HP UX Red Hat Direry Server Software manual Troubleshooting, Uninstalling Password Sync Service

Chapter 19. Synchronizing Red Hat Directory Server with Microsoft Active Directory

3. Select Stop or Start, and hit okay.

Changed passwords are captured even if Password Sync is not running. If Password Sync is restarted, the password changes are sent to Directory Server at the next synchronization.

5.3. Uninstalling Password Sync Service

To uninstall the Password Sync service, do the following:

1.Open the Add/Remove Programs utility.

2.Select click remove to uninstall the Password Sync service.

3.If SSL was configured for the Password Sync, then the cert8.db and key3.db databases that were created were not removed when Password Sync was uninstalled. Delete these files by hand.

6. Troubleshooting

If synchronization does not seem to be functioning properly, see the Windows event log and/or Directory Server error log for information on any potential problems.

Enable replication logging for more detailed information on synchronization to be recorded in the error logs. Replication log levels will produce more verbose logs from the sync code that can help in diagnosing problems.

1.In the Console, click the Configuration tab, select Logs from the navigation menu on the right, and open the error log.

2.Scroll down to error log level, and select Replication from the menu. Hit save.

For complete information on error log levels, refer to Red Hat Directory Server Configuration, Command, and File Reference.

Error #1: The message box when creating the sync agreement indicates that the it cannot connect to Active Directory.

Make sure that the directory suffixes, Windows domain and domain host, and the administrator DN and password are correct. Also verify that the port numbers used for LDAPS is correct. If all of this is correct, make sure that Active Directory or the Windows machine are running.

Error #2: After synchronization, the status returns error 81.

One of the sync peer servers has not been properly configured for SSL communication. Examine the Directory Server access log file to see if the connection attempt was received by the Directory Server. There are also helpful messages in the Directory Server's error log file.

536