[Freeipa-users] Can't establish trust with 2008 AD

Alexander Bokovoy abokovoy at redhat.com
Fri Jun 10 19:29:13 UTC 2016


On Fri, 10 Jun 2016, pgb205 wrote:
>Alexander, here you go.
>One thing that came to mind that might the a problem. My Active
>directory is adserver.addomain.comwhile IPA is ipax1.ipadomain; there
>is no suffix. Not sure if that would matter.  Anyway here is the log as
>requested. 
So here is what we see:
ads_try_connect: sending CLDAP request to 172.19.1.10 (realm: (null))
ads_cldap_netlogon: did not get a reply
ads_try_connect: CLDAP request 172.19.1.10 failed.

You have real connectivity issues -- CLDAP is UDP port 389.
Check your firewall.
-- 
/ Alexander Bokovoy




More information about the Freeipa-users mailing list