Web lists-archives.com

Re: [Samba] Different LDAP query in different DC...




On Thu, 29 Nov 2018 10:52:30 +0100
Marco Gaiarin via samba <samba@xxxxxxxxxxxxxxx> wrote:

> Mandi! Rowland Penny via samba
>   In chel di` si favelave...
> 
> > > No. Anyway, note that query return correctly 'result: 0 Success',
> > > simply return no data.
> > That just means the search retuned without error
> 
> Eh. Query succeded and return no data. Yes.
> 
> 
> > If you run the command:
> > ldapsearch -H ldap://vdcpp1.ad.fvg.lnf.it -W -D
> > CN=mta,OU=Restricted,DC=ad,DC=fvg,DC=lnf,DC=it -b
> > DC=ad,DC=fvg,DC=lnf,DC=it "(cn=prova123)"
> > Does it produce the entire users object ?
> 
> No, query succeded and return no data.
> 

Whilst there are attributes that do not get replicated between DC's,
the majority are, so each DC should allow the same access.

Do you have access to the DC ?
Can you run the search locally ?

If it works locally, then something is getting in the way.
If it doesn't work locally, then there is something wrong with AD on
that computer.

Rowland
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba