On 12/07/2012 03:11 AM, Matti Alho wrote:
On 12/03/2012 10:20 PM, Rich Megginson wrote:
> On 12/03/2012 12:00 AM, Matti Alho wrote:
>>> I don't know. Looks ok to me. I guess the next step would be to
>>> reproduce the problem with the
>>>
http://port389.org/wiki/FAQ#Troubleshooting Replication log level
>>> enabled, and then look in the errors log to see why the group add
>>> operation is not being sent to AD.
>>
>> Here are some relevant log entries with replication logging. Any ideas
>> or should I try to change log level to get more information?
>
> Not sure. This looks as though it is attempting to replay a modify
> operation made on the 389 entry cn=testgroup,ou=People,dc=domain,dc=com,
> but the corresponding AD entry cn=testgroup,cn=Users,dc=domain,dc=com
> does not exist. Did the full manual update create the entry
> cn=testgroup,cn=Users,dc=domain,dc=com in AD? If not, why not? In your
> first message you said
>> /Any changes to// groups on 389 side do not get synced to AD unless
>> I do a full manual// update triggered via console/
>
> Can you verify that, after doing a full manual update, you have
> cn=testgroup,ou=People,dc=domain,dc=com in 389 and
> cn=testgroup,cn=Users,dc=domain,dc=com in AD?
Yes after a full manual update entry appears in AD.
Here are log entries after I add another entry and before I do a full
update.
I noticed this:
dn="cn=stilltesting,cn=Users,dc=domain,dc=com" (not present,add not
allowed)
What could cause that? Some AD permissions? It's a bit weird since
full update works.
https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Directory_Server/9...
Does cn=stilltesting,cn=Users,dc=domain,dc=com have
ntGroupCreateNewGroup: TRUE
?
[07/Dec/2012:12:02:46 +0200] NSMMReplicationPlugin - changelog program
- agmt="cn=winsync" (adtest:636): CSN 50c1ba8c000000010000 found,
position set for replay
[07/Dec/2012:12:02:46 +0200] agmt="cn=winsync" (adtest:636) - load=1
rec=1 csn=50c1bec7000000010000
[07/Dec/2012:12:02:46 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): windows_replay_update: Looking at add operation local
dn="cn=stilltesting,ou=People,dc=domain,dc=com" (ours,not user,group)
[07/Dec/2012:12:02:46 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): map_entry_dn_outbound: looking for AD entry for DS
dn="cn=stilltesting,ou=People,dc=domain,dc=com" guid="(null)"
[07/Dec/2012:12:02:46 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): map_entry_dn_outbound: looking for AD entry for DS
dn="cn=stilltesting,ou=People,dc=domain,dc=com"
username="stilltesting"
[07/Dec/2012:12:02:46 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): map_entry_dn_outbound: entry not found - rc 0
[07/Dec/2012:12:02:46 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): windows_replay_update: Processing add operation local
dn="cn=stilltesting,ou=People,dc=domain,dc=com" remote
dn="cn=stilltesting,cn=Users,dc=domain,dc=com"
[07/Dec/2012:12:02:46 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): process_replay_add:
dn="cn=stilltesting,cn=Users,dc=domain,dc=com" (not present,add not
allowed)
[07/Dec/2012:12:02:46 +0200] agmt="cn=winsync" (adtest:636) -
clcache_load_buffer: rc=-30988
[07/Dec/2012:12:02:46 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): No more updates to send (cl5GetNextOperationToReplay)
[07/Dec/2012:12:02:46 +0200] agmt="cn=winsync" (adtest:636) - session
end: state=5 load=1 sent=1 skipped=0
[07/Dec/2012:12:02:46 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): Beginning linger on the connection
[07/Dec/2012:12:02:46 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): State: sending_updates -> wait_for_changes
[07/Dec/2012:12:03:11 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): State: wait_for_changes -> wait_for_changes
[07/Dec/2012:12:03:11 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): State: wait_for_changes -> ready_to_acquire_replica
[07/Dec/2012:12:03:11 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): Cancelling linger on the connection
[07/Dec/2012:12:03:11 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): State: ready_to_acquire_replica -> sending_updates
[07/Dec/2012:12:03:11 +0200] - _cl5PositionCursorForReplay
(agmt="cn=winsync" (adtest:636)): Consumer RUV:
[07/Dec/2012:12:03:11 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): {replicageneration} 505ae68e000000010000
[07/Dec/2012:12:03:11 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): {replica 1 ldap://ldapnew.domain.com:389}
505aedad000000010000 50c1bec7000000010000 50c1bec6
[07/Dec/2012:12:03:11 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): {replica 2 ldap://ldapnew2.domain.com:389}
[07/Dec/2012:12:03:11 +0200] - _cl5PositionCursorForReplay
(agmt="cn=winsync" (adtest:636)): Supplier RUV:
[07/Dec/2012:12:03:11 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): {replicageneration} 505ae68e000000010000
[07/Dec/2012:12:03:11 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): {replica 1 ldap://ldapnew.domain.com:389}
505aedad000000010000 50c1bec7000000010000 50c1bec6
[07/Dec/2012:12:03:11 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): {replica 2 ldap://ldapnew2.domain.com:389}
[07/Dec/2012:12:03:11 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): No changes to send
[07/Dec/2012:12:03:11 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): Beginning linger on the connection
[07/Dec/2012:12:03:11 +0200] NSMMReplicationPlugin - agmt="cn=winsync"
(adtest:636): State: sending_updates -> wait_for_changes
-Matti
--
389 users mailing list
389-users(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users