<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> On 05/07/2013 07:53 AM, Arturo Borrero wrote: <blockquote cite="mid:5188EB44.4040105@cica.es" type="cite">On 03/05/13 12:40, Arturo Borrero wrote: <blockquote type="cite">Hi there! In a freshly installed FreeIPA server, I try: # ipa migrate-ds LDAP URI: <a class="moz-txt-link-freetext" href="ldaps://ldap.example.com">ldaps://ldap.example.com</a> Contraseña: ipa: ERROR: no es posible conectar con u'<a class="moz-txt-link-freetext" href="ldaps://ldap.example.com':">ldaps://ldap.example.com':</a> LDAP Server Down This is a related line I found in the logfile: [Fri May 03 12:30:53 2013] [error] ipa: INFO: <a class="moz-txt-link-abbreviated" href="mailto:admin@EXAMPLE.COM:">admin@EXAMPLE.COM:</a> migrate_ds(u'<a class="moz-txt-link-freetext" href="ldaps://ldap.example.com">ldaps://ldap.example.com</a>', u'********', binddn=u'cn=admin,dc=example,dc=com', usercontainer=u'ou=example,ou=users', groupcontainer=u'ou=example,ou=groups', userobjectclass=(u'person',), groupobjectclass=(u'groupOfUniqueNames', u'groupOfNames'), userignoreobjectclass=None, userignoreattribute=None, groupignoreobjectclass=None, groupignoreattribute=None, groupoverwritegid=False, schema=u'RFC2307bis', continue=False, basedn=u'ou=cuentas,dc=example,dc=com', compat=False, exclude_groups=None, exclude_users=None): NetworkError Am I missing something? There is some prerequisites in the DNS server for this to work? Of course, the IPA server has full network contact with the LDAP server (tcp/636), i see some packets doing a tpcdump in the LDAP server. Is there a way to get a more verbose log output of what is going on? </blockquote> I don't have any clue yet. Google seems empty when I search for this error and this operation made by others seems errorfree. Any idea? </blockquote> Can it be that the certs are not properly configured? What LDAP server you are trying to use? <blockquote cite="mid:5188EB44.4040105@cica.es" type="cite"> <fieldset class="mimeAttachmentHeader"></fieldset> <pre wrap="">_______________________________________________ Freeipa-users mailing list <a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre> </blockquote> <pre class="moz-signature" cols="72">-- Thank you, Dmitri Pal Sr. Engineering Manager for IdM portfolio Red Hat Inc. ------------------------------- Looking to carve out IT costs? <a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a> </pre> </body> </html>