Hi Markham,

This simply means that the LSC was not able to open a connection to
serveurlan on port 389. If you want to similate the corresponding behavior,
just do a telnet serverlan 389 and you should not be able to get the
prompt. Consider checking that the service is listening on port 389 or that
a firewall is not blocking the connection.

Best regards
-- 
Sebastien BAHLOUL
IAM / Security specialist
Ldap Synchronization Connector : http://lsc-project.org
Blog : http://sbahloul.wordpress.com/



2011/11/16 markham89 <[email protected]>

>
> hi,
>
> I need your help !!!
>
> I want to transfert OpenLdap (ou=People) -->Active directory (ou=Users)
> but i have some issue :
>
>
> logback answer :
>
> nov. 09 15:21:07 - INFO  - Starting sync for ADuser
> nov. 09 15:21:07 - INFO  - Connecting to LDAP server
> ldap://serveurlan:389/dc=monlan-yeah,dc=fr as
> cn=Manager,dc=monlan-yeah,dc=fr
> nov. 09 15:21:07 - ERROR - Error opening the LDAP connection to the
> source!
> nov. 09 15:21:07 - ERROR - Error getting list of IDs in the source for
> task ADuser
>
>
> what's wrong ?
>
>
> my config file :
>
> #########################################################################
> # LDAP Synchronization Connector (LSC) - http://lsc-project.org         #
> # Main configuration file                                               #
> #########################################################################
> # Most configuration parameters for LSC are in this file.               #
> # All configuration files are located in this directory (etc)           #
> #                                                                       #
> # synchro OPENLDAP/AD by exmachina !!!!               #
> #                                                                       #
> #                                                              #
> #########################################################################
>
> ##############################
> # Destination Active directory #
> ##############################
>
> #connexion a l'AD
> dst.java.naming.security.authentication = simple
> dst.java.naming.provider.url =
> ldap://localhost:389/dc=in,dc=monlan-yeah,dc=fr
>
> dst.java.naming.security.principal =
> cn=administrateur,dc=in,dc=monlan-yeah,dc=fr
> dst.java.naming.security.credentials = motdepasse
>
> #To manage Active Directory Paged Results Control (which enables to return
> more than 1000 entries), add:
> dst.java.naming.ldap.pageSize = 1000
>
> #exportation des utilisateurs
> lsc.tasks.ADuser.dstService.baseDn = cn=Users
> lsc.tasks.ADuser.dstService.filterAll =
> (&(sAMAccountName=*)(objectClass=user))
>
>
>
> ###################
> # Source OpenLDAP database #
> ###################
>
> #connexion au ldap
>
> src.java.naming.security.authentication = simple
> src.java.naming.provider.url = ldap://serveurlan:389/dc=monlan-yeah,dc=fr
> src.java.naming.security.principal = cn=Manager,dc=monlan-yeah,dc=fr
> src.java.naming.security.credentials = motdepasse
>
> #importation des utilisateurs
> lsc.tasks.ADuser.srcService.baseDn = ou=People
> lsc.tasks.ADuser.srcService.filterAll =
> (&(uid=*)(objectClass=inetOrgPerson))
>
>
> #######################
> # Tasks configuration #
> #######################
> lsc.tasks = ADuser
> lsc.tasks.ADuser.bean=org.lsc.beans.SimpleBean
> lsc.tasks.ADuser.dstService.filterId= (uid={uid})
>
> lsc.tasks.ADuser.dstService = org.lsc.jndi.SimpleJndiSrcService
> lsc.tasks.ADuser.dstService.baseDn = ou=People
> lsc.tasks.ADuser.dstService.filterAll =
> (&(uid=*)(objectClass=inetOrgPerson))
>
> lsc.tasks.ADuser.srcService = org.lsc.jndi.SimpleJndiDstService
> lsc.tasks.ADuser.srcService.baseDn = cn=Users
> lsc.tasks.ADuser.srcService.filterAll =
> (&(sAMAccountName=*)(objectClass=user))
>
> lsc.tasks.ADuser.srcService.filterId= (uid={uid})
>
> ##########################
> # Synchronisation option #
> ##########################
>
> lsc.syncoptions.ADuser =
> org.lsc.beans.syncoptions.PropertiesBasedSyncOptions
> lsc.syncoptions.ADuser.default.action = F
>
> # userAccountControl
> lsc.syncoptions.ADuser.userAccountControl.create_value =
> \AD.userAccountControlSet( "0", [AD.UAC_SET_NORMAL_ACCOUNT])
>
>
> # unicodePwd <- "changeit" at creation (requires SSL connection to AD)
> lsc.syncoptions.ADuser.unicodePwd.create_value =
> AD.getUnicodePwd("changeit" )
>
> ##########################
>
>
>
> can you help me ?
>
> Thank a lot
>
>
> *PS:sorry for my poor english, french is my native langage.*
>
>
> _______________________________________________________________
> Ldap Synchronization Connector (LSC) - http://lsc-project.org
>
> lsc-users mailing list
> [email protected]
> http://lists.lsc-project.org/listinfo/lsc-users
>
>
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-users

Reply via email to