This document was generated from CDN thread
Created by: Christopher Carney on 15-08-2011 10:47:30 PM
Trying to sync WebEx Social to LDAP (active directory) and when I test authentication and synchronization the tests pass and I see a list of users, but no users are ever imported from AD. The log shows the following sync errors:
2011-07-31 15:36:52,409 ERROR [DIRSYNC:85] - [] - [] - [] Caught NamingException
2011-07-31 15:36:52,423 ERROR [DIRSYNC:85] - [] - [] - [] javax.naming.NamingException: [LDAP: error code 1 - 000020D6: SvcErr: DSID-031006CC, problem 5012 (DIR_ERROR), data 0
^@]; remaining name 'cn=users,ou=testucs2,ou=local'
MESSAGE [LDAP: error code 1 - 000020D6: SvcErr: DSID-031006CC, problem 5012 (DIR_ERROR), data 0
^@]
com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source)
com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)
com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)
com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
javax.naming.directory.InitialDirContext.search(Unknown Source)
com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPMutualFunc.searchInternalExact(DSLDAPMutualFunc.java:714)
com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPMutualFunc.LDAPFullSync(DSLDAPMutualFunc.java:393)
com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run(DSLDAPSyncImpl.java:323)
2011-07-31 15:36:52,424 ERROR [DIRSYNC:85] - [] - [] - [] com.cisco.ccm.dir.dirsync.common.DSException
MESSAGE null
com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPMutualFunc.LDAPFullSync(DSLDAPMutualFunc.java:419)
com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run(DSLDAPSyncImpl.java:323)
Subject: RE: LDAP Sync error
Replied by: Christopher Carney on 17-08-2011 09:46:57 PM
anybody?
Subject: RE: LDAP Sync error
Replied by: Emanuel M Bola on 17-08-2011 10:19:22 PM
Chris,
I assume on your the 2.1.2 release, and I also assume your ldap authentication is working properly. If so, you maybe hitting an issue with the Directory Sync where the ldap service account contains non-alphanumeric characters.
Bug:
CSCtn59556 - Add support for non-alpha-numberic passwords for LDAPAgreement
Also, please be sure to use the full distinguished name in the principal name ( cn=user,ou=users,dc=domain,dc=com).
Otherwise, would you please provide a bit more detail around the following:
- WebEx Social Release
- AD Domain version
- LDAP Sync settings
- Using Secure LDAP yes/no?
Thanks,
Manny Bola
