Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1028440
Description of problem: Winsync fails to synchronize users/group from DS to AD. It throws error message as "windows_replay_update: Cannot replay add operation". Version-Release number of selected component (if applicable): 389-ds-base-1.3.1.6-5.el7 How reproducible: Consistently Steps to Reproduce: 1. Install 389-ds-base-1.3.1.x packages on RHEL7 and create winsync agreement. 2. Install and configure win2008r2 AD. 3. Install and Configure Passsync component on Win2008r2 4. Copy/Import AD/DS certificates 5. Create few users at AD 6. Create few users at DS 7. Run replica initialization from DS. 8. Check whether entries from DS added AD and vice versa. 9. Entries from AD got synced to DS, but not the other way round. Actual results: Entries fails to sync from DS to AD. Expected results: Entries should be synced bi-directionally. Additional info: Few lines from DS error logs. [08/Nov/2013:06:35:07 -0500] NSMMReplicationPlugin - agmt="cn=WinPassSync" (win2k8rhvd64:636): Replica has no update vector. It has never been initialized. [08/Nov/2013:06:35:10 -0500] NSMMReplicationPlugin - agmt="cn=WinPassSync" (win2k8rhvd64:636): Replica has no update vector. It has never been initialized. [08/Nov/2013:06:35:13 -0500] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=WinPassSync" (win2k8rhvd64:636)". [08/Nov/2013:06:35:18 -0500] NSMMReplicationPlugin - agmt="cn=WinPassSync" (win2k8rhvd64:636): windows_replay_update: Cannot replay add operation. [08/Nov/2013:06:35:20 -0500] NSMMReplicationPlugin - agmt="cn=WinPassSync" (win2k8rhvd64:636): Replication bind with SIMPLE auth resumed [08/Nov/2013:06:35:20 -0500] NSMMReplicationPlugin - agmt="cn=WinPassSync" (win2k8rhvd64:636): Replica has no update vector. It has never been initialized. [08/Nov/2013:06:35:20 -0500] NSMMReplicationPlugin - agmt="cn=WinPassSync" (win2k8rhvd64:636): Replica has no update vector. It has never been initialized.
Note: 1.3.1 only (bug introduced by cherry-pick & conflict resolution)
Bug description: Cherry-picking the fix for "Ticket #47492 - PassSync removes User must change password flag on the Windows side" (commit 8d34f77) dropped one line to set suffix in map_entry_dn_outbound.
Fix description: This patch recovers the suffix setting code.
git patch file (389-ds-base-1.3.1) 0001-Ticket-47589-Winsync-replica-initialization-and-incr.patch
Reviewed by Rich (Thank you!!)
Pushed to 389-ds-base-1.3.1: e93308e..9df31ed 389-ds-base-1.3.1 -> 389-ds-base-1.3.1 commit 9df31ed
Metadata Update from @nhosoi: - Issue assigned to nhosoi - Issue set to the milestone: 1.3.1.14
389-ds-base is moving from Pagure to Github. This means that new issues and pull requests will be accepted only in 389-ds-base's github repository.
This issue has been cloned to Github and is available here: - https://github.com/389ds/389-ds-base/issues/926
If you want to receive further updates on the issue, please navigate to the github issue and click on subscribe button.
subscribe
Thank you for understanding. We apologize for all inconvenience.
Metadata Update from @spichugi: - Issue close_status updated to: wontfix (was: Fixed)
Login to comment on this ticket.