rights needed for AD integration for ccm6

Email lists > Cisco VoIP list

Thread: rights needed for AD integration for ccm6

Search this list only Search all lists
rights needed for AD integration for ccm6
	2008-01-09 14:50:35
So, what rights does the LDAP user need to AD for it to sync...? Jonathan _______________________________________________ cisco-voip mailing list cisco-voippuck.nether.net h ttps://puck.nether.net/mailman/listinfo/cisco-voip

Re: rights needed for AD integration for ccm6
	2008-01-09 15:34:09

It just needs to be a member of Domain Users There are no special rights needed Craig On Jan 9, 2008 2:50 PM, Jonathan Charles < jonvoipgmail.com">jonvoipgmail.com > wrote: So, what rights does the LDAP user need to AD for it to sync...? Jonathan _______________________________________________ cisco-voip mailing list cisco-voippuck.nether.net">cisco-voippuck.nether.net https://puck.nether.net/mailman/listinfo/cisco-voip -- Craig Staffin Craigstaffin.org">Craigstaffin.org (H) 262-437-7313 (C) 262-613-6003
Re: rights needed for AD integration for ccm6
	2008-01-09 18:31:15
The sync is not working tho... I am getting these errors in the DirSync trace... 2008-01-09 14:11:42,451 ERROR [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:832) - LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] Caught NamingException 2008-01-09 14:11:42,452 ERROR [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:833) - LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] com.sun.jndi.ldap.LdapReferralException: [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data 0, 1 access points ref 1: 'planetcrazy.net' MESSAGE [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data 0, 1 access points ref 1: 'planetcrazy.net' com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:282 4) com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:273 7) com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1808) com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1731) com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Compon entDirContext.java:368) com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(P artialCompositeDirContext.java:338) com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(P artialCompositeDirContext.java:321) javax.naming.directory.InitialDirContext.search(InitialDirCo ntext.java:248) com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.search InternalExact(DSLDAPSyncImpl.java:1193) com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFu llSync(DSLDAPSyncImpl.java:823) com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run(DS LDAPSyncImpl.java:296) 2008-01-09 14:11:42,452 ERROR [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:325) - LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[Run] com.cisco.ccm.dir.dirsync.common.DSException MESSAGE null com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFu llSync(DSLDAPSyncImpl.java:841) com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run(DS LDAPSyncImpl.java:296) I have no idea what they mean.... And no users are being brought over... Jonathan On Jan 9, 2008 3:34 PM, Craig Staffin <cmstaffingmail.com> wrote: > It just needs to be a member of Domain Users > > There are no special rights needed > > Craig > > > On Jan 9, 2008 2:50 PM, Jonathan Charles <jonvoipgmail.com > wrote: > > > > So, what rights does the LDAP user need to AD for it to sync...? > > > > > > > > Jonathan > > _______________________________________________ > > cisco-voip mailing list > > cisco-voippuck.nether.net > > h ttps://puck.nether.net/mailman/listinfo/cisco-voip > > > > > > -- > Craig Staffin > Craigstaffin.org > (H) 262-437-7313 > (C) 262-613-6003 _______________________________________________ cisco-voip mailing list cisco-voippuck.nether.net h ttps://puck.nether.net/mailman/listinfo/cisco-voip

