Red Hat DIRECTORY SERVER 8.0, Administration Manual

Page: 483 / 552

Troubleshooting
465
3. If SSL was configured for the
Password Sync
, then the
cert8.db
and
key3.db
databases that
were created were not removed when
Password Sync
was uninstalled. Delete these files by
hand.
19.6. Troubleshooting
If synchronization does not seem to be functioning properly, see the Windows event log and/or
Directory Server error log for information on any potential problems.
Enable replication logging for more detailed information on synchronization to be recorded in the
error logs. Replication log levels will produce more verbose logs from the sync code that can help in
diagnosing problems.
1. In the Console, click the
Configuration
tab, select
Logs
from the navigation menu on the right,
and open the error log.
2. Scroll down to error log level, and select
Replication
from the menu. Hit save.
For complete information on error log levels, refer to
Red Hat Directory Server Configuration,
Command, and File Reference
.
Error #1: The message box when creating the sync agreement indicates that the it
cannot connect to Active Directory.
Make sure that the directory suffixes, Windows domain and domain host, and the administrator DN
and password are correct. Also verify that the port numbers used for LDAPS is correct. If all of this is
correct, make sure that Active Directory or the Windows machine are running.
Error #2: After synchronization, the status returns error 81.
One of the sync peer servers has not been properly configured for SSL communication. Examine the
Directory Server access log file to see if the connection attempt was received by the Directory Server.
There are also helpful messages in the Directory Server's error log file.
To narrow down the source of the misconfiguration, try to establish an LDAPS connection to the
Directory Server. If this connection attempt fails, check all values (port number, hostname, search
base, and so forth) to see if any of these are the problem. If all else fails, reconfigure the Directory
Server with a new certificate.
If the LDAPS connection is successful, it is likely that the misconfiguration is on Active Directory.
Examine the Windows event log file for error messages.
NOTE
A common problem is that the certificate authority was not configured as trusted when the
Windows sync services certificate database was configured.