[Freeipa-users] Fwd: user sync works, passsync eludes me

[Petr Spacek]

Hello,

can you please open a bug against passsync and describe what exactly you did? 
Log message should clearly mention problem with certificate when it happens.

Thank you.

Petr^2 Spacek

On 12/21/2012 03:41 PM, Nate Marks wrote:
> Nevermind.  I was mucking up the certificate.  got it fixed.
>
> ---------- Forwarded message ----------
> From: *Nate Marks* <npmarks at gmail.com <mailto:npmarks at gmail.com>>
> Date: Fri, Dec 21, 2012 at 6:36 AM
> Subject: user sync works, passsync eludes me
> To: freeipa-users at redhat.com <mailto:freeipa-users at redhat.com>
>
>
> Here's what the log says:
>
> LDAP bind error in connect
> 81: Can't contact LDAP server
> Can not connect to ldap server in SyncPasswords
>
>
> I keep changing the passsync config values by re-running the msi with the
> modify option. I'm not sure if that's the way to do this, but my current
> options are:
>
> hostname:  IPA server FQDN.   it seems to resolve fine
> port number: 636
> username: (i checked this in
> ldap:uid=passsync,cn=sysaccounts,cn=etc,dc=<domain>,dc=<tld>
> password:  matches the one set in ipa-replica-manage connect --passsync  option
> certtoken:  string copied from the IPA server
> (/etc/dirsrv/slapd-<MYHOST>/pwdfile.txt)
> search base :  same as win-subtree value
>
>
> so close, but stuck.  thanks in advance for any help !
>
> nate