Re: rights needed for AD integration for ccm6
United States	2008-01-10 08:09:18
Go for a sniffer capture. It's the easiest way to see what's going on. -Ryan On Jan 9, 2008, at 7:31 PM, Jonathan Charles wrote: The sync is not working tho... I am getting these errors in the DirSync trace... 2008-01-09 14:11:42,451 ERROR [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:832) - LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] Caught NamingException 2008-01-09 14:11:42,452 ERROR [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:833) - LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] com.sun.jndi.ldap.LdapReferralException: [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data 0, 1 access points ref 1: 'planetcrazy.net' MESSAGE [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data 0, 1 access points ref 1: 'planetcrazy.net' com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:282 4) com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:273 7) com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1808) com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1731) com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search (ComponentDirContext.java:368) com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search (PartialCompositeDirContext.java:338) com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search (PartialCompositeDirContext.java:321) javax.naming.directory.InitialDirContext.search (InitialDirContext.java:248) com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.search InternalExac t(DSLDAPSyncImpl.java:1193) com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFu llSync (DSLDAPSyncImpl.java:823) com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run (DSLDAPSyncImpl.java:296) 2008-01-09 14:11:42,452 ERROR [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:325) - LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[Run] com.cisco.ccm.dir.dirsync.common.DSException MESSAGE null com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFu llSync (DSLDAPSyncImpl.java:841) com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run (DSLDAPSyncImpl.java:296) I have no idea what they mean.... And no users are being brought over... Jonathan On Jan 9, 2008 3:34 PM, Craig Staffin <cmstaffingmail.com> wrote: > It just needs to be a member of Domain Users > > There are no special rights needed > > Craig > > > On Jan 9, 2008 2:50 PM, Jonathan Charles <jonvoipgmail.com > wrote: >> >> So, what rights does the LDAP user need to AD for it to sync...? >> >> >> >> Jonathan >> _______________________________________________ >> cisco-voip mailing list >> cisco-voippuck.nether.net >> h ttps://puck.nether.net/mailman/listinfo/cisco-voip >> > > > > -- > Craig Staffin > Craigstaffin.org > (H) 262-437-7313 > (C) 262-613-6003 _______________________________________________ cisco-voip mailing list cisco-voippuck.nether.net h ttps://puck.nether.net/mailman/listinfo/cisco-voip _______________________________________________ cisco-voip mailing list cisco-voippuck.nether.net h ttps://puck.nether.net/mailman/listinfo/cisco-voip

Re: rights needed for AD integration for ccm6
	2008-01-10 08:38:32
Not that easy an option... wait... Doesn't CCM have a built in sniffer? Jonathan On Jan 10, 2008 8:09 AM, Ryan Ratliff <rratliffcisco.com> wrote: > Go for a sniffer capture. It's the easiest way to see what's going on. > > -Ryan > > > On Jan 9, 2008, at 7:31 PM, Jonathan Charles wrote: > > The sync is not working tho... > > I am getting these errors in the DirSync trace... > > 2008-01-09 14:11:42,451 ERROR > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:832) - > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] Caught > NamingException > 2008-01-09 14:11:42,452 ERROR > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:833) - > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] > com.sun.jndi.ldap.LdapReferralException: [LDAP: error code 10 - > 0000202B: RefErr: DSID-031005E2, data 0, 1 access points > ref 1: 'planetcrazy.net' > > > MESSAGE [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data > 0, 1 access points > ref 1: 'planetcrazy.net' > > com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:282 4) > com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:273 7) > com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1808) > com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1731) > com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search > (ComponentDirContext.java:368) > com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search > (PartialCompositeDirContext.java:338) > com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search > (PartialCompositeDirContext.java:321) > javax.naming.directory.InitialDirContext.search > (InitialDirContext.java:248) > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.search InternalExac > t(DSLDAPSyncImpl.java:1193) > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFu llSync > (DSLDAPSyncImpl.java:823) > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run > (DSLDAPSyncImpl.java:296) > > 2008-01-09 14:11:42,452 ERROR > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:325) - > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[Run] > com.cisco.ccm.dir.dirsync.common.DSException > MESSAGE null > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFu llSync > (DSLDAPSyncImpl.java:841) > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run > (DSLDAPSyncImpl.java:296) > > > I have no idea what they mean.... > > And no users are being brought over... > > > Jonathan > > On Jan 9, 2008 3:34 PM, Craig Staffin <cmstaffingmail.com> wrote: > > It just needs to be a member of Domain Users > > > > There are no special rights needed > > > > Craig > > > > > > On Jan 9, 2008 2:50 PM, Jonathan Charles <jonvoipgmail.com > wrote: > >> > >> So, what rights does the LDAP user need to AD for it to sync...? > >> > >> > >> > >> Jonathan > >> _______________________________________________ > >> cisco-voip mailing list > >> cisco-voippuck.nether.net > >> h ttps://puck.nether.net/mailman/listinfo/cisco-voip > >> > > > > > > > > -- > > Craig Staffin > > Craigstaffin.org > > (H) 262-437-7313 > > (C) 262-613-6003 > _______________________________________________ > cisco-voip mailing list > cisco-voippuck.nether.net > h ttps://puck.nether.net/mailman/listinfo/cisco-voip > > _______________________________________________ cisco-voip mailing list cisco-voippuck.nether.net h ttps://puck.nether.net/mailman/listinfo/cisco-voip

