[Freeipa-users] IPA AD Sync error

[Shan Kumaraswamy]

Rich,
I am again facing some issue with IPA+AD Sync and I tested all the levels:


Windows PassSync entry exists, not resetting password
INFO:root:Added new sync agreement, waiting for it to become ready . . .
INFO:root:Replication Update in progress: FALSE: status: 81  - LDAP error:
Can't contact LDAP server: start: 0: end: 0
INFO:root:Agreement is ready, starting replication . . .
Starting replication, please wait until this has completed.
[saprhds001.bmibank.com] reports: Update failed! Status: [81  - LDAP error:
Can't contact LDAP server]
I have imported right CA to IPA box and the out put is:

Certificate Nickname                                         Trust
Attributes

SSL,S/MIME,JAR/XPI
CA certificate                                               CTu,u,Cu
Imported CA                                                  CT,,C
Server-Cert                                                  u,u,u

And also I done the openssl s_client option too, but no luck. Without cert
when I try ldap search its gives out put. but with cert (AD CA) through
error.

Please help me fix this issue.



-- 
Thanks & Regards
Shan Kumaraswamy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20100920/7c1ab9bc/attachment.htm>