[Freeipa-users] Fwd: user sync works, passsync eludes me

[Nate Marks]

Nevermind.  I was mucking up the certificate.  got it fixed.

---------- Forwarded message ----------
From: Nate Marks <npmarks at gmail.com>
Date: Fri, Dec 21, 2012 at 6:36 AM
Subject: user sync works, passsync eludes me
To: freeipa-users at redhat.com


Here's what the log says:

LDAP bind error in connect
81: Can't contact LDAP server
Can not connect to ldap server in SyncPasswords


I keep changing the passsync config values by re-running the msi with the
modify option. I'm not sure if that's the way to do this, but my current
options are:

hostname:  IPA server FQDN.   it seems to resolve fine
port number: 636
username: (i checked this in
ldap:uid=passsync,cn=sysaccounts,cn=etc,dc=<domain>,dc=<tld>
password:  matches the one set in ipa-replica-manage connect --passsync
option
certtoken:  string copied from the IPA server
(/etc/dirsrv/slapd-<MYHOST>/pwdfile.txt)
search base :  same as win-subtree value


so close, but stuck.  thanks in advance for any help !

nate
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20121221/f59438f5/attachment.htm>