Re: rights needed for AD integration for ccm6
United States	2008-01-10 08:38:40
Yes it does. Just guessing though it looks as if you've got referral issues, just going from some of the errors. Is this Win2k3 AD? If so do an nslookup for 'planetcrazy.net', 'forestdnszones.planetcrazy.net', and 'domaindnszones.planetcrazy.net' and see if there are any bogus entries in any of them. > MESSAGE [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data > 0, 1 access points > ref 1: 'planetcrazy.net' > -Ryan On Jan 10, 2008, at 9:38 AM, Jonathan Charles wrote: Not that easy an option... wait... Doesn't CCM have a built in sniffer? Jonathan On Jan 10, 2008 8:09 AM, Ryan Ratliff <rratliffcisco.com> wrote: > Go for a sniffer capture. It's the easiest way to see what's going > on. > > -Ryan > > > On Jan 9, 2008, at 7:31 PM, Jonathan Charles wrote: > > The sync is not working tho... > > I am getting these errors in the DirSync trace... > > 2008-01-09 14:11:42,451 ERROR > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:832) - > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] Caught > NamingException > 2008-01-09 14:11:42,452 ERROR > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:833) - > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] > com.sun.jndi.ldap.LdapReferralException: [LDAP: error code 10 - > 0000202B: RefErr: DSID-031005E2, data 0, 1 access points > ref 1: 'planetcrazy.net' > > > MESSAGE [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data > 0, 1 access points > ref 1: 'planetcrazy.net' > > com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:282 4) > com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:273 7) > com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1808) > com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1731) > com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search > (ComponentDirContext.java:368) > com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search > (PartialCompositeDirContext.java:338) > com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search > (PartialCompositeDirContext.java:321) > javax.naming.directory.InitialDirContext.search > (InitialDirContext.java:248) > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.search InternalEx > ac > t(DSLDAPSyncImpl.java:1193) > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFu llSync > (DSLDAPSyncImpl.java:823) > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run > (DSLDAPSyncImpl.java:296) > > 2008-01-09 14:11:42,452 ERROR > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:325) - > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[Run] > com.cisco.ccm.dir.dirsync.common.DSException > MESSAGE null > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFu llSync > (DSLDAPSyncImpl.java:841) > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run > (DSLDAPSyncImpl.java:296) > > > I have no idea what they mean.... > > And no users are being brought over... > > > Jonathan > > On Jan 9, 2008 3:34 PM, Craig Staffin <cmstaffingmail.com> wrote: >> It just needs to be a member of Domain Users >> >> There are no special rights needed >> >> Craig >> >> >> On Jan 9, 2008 2:50 PM, Jonathan Charles <jonvoipgmail.com > wrote: >>> >>> So, what rights does the LDAP user need to AD for it to sync...? >>> >>> >>> >>> Jonathan >>> _______________________________________________ >>> cisco-voip mailing list >>> cisco-voippuck.nether.net >>> h ttps://puck.nether.net/mailman/listinfo/cisco-voip >>> >> >> >> >> -- >> Craig Staffin >> Craigstaffin.org >> (H) 262-437-7313 >> (C) 262-613-6003 > _______________________________________________ > cisco-voip mailing list > cisco-voippuck.nether.net > h ttps://puck.nether.net/mailman/listinfo/cisco-voip > > _______________________________________________ cisco-voip mailing list cisco-voippuck.nether.net h ttps://puck.nether.net/mailman/listinfo/cisco-voip

