I remember looking over those links and didn't find them very useful either.  I've had that error message before too, it means it doesn't have the CA to recognize the cert.  I think you have to import the windows CA into 389, I had better luck with the command line. There was a thread on this subject a few months back for reference, I found the best info available was from: http://directory.fedoraproject.org/wiki/Howto:WindowsSync

hope this helps..

2011/8/6 Édnei <ednei.felipe.rodrigues@gmail.com>
Hello Guys.
My doubt is the certificates. How to create the certificates correctly ? I follow this guide: http://www.linuxmail.info/install-ssl-certificate-fds/ and this http://www.linuxmail.info/389-directory-active-directory-ssl-synch/
But i have the same error: LDAP erro 81 - Peer's Certificate issuer is not recognized

I believe that i am failing to create the certificates and submit it to the 389-ds.

Can anyone point me somewhere where I could find a solution ?

Thanks in advance for any return,

389 users mailing list