On 01/31/2014 02:34 PM, Todd Maugh wrote:
Ok that time i got output


Something is not right.  There is no windows sync agreement.

Did you see my earlier reply, about the previous ldapsearch -d 1 output, asking if the hostname in the certificate in AD was the same as the actual AD hostname? And forward and reverse DNS is working?



[r...@se-idm-01.boingo.com slapd-BOINGO-COM]$ ldapsearch -LLLx -b "cn=config" -D "cn=directory manager" -W 'objectclass=nsds5replicationagreement'
Enter LDAP Password:
dn: cn=meTose-idm-02.boingo.com,cn=replica,cn=dc\3Dboingo\2Cdc\3Dcom,cn=mappin
 g tree,cn=config
cn: meTose-idm-02.boingo.com
objectClass: nsds5replicationagreement
objectClass: top
nsDS5ReplicaTransportInfo: LDAP
description: me to se-idm-02.boingo.com
nsDS5ReplicaRoot: dc=boingo,dc=com
nsDS5ReplicaHost: se-idm-02.boingo.com
nsds5replicaTimeout: 120
nsDS5ReplicaPort: 389
nsDS5ReplicatedAttributeList: (objectclass=*) $ EXCLUDE memberof idnssoaserial
  entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount
nsDS5ReplicaBindMethod: SASL/GSSAPI
nsDS5ReplicatedAttributeListTotal: (objectclass=*) $ EXCLUDE entryusn krblasts
 uccessfulauth krblastfailedauth krbloginfailedcount
nsds50ruv: {replicageneration} 52e15369000000040000
nsds50ruv: {replica 3 ldap://se-idm-02.boingo.com:389} 52e15372000100030000 52
 ebf423000000030000
nsds50ruv: {replica 4 ldap://se-idm-01.boingo.com:389} 52e153d5000200040000 52
 ebf628000000040000
nsruvReplicaLastModified: {replica 3 ldap://se-idm-02.boingo.com:389} 00000000 nsruvReplicaLastModified: {replica 4 ldap://se-idm-01.boingo.com:389} 00000000
nsds5replicareapactive: 0
nsds5replicaLastUpdateStart: 20140131210414Z
nsds5replicaLastUpdateEnd: 20140131210414Z
nsds5replicaChangesSentSinceStartup:: NDozLzAg
nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd
 ate succeeded
nsds5replicaUpdateInProgress: FALSE
nsds5replicaLastInitStart: 0
nsds5replicaLastInitEnd: 0


_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to