[Fedora-directory-users] Re: Need help syncing between Active, Directory and FDS

[Espen A. Stefansen]

On Thu, 2006-04-27 at 10:47 -0400, Daniel Shackelford wrote:
> > Message: 8
> > Date: Thu, 27 Apr 2006 13:36:56 +0200
> > From: "Espen A. Stefansen" <espen.stefansen at imr.no>
> > Subject: [Fedora-directory-users] Need help syncing between Active
> > 	Directory	and FDS
> > To: fedora-directory-users at redhat.com
> > Message-ID: <1146137816.5150.62.camel at itse6848>
> > Content-Type: text/plain

<snip>

> > 4. Install PassSync on a Windows Domain Controller (Windows 2003);
> > win.example.com.
> >   - Values: 
> >   --- Hostname: fds.example.com
> >   --- Port: 686
> >   --- Username: cn=directory manager,cn=config
> >   --- Cert Token: ?? (Should this be the password for the certificate?)
> >   --- Search: dc=example,dc=com
> >

The username here have to be a OU-name in AD. But after looking
carefully at the DC i found out that it didn't run SSL. How to enable
SSL on your DC, have a look here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;321051

After following this explanation and importing the certificate in FDS,
the connection was ok.

> >   And then imported the certificates from fds.example.com
> >
> > 5. Started the console, and enabled "changelog" and "replica" as
> > "single master".
> >
> > 6. I then generated a "windows sync agreement".
> >    - Values:
> >    --- domain: example.com
> >    --- DCH: win.example.com
> >    --- Enabled SSL
> >    --- Bind as: cn=directory manager,cn=config

The same goes here. The username must be in AD.

> >
> >   
> It looks like you are using the FDS Directory Manager account, rather 
> than a valid AD account.  You will need to use an AD account that has 
> the ability to create/update entries.

I'm using a valid AD account now.

> > When I try to do a full sync, it says it cant find the LDAP-server,
> > error 81. Does that mean the FDS-server? 

So now it's starting to synchronize, but nothing shows up in the
database in the console. Do i have to initialize the database as well?
Or is there something else i have to do in the console?

It also give me the following error in the error log: "Replica has no
update vector. It has never been initialized." Any ideas?

> > Does anyone have any idea on what might be wrong? And have I installed
> > it correctly?
> >
> > Regards
> > Espen Stefansen

Regards
Espen