Re: rights needed for AD integration for ccm6
	2008-01-10 08:47:15
OK, I will try that tonight... Thanks... Jonathan On Jan 10, 2008 8:38 AM, Ryan Ratliff <rratliffcisco.com> wrote: > Yes it does. > > Just guessing though it looks as if you've got referral issues, just > going from some of the errors. Is this Win2k3 AD? If so do an > nslookup for 'planetcrazy.net', 'forestdnszones.planetcrazy.net', and > 'domaindnszones.planetcrazy.net' and see if there are any bogus > entries in any of them. > > > MESSAGE [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data > > 0, 1 access points > > ref 1: 'planetcrazy.net' > > > > > -Ryan > > > On Jan 10, 2008, at 9:38 AM, Jonathan Charles wrote: > > Not that easy an option... wait... > > Doesn't CCM have a built in sniffer? > > > > Jonathan > > On Jan 10, 2008 8:09 AM, Ryan Ratliff <rratliffcisco.com> wrote: > > Go for a sniffer capture. It's the easiest way to see what's going > > on. > > > > -Ryan > > > > > > On Jan 9, 2008, at 7:31 PM, Jonathan Charles wrote: > > > > The sync is not working tho... > > > > I am getting these errors in the DirSync trace... > > > > 2008-01-09 14:11:42,451 ERROR > > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:832) - > > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] Caught > > NamingException > > 2008-01-09 14:11:42,452 ERROR > > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:833) - > > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] > > com.sun.jndi.ldap.LdapReferralException: [LDAP: error code 10 - > > 0000202B: RefErr: DSID-031005E2, data 0, 1 access points > > ref 1: 'planetcrazy.net' > > > > > > MESSAGE [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data > > 0, 1 access points > > ref 1: 'planetcrazy.net' > > > > com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:282 4) > > com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:273 7) > > com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1808) > > com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1731) > > com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search > > (ComponentDirContext.java:368) > > com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search > > (PartialCompositeDirContext.java:338) > > com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search > > (PartialCompositeDirContext.java:321) > > javax.naming.directory.InitialDirContext.search > > (InitialDirContext.java:248) > > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.search InternalEx > > ac > > t(DSLDAPSyncImpl.java:1193) > > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFu llSync > > (DSLDAPSyncImpl.java:823) > > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run > > (DSLDAPSyncImpl.java:296) > > > > 2008-01-09 14:11:42,452 ERROR > > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:325) - > > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[Run] > > com.cisco.ccm.dir.dirsync.common.DSException > > MESSAGE null > > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFu llSync > > (DSLDAPSyncImpl.java:841) > > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run > > (DSLDAPSyncImpl.java:296) > > > > > > I have no idea what they mean.... > > > > And no users are being brought over... > > > > > > Jonathan > > > > On Jan 9, 2008 3:34 PM, Craig Staffin <cmstaffingmail.com> wrote: > >> It just needs to be a member of Domain Users > >> > >> There are no special rights needed > >> > >> Craig > >> > >> > >> On Jan 9, 2008 2:50 PM, Jonathan Charles <jonvoipgmail.com > wrote: > >>> > >>> So, what rights does the LDAP user need to AD for it to sync...? > >>> > >>> > >>> > >>> Jonathan > >>> _______________________________________________ > >>> cisco-voip mailing list > >>> cisco-voippuck.nether.net > >>> h ttps://puck.nether.net/mailman/listinfo/cisco-voip > >>> > >> > >> > >> > >> -- > >> Craig Staffin > >> Craigstaffin.org > >> (H) 262-437-7313 > >> (C) 262-613-6003 > > _______________________________________________ > > cisco-voip mailing list > > cisco-voippuck.nether.net > > h ttps://puck.nether.net/mailman/listinfo/cisco-voip > > > > > > _______________________________________________ cisco-voip mailing list cisco-voippuck.nether.net h ttps://puck.nether.net/mailman/listinfo/cisco-voip

Re: rights needed for AD integration for ccm6
	2008-01-10 12:15:09

and make sure all are routable. and close.  we had issues with a DC going offsite over slower link.   Scott On Jan 10, 2008 6:47 AM, Jonathan Charles < jonvoipgmail.com">jonvoipgmail.com> wrote: OK, I will try that tonight... Thanks... Jonathan On Jan 10, 2008 8:38 AM, Ryan Ratliff < rratliffcisco.com">rratliffcisco.com> wrote: >; Yes it does. > > Just guessing though it looks as if you've got referral issues, just >; going from some of the errors. Is this Win2k3 AD? If so do an > nslookup for 'planetcrazy.net', ' forestdnszones.planetcrazy.net', and > 'domaindnszones.planetcrazy.net' and see if there are any bogus > entries in any of them. > > > MESSAGE [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data > > 0, 1 access points >; > ref 1: 'planetcrazy.net 9; > > > > > -Ryan > > > On Jan 10, 2008, at 9:38 AM, Jonathan Charles wrote: >; > Not that easy an option... wait... > > Doesn't CCM have a built in sniffer? > > > > Jonathan > > On Jan 10, 2008 8:09 AM, Ryan Ratliff < rratliffcisco.com">rratliffcisco.com> wrote: >; > Go for a sniffer capture. It's the easiest way to see what's going > > on. > > > > -Ryan > > > > > > On Jan 9, 2008, at 7:31 PM, Jonathan Charles wrote: >; > > > The sync is not working tho... >; > > > I am getting these errors in the DirSync trace... > > > > 2008-01-09 14:11:42,451 ERROR > > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:832) - > > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] Caught > > NamingException > > 2008-01-09 14:11:42,452 ERROR > > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:833) - > > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] > > com.sun.jndi.ldap.LdapReferralException: [LDAP: error code 10 - > > 0000202B: RefErr: DSID-031005E2, data 0, 1 access points >; > ref 1: ' planetcrazy.net9; > > > > > > MESSAGE [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data > > 0, 1 access points >; > ref 1: ' planetcrazy.net9; > > > > com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2824) > > com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2737) > > com.sun.jndi.ldap.LdapCtx.searchAux (LdapCtx.java:1808) > > com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1731) > > com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search > > (ComponentDirContext.java:368) > > com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search > > (PartialCompositeDirContext.java:338) > > com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search > > (PartialCompositeDirContext.java:321) > > javax.naming.directory.InitialDirContext.search > > (InitialDirContext.java:248) >; > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.searchInternalEx > > ac > > t(DSLDAPSyncImpl.java:1193) > > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFullSync > > (DSLDAPSyncImpl.java:823) > > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run > > (DSLDAPSyncImpl.java:296) > > > > 2008-01-09 14:11:42,452 ERROR > > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:325) - > > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[Run] > > com.cisco.ccm.dir.dirsync.common.DSException > > MESSAGE null >; > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFullSync > > (DSLDAPSyncImpl.java:841) > > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run > > (DSLDAPSyncImpl.java:296) > > > > > > I have no idea what they mean.... > > > > And no users are being brought over... > > > > > > Jonathan > > > > On Jan 9, 2008 3:34 PM, Craig Staffin < cmstaffingmail.com">cmstaffingmail.com> wrote: >; >> It just needs to be a member of Domain Users > >> > >> There are no special rights needed >; >> > >> Craig > >> > >> > >> On Jan 9, 2008 2:50 PM, Jonathan Charles < jonvoipgmail.com">jonvoipgmail.com > wrote: >; >>> > >>> So, what rights does the LDAP user need to AD for it to sync...? > >>> > >>> > >>> > >>> Jonathan > >>> _______________________________________________ > >>> cisco-voip mailing list > >>> cisco-voippuck.nether.net">cisco-voippuck.nether.net > >>> https://puck.nether.net/mailman/listinfo/cisco-voip > >>> > >> > >> > >> > >> -- > >> Craig Staffin > >> Craigstaffin.org">Craigstaffin.org > >> (H) 262-437-7313 > >> (C) 262-613-6003 > > _______________________________________________ > > cisco-voip mailing list > > cisco-voippuck.nether.net">cisco-voippuck.nether.net > > https://puck.nether.net/mailman/listinfo/cisco-voip > > > > > > _______________________________________________ cisco-voip mailing list cisco-voippuck.nether.net">cisco-voippuck.nether.net https://puck.nether.net/mailman/listinfo/cisco-voip
Re: rights needed for AD integration for ccm6
	2008-01-10 13:06:14

