Recently this message started to show up on our windows domain controller in the passsync log file:
... 09/29/11 14:38:50: Ldap error in QueryUsername 1: Operations error 09/29/11 14:39:54: Ldap error in QueryUsername 1: Operations error 09/29/11 14:42:02: Ldap error in QueryUsername 1: Operations error 09/29/11 14:46:18: Ldap error in QueryUsername 1: Operations error ...
Happen fairly sporadically but password changes from this machine are also being abandoned while on others no issues. This is our only 2008 domain controller as the moment but it was working on this machine and another 2008 DC (that was de-commissioned) previously.
Thanks, Aaron Hagopian
On 09/29/2011 01:59 PM, Aaron Hagopian wrote:
Recently this message started to show up on our windows domain controller in the passsync log file:
... 09/29/11 14:38:50: Ldap error in QueryUsername 1: Operations error 09/29/11 14:39:54: Ldap error in QueryUsername 1: Operations error 09/29/11 14:42:02: Ldap error in QueryUsername 1: Operations error 09/29/11 14:46:18: Ldap error in QueryUsername 1: Operations error ...
Happen fairly sporadically but password changes from this machine are also being abandoned while on others no issues. This is our only 2008 domain controller as the moment but it was working on this machine and another 2008 DC (that was de-commissioned) previously.
access log on the 389 machine? what version of 389-ds-base? what platform?
Thanks, Aaron Hagopian
-- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
Rich,
access log on the 389 machine? what version of 389-ds-base? what platform?
It doesn't look like the AD server has ever shown up in the access log so I imagine this is purely a passsync issue.
We are running Windows Server 2008 R2. My hunch is that UAC is messing this up. When I went to "check" on the settings under the "change" option from add/remove programs, all the options are blank. I then re-input them all and upon bringing up the settings again, the options are still blank.
Any ideas how to beat UAC for this? We may need to disable UAC, change the settings and then re-enable UAC which unfortunately takes a lot of reboots.
[root@claw slapd-claw]# rpm -qi 389-ds-base Name : 389-ds-base Relocations: (not relocatable) Version : 1.2.8.3 Vendor: Fedora Project Release : 1.el5 Build Date: Mon 02 May 2011 11:36:56 AM CDT Install Date: Tue 28 Jun 2011 08:02:38 AM CDT Build Host: x86-10.phx2.fedoraproject.org Group : System Environment/Daemons Source RPM: 389-ds-base-1.2.8.3-1.el5.src.rpm Size : 4953090 License: GPLv2 with exceptions Signature : DSA/SHA1, Mon 02 May 2011 12:00:08 PM CDT, Key ID 119cc036217521f6 Packager : Fedora Project URL : http://port389.org/ Summary : 389 Directory Server (base)
x86_64 RHEL 5
Thanks, Aaron
On 10/04/2011 10:29 AM, Aaron Hagopian wrote:
Rich,
access log on the 389 machine? what version of 389-ds-base? what platform?It doesn't look like the AD server has ever shown up in the access log so I imagine this is purely a passsync issue.
We are running Windows Server 2008 R2. My hunch is that UAC is messing this up. When I went to "check" on the settings under the "change" option from add/remove programs, all the options are blank. I then re-input them all and upon bringing up the settings again, the options are still blank.
Any ideas how to beat UAC for this? We may need to disable UAC, change the settings and then re-enable UAC which unfortunately takes a lot of reboots.
I don't know. I've never seen this before. Are you logged into the Windows DC as Administrator?
[root@claw slapd-claw]# rpm -qi 389-ds-base Name : 389-ds-base Relocations: (not relocatable) Version : 1.2.8.3 Vendor: Fedora Project Release : 1.el5 Build Date: Mon 02 May 2011 11:36:56 AM CDT Install Date: Tue 28 Jun 2011 08:02:38 AM CDT Build Host: x86-10.phx2.fedoraproject.org <http://x86-10.phx2.fedoraproject.org> Group : System Environment/Daemons Source RPM: 389-ds-base-1.2.8.3-1.el5.src.rpm Size : 4953090 License: GPLv2 with exceptions Signature : DSA/SHA1, Mon 02 May 2011 12:00:08 PM CDT, Key ID 119cc036217521f6 Packager : Fedora Project URL : http://port389.org/ Summary : 389 Directory Server (base) x86_64 RHEL 5Thanks, Aaron
389-users@lists.fedoraproject.org
-
Aaron Hagopian -
Rich Megginson