[Freeipa-users] Freeipa-users Digest, Vol 44, Issue 14

Sat Mar 10 17:31:20 UTC 2012

Yes I did mean cn=users and the spaces are in since I copied and pasted and sent the email from my iPhone. I had trouble with the bindpw password since it had special characters in it and had to Add the single quotes to get the command to execute properly. 

Corey

On Mar 10, 2012, at 11:01 AM, "freeipa-users-request at redhat.com" <freeipa-users-request at redhat.com> wrote:

> Send Freeipa-users mailing list submissions to
>    freeipa-users at redhat.com
> 
> To subscribe or unsubscribe via the World Wide Web, visit
>    https://www.redhat.com/mailman/listinfo/freeipa-users
> or, via email, send a message with subject or body 'help' to
>    freeipa-users-request at redhat.com
> 
> You can reach the person managing the list at
>    freeipa-users-owner at redhat.com
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Freeipa-users digest..."
> 
> 
> Today's Topics:
> 
>   1. Winsync setup error
>      (Hemminger, Corey Lee. [heco0701 at stcloudstate.edu])
>   2. Re: Winsync setup error (Dmitri Pal)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Fri, 9 Mar 2012 17:44:24 +0000
> From: "Hemminger, Corey Lee. [heco0701 at stcloudstate.edu]"
>    <heco0701 at stcloudstate.edu>
> To: "<freeipa-users at redhat.com>" <freeipa-users at redhat.com>
> Cc: "freeipa-users at redhat.com" <freeipa-users at redhat.com>
> Subject: [Freeipa-users] Winsync setup error
> Message-ID: <A208F4CC-6A64-49AA-A78C-25AF23951DD5 at stcloudstate.edu>
> Content-Type: text/plain; charset="us-ascii"
> 
> I've installed fedora 16 and freeipa 2.1.4 and am trying to create the winsync to a AD2008 server per the documentation and I got to step 7.3. I used command:
> 
> ipa-replica-manage connect --winsync --binddn cn=user1,cn=user,dc=domain1,dc=com--bindpw 'xxxx(xxx' --passsync 'xxxx(xxx' --cacert /etc/openldap/cacerts/ADcert.cerADserver.domain1.com<http://ADserver.domain1.com/> -v
> 
> And it gave me an error:
> 
> INFO:root:Failed to connect to AD serverADserver.domain1.com<http://ADserver.domain1.com/>
> INFO:root:The error was: {'info': '80090308<tel:80090308>: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1', 'desc': 'Invalid credentials'}
> Failed to setup winsync replication
> 
> Any help is greatly appreciated.
> 
> Thanks,
> Corey
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <https://www.redhat.com/archives/freeipa-users/attachments/20120309/a04193e6/attachment.html>
> 
> ------------------------------
> 
> Message: 2
> Date: Fri, 09 Mar 2012 16:00:16 -0500
> From: Dmitri Pal <dpal at redhat.com>
> To: freeipa-users at redhat.com
> Subject: Re: [Freeipa-users] Winsync setup error
> Message-ID: <4F5A6F60.7030403 at redhat.com>
> Content-Type: text/plain; charset="iso-8859-1"
> 
> On 03/09/2012 12:44 PM, Hemminger, Corey Lee.
> [heco0701 at stcloudstate.edu] wrote:
>> I've installed fedora 16 and freeipa 2.1.4 and am trying to create the
>> winsync to a AD2008 server per the documentation and I got to step
>> 7.3. I used command:
>> 
>> ipa-replica-manage connect --winsync --binddn
>> cn=user1,cn=user,dc=domain1,dc=com--bindpw 'xxxx(xxx' --passsync
>> 'xxxx(xxx' --cacert
>> /etc/openldap/cacerts/ADcert.cerADserver.domain1.com
>> <http://ADserver.domain1.com/> -v
>> 
> I assume spaces are just dropped by cut and paste but please check.
> Also please check that you have the correct bind dn (did you mean
> ...,cn=users,dc=...?) and bind password.
> 
> 
>> And it gave me an error:
>> 
>> INFO:root:Failed to connect to AD serverADserver.domain1.com
>> <http://ADserver.domain1.com/>
>> INFO:root:The error was: {'info': '80090308 <tel:80090308>: LdapErr:
>> DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1',
>> 'desc': 'Invalid credentials'}
>> Failed to setup winsync replication
>> 
>> Any help is greatly appreciated. 
>> 
>> Thanks,
>> Corey
>> 
>> 
>> _______________________________________________
>> Freeipa-users mailing list
>> Freeipa-users at redhat.com
>> https://www.redhat.com/mailman/listinfo/freeipa-users
> 
> 
> -- 
> Thank you,
> Dmitri Pal
> 
> Sr. Engineering Manager IPA project,
> Red Hat Inc.
> 
> 
> -------------------------------
> Looking to carve out IT costs?
> www.redhat.com/carveoutcosts/
> 
> 
> 
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <https://www.redhat.com/archives/freeipa-users/attachments/20120309/e2218bfc/attachment.html>
> 
> ------------------------------
> 
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
> 
> End of Freeipa-users Digest, Vol 44, Issue 14
> *********************************************