Hi all,
I'm currently running CentOS DS 8.1(CDS) in multi-master mode with two
servers. Recently I've decided to sync with Active Directory. 389
Password Sync utility has been installed on all Windows Domain
Controllers and it is configured to communicate with the same CDS
server. Sync is working, and password changes are sent from Windows to
CDS. Any password change in the LDAP environment is sync between the two
CDS, but is only sent to the Windows if the change is performed on the
CDS with the Windows Sync Agreement. Also in the error log I get the
following errors:
[09/Nov/2012:08:13:49 +0200] - add value "20120228131234.0Z" to
attribute type "dscorepropagationdata" in entry "CN=..." failed:
duplicate new value
[09/Nov/2012:10:38:50 +0200] - add value "20120228131028.0Z" to
attribute type "dscorepropagationdata" in entry "CN=..." failed:
duplicate new value
[09/Nov/2012:10:38:53 +0200] - add value "20120228131028.0Z" to
attribute type "dscorepropagationdata" in entry "CN=..." failed:
duplicate new value
[09/Nov/2012:11:43:53 +0200] - add value "20120228131234.0Z" to
attribute type "dscorepropagationdata" in entry "CN=..." failed:
duplicate new value
[09/Nov/2012:12:48:53 +0200] - add value "20120228131028.0Z" to
attribute type "dscorepropagationdata" in entry "CN=..." failed:
duplicate new value
[09/Nov/2012:12:48:53 +0200] - add value "20120228131028.0Z" to
attribute type "dscorepropagationdata" in entry "CN=..." failed:
duplicate new value
[09/Nov/2012:13:08:53 +0200] - add value "20120228131028.0Z" to
attribute type "dscorepropagationdata" in entry "CN=..." failed:
duplicate new value
[09/Nov/2012:13:08:53 +0200] - add value "20120228131028.0Z" to
attribute type "dscorepropagationdata" in entry "CN=..." failed:
duplicate new value
The dots after CN represent actual users. Any idea how this can be resolved?
Andreas
Show replies by date
Andreas,
The error doesn’t indicate that there is something wrong with the windows sync, but the
duplicate value 20120228131234.0Z (timestamp) for a custom attribute dscorepropagationdata
is not right. I’d do an ldapsearch for one of those user on both 389 servers and see
what’s going on. Maybe your 389 servers have fallen out of sync and did not push over your
custom attributes.
Dan
From: 389-users-bounces(a)lists.fedoraproject.org
[mailto:389-users-bounces@lists.fedoraproject.org] On Behalf Of Andreas Kekkou
Sent: Friday, November 9, 2012 7:49 AM
To: 389-users(a)lists.fedoraproject.org
Subject: [389-users] Sync with AD
Hi all,
I'm currently running CentOS DS 8.1(CDS) in multi-master mode with two servers.
Recently I'€™ve decided to sync with Active Directory. 389 Password Sync utility has
been installed on all Windows Domain Controllers and it is configured to communicate with
the same CDS server. Sync is working, and password changes are sent from Windows to CDS.
Any password change in the LDAP environment is sync between the two CDS, but is only sent
to the Windows if the change is performed on the CDS with the Windows Sync Agreement. Also
in the error log I get the following errors:
[09/Nov/2012:08:13:49 +0200] - add value "20120228131234.0Z" to attribute type
"dscorepropagationdata" in entry "CN=..." failed: duplicate new value
[09/Nov/2012:10:38:50 +0200] - add value "20120228131028.0Z" to attribute type
"dscorepropagationdata" in entry "CN=..." failed: duplicate new value
[09/Nov/2012:10:38:53 +0200] - add value "20120228131028.0Z" to attribute type
"dscorepropagationdata" in entry "CN=..." failed: duplicate new value
[09/Nov/2012:11:43:53 +0200] - add value "20120228131234.0Z" to attribute type
"dscorepropagationdata" in entry "CN=..." failed: duplicate new value
[09/Nov/2012:12:48:53 +0200] - add value "20120228131028.0Z" to attribute type
"dscorepropagationdata" in entry "CN=..." failed: duplicate new value
[09/Nov/2012:12:48:53 +0200] - add value "20120228131028.0Z" to attribute type
"dscorepropagationdata" in entry "CN=..." failed: duplicate new value
[09/Nov/2012:13:08:53 +0200] - add value "20120228131028.0Z" to attribute type
"dscorepropagationdata" in entry "CN=..." failed: duplicate new value
[09/Nov/2012:13:08:53 +0200] - add value "20120228131028.0Z" to attribute type
"dscorepropagationdata" in entry "CN=..." failed: duplicate new value
The dots after CN represent actual users. Any idea how this can be resolved?
Andreas