Pardon my ignorance guys, but what does his issue have to do with 'planetcrazy.net', ' forestdnszones.planetcrazy.net', and 'domaindnszones.planetcrazy.net ?   Im just curious. Thanks, Joel P On 1/10/08, Scott Voll < svoll.voipgmail.com">svoll.voipgmail.com> wrote: and make sure all are routable. and close.  we had issues with a DC going offsite over slower link. Scott   On Jan 10, 2008 6:47 AM, Jonathan Charles <gmail.com" target="_blank">jonvoipgmail.com> wrote: OK, I will try that tonight... Thanks... Jonathan On Jan 10, 2008 8:38 AM, Ryan Ratliff <cisco.com" target="_blank">rratliffcisco.com> wrote: >; Yes it does. > > Just guessing though it looks as if you've got referral issues, just > going from some of the errors. Is this Win2k3 AD? If so do an > nslookup for ' planetcrazy.net9;, ' forestdnszones.planetcrazy.net', and > ' domaindnszones.planetcrazy.net' and see if there are any bogus > entries in any of them. > > > MESSAGE [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data > > 0, 1 access points > > ref 1: 'planetcrazy.net ' >; > > > > -Ryan > > >; On Jan 10, 2008, at 9:38 AM, Jonathan Charles wrote: >; > Not that easy an option... wait... > > Doesn't CCM have a built in sniffer? > > > > Jonathan > > On Jan 10, 2008 8:09 AM, Ryan Ratliff <cisco.com" target="_blank">rratliffcisco.com> wrote: >; > Go for a sniffer capture. It's the easiest way to see what's going > > on. > > > > -Ryan > > > > > > On Jan 9, 2008, at 7:31 PM, Jonathan Charles wrote: >; > > > The sync is not working tho... >; > > > I am getting these errors in the DirSync trace... > > > > 2008-01-09 14:11:42,451 ERROR > > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:832) - > > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] Caught > > NamingException > > 2008-01-09 14:11:42,452 ERROR > > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:833) - > > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] > > com.sun.jndi.ldap.LdapReferralException: [LDAP: error code 10 - > > 0000202B: RefErr: DSID-031005E2, data 0, 1 access points >; > ref 1: ' planetcrazy.net' > > > > > > MESSAGE [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data > > 0, 1 access points >; > ref 1: ' planetcrazy.net' > > > > com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2824) > > com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2737) > > com.sun.jndi.ldap.LdapCtx.searchAux (LdapCtx.java:1808) > > com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1731) > > com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search > > (ComponentDirContext.java:368) > > com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search > > (PartialCompositeDirContext.java:338) > > com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search > > (PartialCompositeDirContext.java:321) > > javax.naming.directory.InitialDirContext.search > > (InitialDirContext.java:248) >; > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.searchInternalEx > > ac > > t(DSLDAPSyncImpl.java:1193) > > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFullSync > > (DSLDAPSyncImpl.java:823) > > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run > > (DSLDAPSyncImpl.java:296) > > > > 2008-01-09 14:11:42,452 ERROR > > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:325) - > > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[Run] > > com.cisco.ccm.dir.dirsync.common.DSException > > MESSAGE null >; > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFullSync > > (DSLDAPSyncImpl.java:841) > > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run > > (DSLDAPSyncImpl.java:296) > > > > > > I have no idea what they mean.... > > > > And no users are being brought over... > > > > > > Jonathan > > > > On Jan 9, 2008 3:34 PM, Craig Staffin < gmail.com" target="_blank">cmstaffingmail.com> wrote: >; >> It just needs to be a member of Domain Users > >> > >> There are no special rights needed >; >> > >> Craig > >> > >> > >> On Jan 9, 2008 2:50 PM, Jonathan Charles <gmail.com" target="_blank"> jonvoipgmail.com > wrote: >; >>> > >>> So, what rights does the LDAP user need to AD for it to sync...? > >>> > >>> > >>> > >>> Jonathan > >>> _______________________________________________ > >>> cisco-voip mailing list > >>> puck.nether.net" target="_blank"> cisco-voippuck.nether.net > >>> https://puck.nether.net/mailman/listinfo/cisco-voip > >>> > >> > >> > >> > >> -- > >> Craig Staffin > >> staffin.org" target="_blank"> Craigstaffin.org > >> (H) 262-437-7313 > >> (C) 262-613-6003 > > _______________________________________________ > > cisco-voip mailing list > > puck.nether.net" target="_blank"> cisco-voippuck.nether.net > > https://puck.nether.net/mailman/listinfo/cisco-voip > > > > > > _______________________________________________ cisco-voip mailing list puck.nether.net" target="_blank"> cisco-voippuck.nether.net https://puck.nether.net/mailman/listinfo/cisco-voip _______________________________________________ cisco-voip mailing list puck.nether.net"> cisco-voippuck.nether.net https://puck.nether.net/mailman/listinfo/cisco-voip
Re: rights needed for AD integration for ccm6
	2008-01-10 14:00:37

