[389-users] Problem syncing DS with AD W2k3
Rich Megginson
rmeggins at redhat.com
Fri May 6 13:10:28 UTC 2011
On 05/06/2011 04:37 AM, Carsten Grzemba wrote:
> Hi,
>
> I have a problem with syncing users with AD W2k3. The Setup works fine with W2k8.
>
> If I start a replica initialization
> send_dirsync_search
> got no results from W2k3 AD. No errors seen in the log.
>
> [06/May/2011:10:59:20 +0200] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=MDVH" (srv-dc-vlan:636)".
> [06/May/2011:10:59:20 +0200] - => windows_private_null_dirsync_control
> [06/May/2011:10:59:20 +0200] -<= windows_private_null_dirsync_control
> [06/May/2011:10:59:20 +0200] - => windows_private_get_windows_subtree
> [06/May/2011:10:59:20 +0200] -<= windows_private_get_windows_subtree
> [06/May/2011:10:59:20 +0200] - => windows_private_get_directory_replarea
> [06/May/2011:10:59:20 +0200] -<= windows_private_get_directory_replarea
> [06/May/2011:10:59:20 +0200] - => windows_private_get_api_cookie
> [06/May/2011:10:59:20 +0200] -<= windows_private_get_api_cookie
> [06/May/2011:10:59:20 +0200] - => windows_dirsync_inc_run
> [06/May/2011:10:59:20 +0200] - => send_dirsync_search
> [06/May/2011:10:59:20 +0200] - => windows_conn_connected
> [06/May/2011:10:59:20 +0200] -<= windows_conn_connected
> [06/May/2011:10:59:20 +0200] - => windows_private_get_windows_subtree
> [06/May/2011:10:59:20 +0200] -<= windows_private_get_windows_subtree
> [06/May/2011:10:59:20 +0200] - => windows_private_dirsync_control
> [06/May/2011:10:59:20 +0200] -<= windows_private_dirsync_control
> [06/May/2011:10:59:20 +0200] - Calling dirsync search request plugin
> [06/May/2011:10:59:20 +0200] - => windows_private_get_api_cookie
> [06/May/2011:10:59:20 +0200] -<= windows_private_get_api_cookie
> [06/May/2011:10:59:20 +0200] - Sending dirsync search request
> [06/May/2011:10:59:20 +0200] -<= send_dirsync_search
> [06/May/2011:10:59:20 +0200] - => windows_conn_get_search_result
> [06/May/2011:10:59:20 +0200] - => windows_conn_connected
> [06/May/2011:10:59:20 +0200] -<= windows_conn_connected
> [06/May/2011:10:59:20 +0200] - => windows_private_dirsync_has_more
> [06/May/2011:10:59:20 +0200] -<= windows_private_dirsync_has_more
> [06/May/2011:10:59:20 +0200] -<= windows_conn_get_search_result
> [06/May/2011:10:59:21 +0200] - => windows_private_dirsync_has_more
> [06/May/2011:10:59:21 +0200] -<= windows_private_dirsync_has_more
> [06/May/2011:10:59:21 +0200] -<= windows_dirsync_inc_run
> [06/May/2011:10:59:21 +0200] - => windows_private_save_dirsync_cookie
> [06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 1.3.6.1.4.1.42.2.27.8.5.1)[06/May/2011:10:59:21 +0200] -<= slapi_control_present 0 (NO CONTROLS)
> [06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.12)
> [06/May/2011:10:59:21 +0200] -<= slapi_control_present 0 (NO CONTROLS)
> [06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.18)
> [06/May/2011:10:59:21 +0200] -<= slapi_control_present 0 (NO CONTROLS)
> [06/May/2011:10:59:21 +0200] - modify_update_last_modified_attr
> [06/May/2011:10:59:21 +0200] - Calling plugin 'Distributed Numeric Assignment internal preop plugin' #0 type 421
> [06/May/2011:10:59:21 +0200] dna-plugin - --> dna_pre_op
> [06/May/2011:10:59:21 +0200] dna-plugin - --> dna_get_dn
> [06/May/2011:10:59:21 +0200] dna-plugin -<-- dna_get_dn
> [06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.12)
> [06/May/2011:10:59:21 +0200] -<= slapi_control_present 0 (NO CONTROLS)
> [06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.18)
> [06/May/2011:10:59:21 +0200] -<= slapi_control_present 0 (NO CONTROLS)
> [06/May/2011:10:59:21 +0200] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=2
> [06/May/2011:10:59:21 +0200] -<= slapi_reslimit_get_integer_limit() returning NO VALUE
> [06/May/2011:10:59:21 +0200] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=1
> [06/May/2011:10:59:21 +0200] -<= slapi_reslimit_get_integer_limit() returning NO VALUE
> [06/May/2011:10:59:21 +0200] - => compute_limits: sizelimit=-1, timelimit=-1
> [06/May/2011:10:59:21 +0200] - Calling plugin 'ACL preoperation' #1 type 403
> [06/May/2011:10:59:21 +0200] - Calling plugin 'deref' #3 type 403
> [06/May/2011:10:59:21 +0200] deref-plugin - --> deref_pre_search
> [06/May/2011:10:59:21 +0200] deref-plugin -<-- deref_pre_op
> [06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication preoperation plugin' #6 type
> 403
> [06/May/2011:10:59:21 +0200] - Calling plugin 'Multimaster replication preoperation plugin' #8
> type 403
> [06/May/2011:10:59:21 +0200] - => send_ldap_search_entry (cn=MDVH,cn=replica,cn=dc\3Dmdvh\2Cdc\3Ddom,cn=mapping tree,cn=config)
> [06/May/2011:10:59:21 +0200] - Calling plugin 'deref' #3 type 410
> [06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication preoperation plugin' #6 type
