On 01/31/2014 02:34 PM, Todd Maugh wrote:
Ok that time i got output
Something is not right. There is no windows sync agreement.
Did you see my earlier reply, about the previous ldapsearch -d 1 output,
asking if the hostname in the certificate in AD was the same as the
actual AD hostname? And forward and reverse DNS is working?
[[email protected] slapd-BOINGO-COM]$ ldapsearch -LLLx -b
"cn=config" -D "cn=directory manager" -W
'objectclass=nsds5replicationagreement'
Enter LDAP Password:
dn:
cn=meTose-idm-02.boingo.com,cn=replica,cn=dc\3Dboingo\2Cdc\3Dcom,cn=mappin
g tree,cn=config
cn: meTose-idm-02.boingo.com
objectClass: nsds5replicationagreement
objectClass: top
nsDS5ReplicaTransportInfo: LDAP
description: me to se-idm-02.boingo.com
nsDS5ReplicaRoot: dc=boingo,dc=com
nsDS5ReplicaHost: se-idm-02.boingo.com
nsds5replicaTimeout: 120
nsDS5ReplicaPort: 389
nsDS5ReplicatedAttributeList: (objectclass=*) $ EXCLUDE memberof
idnssoaserial
entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount
nsDS5ReplicaBindMethod: SASL/GSSAPI
nsDS5ReplicatedAttributeListTotal: (objectclass=*) $ EXCLUDE entryusn
krblasts
uccessfulauth krblastfailedauth krbloginfailedcount
nsds50ruv: {replicageneration} 52e15369000000040000
nsds50ruv: {replica 3 ldap://se-idm-02.boingo.com:389}
52e15372000100030000 52
ebf423000000030000
nsds50ruv: {replica 4 ldap://se-idm-01.boingo.com:389}
52e153d5000200040000 52
ebf628000000040000
nsruvReplicaLastModified: {replica 3 ldap://se-idm-02.boingo.com:389}
00000000
nsruvReplicaLastModified: {replica 4 ldap://se-idm-01.boingo.com:389}
00000000
nsds5replicareapactive: 0
nsds5replicaLastUpdateStart: 20140131210414Z
nsds5replicaLastUpdateEnd: 20140131210414Z
nsds5replicaChangesSentSinceStartup:: NDozLzAg
nsds5replicaLastUpdateStatus: 0 Replica acquired successfully:
Incremental upd
ate succeeded
nsds5replicaUpdateInProgress: FALSE
nsds5replicaLastInitStart: 0
nsds5replicaLastInitEnd: 0
_______________________________________________
Freeipa-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/freeipa-users
