[Fedora-directory-users] Re: FDS and Active directory Sync

[Rich Megginson]

Vipul Ramani wrote:
> Hi Rich,
>
> I did it ..but i am getting the error.  :(
>
> I run from my directory server ....
>
> [root at linux1 ~]# /usr/lib/mozldap/ldapsearch -h 192.168.1.200 
> <http://192.168.1.200> -p 636  -Z -P /etc/dirsrv/slapd-linux1 -D 
> "cn=administrator,cn=users,dc=tf-lab,dc=exp,dc=com" -w ABC123@ -s base 
> -b "" "objectclass=*"
> ldap_simple_bind: Can't contact LDAP server
>         SSL error -5938 (Encountered end of file.)
> [root at linux1 ~]#
For one, it probably won't work to use -h IPaddress - in order to do the 
cert validation, it needs the FQDN of the windows host - that FQDN must 
be the value of the leftmost cn= in the AD server cert subjectDN.

But this error indicates it's not even getting that far.  Either AD is 
not listening on 636, or there is some sort of network/firewall problem.
>
>
> On Wed, Aug 13, 2008 at 2:39 PM, Vipul Ramani <vipulramani at gmail.com 
> <mailto:vipulramani at gmail.com>> wrote:
>
>
>     Hi Rich,
>
>     yes it is enable . then also getting same error .. I am able to
>     connect using LDAP Browser. is there any other way debug in to
>     depth to resolve this problem...
>
>     ( not firewall no accesslist or nothing is kinda blocking... )
>
>     Can you suggest me  is document i have to follow ... i tried
>     fedora , redhat but if , i m following step by step it does not
>     work .....
>
>     -- 
>     Regards
>
>     Vipul Ramani
>
>
>
>
> -- 
> Regards
>
> Vipul Ramani
>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3258 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20080813/bb6d3da0/attachment.bin>