planetcrazy.net was in the trace file. ; AD uses the forestdnszones and domaindnszones as part of the AD / dns sync.   Scott On Jan 10, 2008 11:06 AM, Joel Perez < tman701gmail.com">tman701gmail.com> wrote: Pardon my ignorance guys, but what does his issue have to do with 'planetcrazy.net', ' forestdnszones.planetcrazy.net', and 'domaindnszones.planetcrazy.net ?   Im just curious. Thanks, Joel P On 1/10/08, Scott Voll < svoll.voipgmail.com" target="_blank">svoll.voipgmail.com> wrote: and make sure all are routable. and close.  we had issues with a DC going offsite over slower link. Scott ; On Jan 10, 2008 6:47 AM, Jonathan Charles < jonvoipgmail.com" target="_blank">jonvoipgmail.com> wrote: OK, I will try that tonight... Thanks... Jonathan On Jan 10, 2008 8:38 AM, Ryan Ratliff < rratliffcisco.com" target="_blank">rratliffcisco.com> wrote: >; Yes it does. > > Just guessing though it looks as if you've got referral issues, just > going from some of the errors. Is this Win2k3 AD? If so do an > nslookup for ' planetcrazy.net', ' forestdnszones.planetcrazy.net', and > ' domaindnszones.planetcrazy.net' and see if there are any bogus > entries in any of them. > > > MESSAGE [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data > > 0, 1 access points > > ref 1: 'planetcrazy.net ' > > > > > -Ryan > > > On Jan 10, 2008, at 9:38 AM, Jonathan Charles wrote: >; > Not that easy an option... wait... > > Doesn't CCM have a built in sniffer? > > > >; Jonathan > > On Jan 10, 2008 8:09 AM, Ryan Ratliff < rratliffcisco.com" target="_blank">rratliffcisco.com> wrote: >; > Go for a sniffer capture. It's the easiest way to see what's going > > on. > > > > -Ryan > > > > > > On Jan 9, 2008, at 7:31 PM, Jonathan Charles wrote: >; > > > The sync is not working tho... >; > > > I am getting these errors in the DirSync trace... > > > > 2008-01-09 14:11:42,451 ERROR > > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:832) - > > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] Caught > > NamingException > > 2008-01-09 14:11:42,452 ERROR > > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:833) - > > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[LDAPFullSync] > > com.sun.jndi.ldap.LdapReferralException: [LDAP: error code 10 - > > 0000202B: RefErr: DSID-031005E2, data 0, 1 access points >; > ref 1: ' planetcrazy.net' > > > > > > MESSAGE [LDAP: error code 10 - 0000202B: RefErr: DSID-031005E2, data > > 0, 1 access points >; > ref 1: ' planetcrazy.net' > > > > com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2824) > > com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2737) > > com.sun.jndi.ldap.LdapCtx.searchAux (LdapCtx.java:1808) > > com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1731) > > com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search > > (ComponentDirContext.java:368) > > com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search > > (PartialCompositeDirContext.java:338) > > com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search > > (PartialCompositeDirContext.java:321) > > javax.naming.directory.InitialDirContext.search > > (InitialDirContext.java:248) >; > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.searchInternalEx > > ac > > t(DSLDAPSyncImpl.java:1193) > > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFullSync > > (DSLDAPSyncImpl.java:823) > > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run > > (DSLDAPSyncImpl.java:296) > > > > 2008-01-09 14:11:42,452 ERROR > > [DSLDAPSyncImpl(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)] > > ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:325) - > > LDAPSync(4ddb60b4-dadb-42d8-c587-7d08dd0a0a8f)[Run] > > com.cisco.ccm.dir.dirsync.common.DSException > > MESSAGE null >; > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFullSync > > (DSLDAPSyncImpl.java:841) > > com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run > > (DSLDAPSyncImpl.java:296) > > > > > > I have no idea what they mean.... > > > > And no users are being brought over... > > > > > > Jonathan > > > > On Jan 9, 2008 3:34 PM, Craig Staffin < cmstaffingmail.com" target="_blank">cmstaffingmail.com> wrote: >; >> It just needs to be a member of Domain Users > >> > >> There are no special rights needed > >> > >> Craig > >> > >> > >> On Jan 9, 2008 2:50 PM, Jonathan Charles < jonvoipgmail.com" target="_blank"> jonvoipgmail.com > wrote: > >>> > >>> So, what rights does the LDAP user need to AD for it to sync...? > >>> > >>> > >>> > >>> Jonathan > >>> _______________________________________________ > >>> cisco-voip mailing list > >>> cisco-voippuck.nether.net" target="_blank">cisco-voippuck.nether.net > >>> https://puck.nether.net/mailman/listinfo/cisco-voip > >>> > >> > >> > >> > >> -- > >> Craig Staffin > >> Craigstaffin.org" target="_blank"> Craigstaffin.org > >> (H) 262-437-7313 > >> (C) 262-613-6003 > > _______________________________________________ > > cisco-voip mailing list > > cisco-voippuck.nether.net" target="_blank"> cisco-voippuck.nether.net > > https://puck.nether.net/mailman/listinfo/cisco-voip > > > > > > _______________________________________________ cisco-voip mailing list cisco-voippuck.nether.net" target="_blank">cisco-voippuck.nether.net https://puck.nether.net/mailman/listinfo/cisco-voip _______________________________________________ cisco-voip mailing list cisco-voippuck.nether.net" target="_blank"> cisco-voippuck.nether.net https://puck.nether.net/mailman/listinfo/cisco-voip

[1-10] [11-20] [21]

about | contact Other archives ( Real Estate discussion Medical topics )

Mailing lists

ARCHIVES