You are viewing limited content. For full access, please sign in.

Question

Question

Directory Server not sync'ing with Active Directory

asked on August 10, 2015

We recently upgrade from 8.3 to 9.2. All the licences that were present have come over with no issues, but the AD Sync seems to be broken now. We can still manually add users and given them a licence, but this is not the prefered route.

We've confirmed that all the firewall ports that should be open, are. The only real clue that something isn't right is the log from the event viewer, which I've provided below.

Directory Server is running on Windows 2012 Server, and SQL Server 2008 R2.

 

==============

System.DirectoryServices.DirectoryServicesCOMException (0x80072020): An operations error occurred.

   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
   at Laserfiche.LicenseManager.ADGS.ADGSModule.ApplyADGSRule(LicenseCacheEntry lce, DirectorySearcher searcher, String rootDN, String host, Boolean bUseLdapTrusteeFormat, String user, String domain, String password, AuthenticationTypes authType, ADGSRule rule, List`1 cycleCheck)
   at Laserfiche.LicenseManager.ADGS.ADGSModule.ApplyADGSRule(LicenseCacheEntry lce, DirectorySearcher searcher, IdentityProviderSpecs providerSpecs, ADGSRule rule)
   at Laserfiche.LicenseManager.ADGS.ADGSModule.SynchronizeDatabase(Object data)

Type:
System.DirectoryServices.DirectoryServicesCOMException

Stack Trace:
   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
   at Laserfiche.LicenseManager.ADGS.ADGSModule.ApplyADGSRule(LicenseCacheEntry lce, DirectorySearcher searcher, String rootDN, String host, Boolean bUseLdapTrusteeFormat, String user, String domain, String password, AuthenticationTypes authType, ADGSRule rule, List`1 cycleCheck)
   at Laserfiche.LicenseManager.ADGS.ADGSModule.ApplyADGSRule(LicenseCacheEntry lce, DirectorySearcher searcher, IdentityProviderSpecs providerSpecs, ADGSRule rule)
   at Laserfiche.LicenseManager.ADGS.ADGSModule.SynchronizeDatabase(Object data)

Replies

replied on August 12, 2015

That looks like an authentication issue on the ID Provider. Is this the default ID Provider that is created for the domain or one that you created? If it's the default one, check the LFDS service login. If it's on you created, check the authentication information for it.

replied on August 25, 2015

Hi Miruna,

We added the ID provider as there was no default. We are not sure of what exactly we have to check for the service account? We did check & the account is not locked and the password is not expired.

Thanks,

replied on August 28, 2015

Technical Support has being contacted directly and a case has being opened.  We have requested an upgrade to LFDS 9.2.1 to resolve this issue.

You are not allowed to follow up in this post.