[389-users] AD Sync Fails with: R00002105: LdapErr: DSID-0C0907C9, comment: Error processing control, data 0, vece.

[Rich Megginson]

On 07/11/2011 09:31 PM, Josh Miller wrote:
> Using:
> - 389 DS 8.1
8.1????  Platform?  rpm -qi 389-ds-base
> - AD 2003/2008
>
>
> I am trying to sync from AD (one way) to 389 DS and getting the
> following error:
>
> R00002105: LdapErr: DSID-0C0907C9, comment: Error processing control,
> data 0, vece.
>
> A tcpdump does not appear to reveal anything in the way of errors
Could you post an excerpt from it?
> and I
> got the above error from the packet capture.
>
> Any idea how to continue troubleshooting or resolve this issue?
>
> I can query AD via ldapsearch using the AD credential set that I have
> configured in the sync agreement.
389 uses the AD DirSync Control for reading the list of changes.  The 
bind DN you are using to connect to AD must have Replicator rights in 
order to use this control.
> Thanks,