[Fedora-directory-users] Problem with the synchronization agreement

[ken oh]

Hi everybody,
 
I'm at the Windows Sync Server Info screen, I have completed all the fields. And when I click next, I got the message "Unable to contact Active Directory server, continue ?" using the ssl connection or not.
> From each side, I ping and I use a nslookup command to verify if the domain name is correct; and everything is ok.

So I would like to know if someone can help me with what goes wrong, thanks.

This is my  Windows Sync Server Info screen, if that can help :
http://img291.imageshack.us/img291/4323/sync2ur5.jpg

_____________________________________________________________________________ 
Envoyez avec Yahoo! Mail. Une boite mail plus intelligente http://mail.yahoo.fr

[Rich Megginson]

ken oh wrote:
> Hi everybody,
>
> I'm at the Windows Sync Server Info screen, I have completed all the 
> fields. And when I click next, I got the message "Unable to contact 
> Active Directory server, continue ?" using the ssl connection or not.
>
> From each side, I ping and I use a nslookup command to verify if the 
> domain name is correct; and everything is ok.
>
> So I would like to know if someone can help me with what goes wrong, 
> thanks.

Try using ldapsearch from the command line to bind and search the AD 
from your linux box:
ldapsearch -x -h anubix -p 389 -D 
"cn=sync,cn=users,dc=tc-gea,dc=iut,dc=univ-metz,dc=fr" -w password -s 
base -b "cn=users,dc=tc-gea,dc=iut,dc=univ-metz,dc=fr" "(objectclass=*)"

Try 389 first to see if ldap is working - you'll have to do some 
additional configuration to get SSL working with ldapsearch.

I'm assuming you've done all of the SSL setup correctly - 
http://directory.fedoraproject.org/wiki/Howto:WindowsSync and 
http://directory.fedoraproject.org/wiki/Howto:SSL
> This is my  Windows Sync Server Info screen, if that can help :
> http://img291.imageshack.us/img291/4323/sync2ur5.jpg
>
> Envoyé avec Yahoo! Mail 
> http://us.rd.yahoo.com/mailuk/taglines/isp/control/*http://us.rd.yahoo.com/evt=52423/*http://fr.docs.yahoo.com/mail/overview/index.html.
> Une boite mail plus intelligente.
>
> --
> Fedora-directory-users mailing list
> [e-mail]
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

[ken oh]

Thanks for your help

I try your command with the right hostname "anubis"  (and not anubix) using the the sync and next the admin account in the command line and I get this result for both account :
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

I don't know if this info can help but my ad server is in native mode.

_____________________________________________________________________________ 
Envoyez avec Yahoo! Mail. Une boite mail plus intelligente http://mail.yahoo.fr

[lingu]

Hi,

While creating sync agrement Dont check the Enable ssl option,it
will work , and also check your certificates are proper on both
windows and linux directory server.Make sure CLOCK is in sync on both
windows and linux.

Regards,
pradeep

On 7/25/08, ken oh  wrote:
> Thanks for your help
>
> I try your command with the right hostname "anubis"  (and not anubix) using
> the the sync and next the admin account in the command line and I get this
> result for both account :
> ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)
>
> I don't know if this info can help but my ad server is in native mode.
>
> Envoyez avec Yahoo! Mail. Une boite mail plus intelligente
> http://mail.yahoo.fr