Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 16 replies
  • Subscribers 1 subscriber
  • Views 6058 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

astaro 7.500 - Active Directory Prefetch Error

wizardz
hello,

(first post! after all those years! )

anyway, back to the "problem" i am experiencing.


i have my ASG joined to my domain ( windows 2008 R2 x64 using windows 2008 r2 native domain)

i can successfully pass any test that requires a username / password ( i created a specific username for my ASG , usename is astaro-admin)


basically what i want to do is prefetch all my users so that i can create specific access rules based on "user privilege".

when i go to users=>authentication=>advanced

i then select my prefetch server ( ymxdc01.spsm.ca ), then in groups i select my "domain users" group. now onto the "prefetch now" button, everything works fine except that it does not find any users at all!!

2009:10:04-11:07:42 ymxgw01 user_prefetch[7237]: ------------------------------------------------------------ 
2009:10:04-11:07:42 ymxgw01 user_prefetch[7237]: Starting synchronization for adirectory 
2009:10:04-11:07:42 ymxgw01 user_prefetch[7237]: ------------------------------------------------------------ 
2009:10:04-11:07:42 ymxgw01 user_prefetch[7237]: ------------------------------------------------------------ 
2009:10:04-11:07:42 ymxgw01 user_prefetch[7237]: Searching for users 
2009:10:04-11:07:42 ymxgw01 user_prefetch[7237]: ------------------------------------------------------------ 
2009:10:04-11:07:42 ymxgw01 user_prefetch[7237]: Connecting to ldap server 
2009:10:04-11:07:42 ymxgw01 user_prefetch[7237]: ldap server: ldap://172.16.10.11:389 
2009:10:04-11:07:42 ymxgw01 user_prefetch[7237]: No group members found for group 'CN=Domain Users,CN=Users,DC=spsm,DC=ca' 
2009:10:04-11:07:42 ymxgw01 user_prefetch[7237]: ------------------------------------------------------------ 
2009:10:04-11:07:42 ymxgw01 user_prefetch[7237]: Performing ldap search: 
2009:10:04-11:07:42 ymxgw01 user_prefetch[7237]: Ldap search returned 0 users 
2009:10:04-11:07:42 ymxgw01 user_prefetch[7237]: Search time: 0m 0s 
2009:10:04-11:07:43 ymxgw01 user_prefetch[7237]: ------------------------------------------------------------ 
2009:10:04-11:07:43 ymxgw01 user_prefetch[7237]: Adding/updating users 
2009:10:04-11:07:43 ymxgw01 user_prefetch[7237]: ------------------------------------------------------------ 
2009:10:04-11:07:43 ymxgw01 user_prefetch[7237]: 0 user objects were found: 
2009:10:04-11:07:43 ymxgw01 user_prefetch[7237]: 0 users were created 
2009:10:04-11:07:43 ymxgw01 user_prefetch[7237]: 0 users were updated 
2009:10:04-11:07:43 ymxgw01 user_prefetch[7237]: 0 users are authenticated locally. 
2009:10:04-11:07:43 ymxgw01 user_prefetch[7237]: Overall time: 0m 1s 


but, if i put a user, the prefetch will complete successfully and will be listed in my users tab.


any help would be greatly appreciated.

wizardz


This thread was automatically locked due to age.
Parents
  • 0
    I'm not an MCSE either, but I assume that the built-in groups like 'Users' and 'Domain Users' have limited permissions, and that by creating a new group in the right container, it inherited the permissions from that container, and adding 'Domain Users' to it gave them those permissions.

    Maybe someone from Astaro can tell us what attribute prefetch queries on that causes LDAP to return no results in the case of 'Domain Users'.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    I'm not an MCSE either, but I assume that the built-in groups like 'Users' and 'Domain Users' have limited permissions, and that by creating a new group in the right container, it inherited the permissions from that container, and adding 'Domain Users' to it gave them those permissions.

    Maybe someone from Astaro can tell us what attribute prefetch queries on that causes LDAP to return no results in the case of 'Domain Users'.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data