[Freeipa-users] cant create winsync reolication

[Rich Megginson]

On 01/31/2014 02:34 PM, Todd Maugh wrote:
> Ok that time i got output

Something is not right.  There is no windows sync agreement.

Did you see my earlier reply, about the previous ldapsearch -d 1 output, 
asking if the hostname in the certificate in AD was the same as the 
actual AD hostname?  And forward and reverse DNS is working?


>
> [root at se-idm-01.boingo.com slapd-BOINGO-COM]$ ldapsearch -LLLx -b 
> "cn=config" -D  "cn=directory manager" -W 
> 'objectclass=nsds5replicationagreement'
> Enter LDAP Password:
> dn: 
> cn=meTose-idm-02.boingo.com,cn=replica,cn=dc\3Dboingo\2Cdc\3Dcom,cn=mappin
>  g tree,cn=config
> cn: meTose-idm-02.boingo.com
> objectClass: nsds5replicationagreement
> objectClass: top
> nsDS5ReplicaTransportInfo: LDAP
> description: me to se-idm-02.boingo.com
> nsDS5ReplicaRoot: dc=boingo,dc=com
> nsDS5ReplicaHost: se-idm-02.boingo.com
> nsds5replicaTimeout: 120
> nsDS5ReplicaPort: 389
> nsDS5ReplicatedAttributeList: (objectclass=*) $ EXCLUDE memberof 
> idnssoaserial
>   entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount
> nsDS5ReplicaBindMethod: SASL/GSSAPI
> nsDS5ReplicatedAttributeListTotal: (objectclass=*) $ EXCLUDE entryusn 
> krblasts
>  uccessfulauth krblastfailedauth krbloginfailedcount
> nsds50ruv: {replicageneration} 52e15369000000040000
> nsds50ruv: {replica 3 ldap://se-idm-02.boingo.com:389} 
> 52e15372000100030000 52
>  ebf423000000030000
> nsds50ruv: {replica 4 ldap://se-idm-01.boingo.com:389} 
> 52e153d5000200040000 52
>  ebf628000000040000
> nsruvReplicaLastModified: {replica 3 ldap://se-idm-02.boingo.com:389} 
> 00000000
> nsruvReplicaLastModified: {replica 4 ldap://se-idm-01.boingo.com:389} 
> 00000000
> nsds5replicareapactive: 0
> nsds5replicaLastUpdateStart: 20140131210414Z
> nsds5replicaLastUpdateEnd: 20140131210414Z
> nsds5replicaChangesSentSinceStartup:: NDozLzAg
> nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: 
> Incremental upd
>  ate succeeded
> nsds5replicaUpdateInProgress: FALSE
> nsds5replicaLastInitStart: 0
> nsds5replicaLastInitEnd: 0
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20140131/ddc2d278/attachment.htm>