Hello Team

I have a question on sync between  389 DS  and windows active Directoty.
I have followed this link to 
https://documentation.suse.com/sles/15-SP3/html/SLES-all/cha-security-ldap.html 
for Synchronizing with Microsoft Active Directory(6.11) with 389 DS , I'm able 
to create the repl-winsync-agmt  but while checking its status using sudo 
dsconf ldap1 repl-winsync-agmt init-status i'm getting below error .

Error:
[16/Sep/2022:16:25:45.129760205 +051800] - ERR - slapi_ldap_bind - Could not 
send bind request for id [CN=darshan,CN=Users,DC=training,DC=itadmin,DC=com] 
authentication mechanism [SIMPLE]: error -1 (Can't contact LDAP server), system 
error -5950 (File not found.), network error 107 (Transport endpoint is not 
connected, host "192.168.56.106:389")

I'm able to do ldapsearch on Active directory but repl-winsync-agmt init-status 
command is giving the network error.

ldapseach command:
ldapsearch -x -h 192.168.56.106 -p 389 -b 
"CN=Users,dc=training,dc=itadmin,dc=com" -D 
"CN=darshan,CN=Users,DC=training,DC=itadmin,DC=com" -w "Test@123" dn

repl-winsync-agmt create  command used:

sudo dsconf -D "cn=ldap1-infra1" -w "#CEEadmin123" ldap1 repl-winsync-agmt 
create --suffix "dc=openstack,dc=org"  --host 192.168.56.106 --port 389 
--conn-protocol LDAPS   --bind-dn 
"CN=darshan,CN=Users,DC=training,DC=itadmin,DC=com"   --bind-passwd "Test@123" 
--win-subtree "CN=Users,DC=training,DC=itadmin,DC=com"   --ds-subtree 
"dc=openstack,dc=org" --one-way-sync fromWindows   --sync-users=on 
--sync-groups=on --move-action delete   --win-domain "trainingitadmin.com" 
adsync_agreement

Let me know what should be done to resolve this network error
_______________________________________________
389-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to