> 410
> [06/May/2011:10:59:21 +0200] -<= send_ldap_search_entry
> [06/May/2011:10:59:21 +0200] - => send_ldap_result 0::
> [06/May/2011:10:59:21 +0200] -<= send_ldap_result
> [06/May/2011:10:59:21 +0200] - => entry_apply_mods
> [06/May/2011:10:59:21 +0200] -<= entry_apply_mods 0
> [06/May/2011:10:59:21 +0200] dna-plugin - --> dna_is_config
> [06/May/2011:10:59:21 +0200] dna-plugin -<-- dna_is_config
> [06/May/2011:10:59:21 +0200] dna-plugin -<-- dna_pre_op
> [06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication internal preoperation plugin' #1 type 421
> [06/May/2011:10:59:21 +0200] - Calling plugin 'Multimaster replication internal preoperation plugin' #2 type 421
> [06/May/2011:10:59:21 +0200] - => entry_apply_mods
> [06/May/2011:10:59:21 +0200] -<= entry_apply_mods 0
> [06/May/2011:10:59:21 +0200] - => send_ldap_result 0::
> [06/May/2011:10:59:21 +0200] -<= send_ldap_result
> [06/May/2011:10:59:21 +0200] - ps_service_persistent_searches: entry "cn=MDVH,cn=replica,cn=dc\3Dmdvh\2Cdc\3Ddom,cn=mapping tree,cn=config" not enqueued on any persistent search lists
> [06/May/2011:10:59:21 +0200] - Calling plugin 'Retrocl internal postoperation plugin' #0 type 521
> [06/May/2011:10:59:21 +0200] - not applying change if not logging
> [06/May/2011:10:59:21 +0200] - Calling plugin 'Class of Service internalpostoperation plugin' #1 type 521
> [06/May/2011:10:59:21 +0200] - --> cos_post_op
> [06/May/2011:10:59:21 +0200] - --> cos_cache_change_notify
> [06/May/2011:10:59:21 +0200] - --> cos_cache_template_index_bsearch
> [06/May/2011:10:59:21 +0200] - --> cos_cache_getref
> [06/May/2011:10:59:21 +0200] -<-- cos_cache_getref
> [06/May/2011:10:59:21 +0200] -<-- cos_cache_template_index_bsearch
> [06/May/2011:10:59:21 +0200] -<-- cos_cache_change_notify
> [06/May/2011:10:59:21 +0200] -<-- cos_post_op
> [06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication internal postoperation plugin' #2 type 521
> [06/May/2011:10:59:21 +0200] - Calling plugin 'Linked Attributes internal postop plugin' #3 type 521
> [06/May/2011:10:59:21 +0200] linkedattrs-plugin - --> linked_attrs_mod_post_op
> [06/May/2011:10:59:21 +0200] - Calling plugin 'Managed Entries internal postop plugin' #4 type
> 521
> [06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_mod_post_op
> [06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_oktodo
> [06/May/2011:10:59:21 +0200] managed-entries-plugin -<-- mep_oktodo
> [06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_get_dn
> [06/May/2011:10:59:21 +0200] managed-entries-plugin -<-- mep_get_dn
> [06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_dn_is_config
> [06/May/2011:10:59:21 +0200] managed-entries-plugin -<-- mep_dn_is_config
> [06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_isrepl
> [06/May/2011:10:59:21 +0200] managed-entries-plugin -<-- mep_isrepl
> [06/May/2011:10:59:21 +0200] managed-entries-plugin -<-- mep_mod_post_op
> [06/May/2011:10:59:21 +0200] - Calling plugin 'Multimaster replication internal postoperation plugin' #5 type 521
> [06/May/2011:10:59:21 +0200] - Calling plugin 'Roles internalpostoperation plugin' #6 type 521
> [06/May/2011:10:59:21 +0200] -<= windows_private_save_dirsync_cookie
> [06/May/2011:10:59:21 +0200] - => windows_release_replica
> [06/May/2011:10:59:21 +0200] - => windows_conn_start_linger
> [06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - agmt="cn=MDVH" (srv-dc-vlan:636): Beginning linger on the connection
> [06/May/2011:10:59:21 +0200] - => windows_conn_connected
> [06/May/2011:10:59:21 +0200] -<= windows_conn_connected
> [06/May/2011:10:59:21 +0200] -<= windows_conn_start_linger
> [06/May/2011:10:59:21 +0200] -<= windows_release_replica
> [06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - Finished total update of replica "agmt="cn=MDVH" (srv-dc-vlan09:636)". Sent 0 entries.
> [06/May/2011:10:59:21 +0200] - total update setting consumer RUV:
> [06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - consumer: {replicageneration} 4da43ace0000004c0000
> [06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - consumer: {replica 76 ldap://ux-ldap01.mdvh.dom:389} 4da45acc0000004c0000 4da45ad90000004c0000 00000000
> ...
>
> Its a binary, build by myself:
> bash-3.00# /opt/389ds/sbin/ns-slapd -v
> 389 Project
> 389-Directory/1.2.9.a1 B2011.125.756
>
> Any hints?
Try it with the replication error log level -
http://directory.fedoraproject.org/wiki/FAQ#Troubleshooting
Also, looks like you are using the master branch from the git
repository. That is currently unstable. I suggest using the latest
stable branch 389-ds-base-1.2.8
> Thanks
> Carsten
>
>
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20110506/c308e6f5/attachment.html>
More information about the 389-users
mailing list