[Users] ActiveDirectory problems

Yair Zaslavsky yzaslavs at redhat.com
Wed Sep 19 06:28:01 UTC 2012


The problem is you don't have domainFunctionality and 
domainControllerFunctionality returned by querying the rootDSE.

I am kinda surprised you don't have domainControllerFunctionality in 
your ldap schema.
What windows are you running on the AD machine?




On 09/17/2012 04:05 PM, Joop wrote:
>> <top posting>
>>
>> Hey,
>>
>> According to the call stack, it looks like something is wrong in the root
>> DSE attributes (whether due to a bug in the engine, or some configuration
>> that can be done in AD).
>>
>> Please provide us this information by using the following commands:
>>
>> ldapsearch -LLL -D user at example.com -h <AD-SERVER> -b "" -s base
>> objectClass=*
> dn:
> currentTime: 20120917125426.0Z
> subschemaSubentry:
> CN=Aggregate,CN=Schema,CN=Configuration,DC=nieuwland,DC=loc
>   al
> dsServiceName: CN=NTDS
> Settings,CN=BUFFY,CN=Servers,CN=Default-First-Site-Name
>   ,CN=Sites,CN=Configuration,DC=nieuwland,DC=local
> namingContexts: CN=Schema,CN=Configuration,DC=nieuwland,DC=local
> namingContexts: CN=Configuration,DC=nieuwland,DC=local
> namingContexts: DC=nieuwland,DC=local
> defaultNamingContext: DC=nieuwland,DC=local
> schemaNamingContext: CN=Schema,CN=Configuration,DC=nieuwland,DC=local
> configurationNamingContext: CN=Configuration,DC=nieuwland,DC=local
> rootDomainNamingContext: DC=nieuwland,DC=local
> supportedControl: 1.2.840.113556.1.4.319
> supportedControl: 1.2.840.113556.1.4.801
> supportedControl: 1.2.840.113556.1.4.473
> supportedControl: 1.2.840.113556.1.4.528
> supportedControl: 1.2.840.113556.1.4.417
> supportedControl: 1.2.840.113556.1.4.619
> supportedControl: 1.2.840.113556.1.4.841
> supportedControl: 1.2.840.113556.1.4.529
> supportedControl: 1.2.840.113556.1.4.805
> supportedControl: 1.2.840.113556.1.4.521
> supportedControl: 1.2.840.113556.1.4.970
> supportedControl: 1.2.840.113556.1.4.1338
> supportedControl: 1.2.840.113556.1.4.474
> supportedControl: 1.2.840.113556.1.4.1339
> supportedControl: 1.2.840.113556.1.4.1340
> supportedControl: 1.2.840.113556.1.4.1413
> supportedLDAPVersion: 3
> supportedLDAPVersion: 2
> supportedLDAPPolicies: MaxPoolThreads
> supportedLDAPPolicies: MaxDatagramRecv
> supportedLDAPPolicies: MaxReceiveBuffer
> supportedLDAPPolicies: InitRecvTimeout
> supportedLDAPPolicies: MaxConnections
> supportedLDAPPolicies: MaxConnIdleTime
> supportedLDAPPolicies: MaxActiveQueries
> supportedLDAPPolicies: MaxPageSize
> supportedLDAPPolicies: MaxQueryDuration
> supportedLDAPPolicies: MaxTempTableSize
> supportedLDAPPolicies: MaxResultSetSize
> supportedLDAPPolicies: MaxNotificationPerConn
> highestCommittedUSN: 5271165
> supportedSASLMechanisms: GSSAPI
> supportedSASLMechanisms: GSS-SPNEGO
> dnsHostName: buffy.nieuwland.local
> ldapServiceName: nieuwland.local:buffy$@NIEUWLAND.LOCAL
> serverName:
> CN=BUFFY,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configu
>   ration,DC=nieuwland,DC=local
> supportedCapabilities: 1.2.840.113556.1.4.800
> supportedCapabilities: 1.2.840.113556.1.4.1791
> isSynchronized: TRUE
> isGlobalCatalogReady: FALSE
>
> And the requested tcpdump of%2
>
>
>
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>



More information about the Users mailing list