmscad1test.lmsadtest.polytechnique.fr"
(lmscad1test:389): Received result code 16 (00000057: LdapErr:
DSID-0C090B8A, comment: Error in attribute conversion operation,
data 0, v1db1) for modify operation</small><br>
...<br>
<br>
So the Posix attributes are well found but not sync in 389 database.<br>
What does it mean :<br>
<small><b>posix-winsync - getNisDomainName: no nisdomainname found
in DC=fr, LDAP Err-1</b></small> <br>
<br>
May you help me to solve the issue ?<br>
<br>
Best Regards,<br>
Ed<br>
<br>
</body>
</html>