Search found 64 matches

Here is the code again

ADS_SECURE_AUTHENTICATION = 1
ADS_USE_SSL = 2

set objLDAP = GetObject("LDAP:")

set objOU = objLDAP.OpenDSOb ...

I haven't opened my computer to to see if the cables are loose. It is
somewhat a lot of work. Should I even bother based on the data given?

I tried to run chkdsk /f /r and was given this message:
...

Kevin

You do not have a BIOS issue! You have a hard drive problem.

These details raise issues:
Damaged Blocks : 0.1 %
(05) Reallocated Sector Count 1 1 63 636
Failed
Health S ...

Here are the HD Tune results. I noticed something when I booted the computer
this time. The CD drive began spinning immediately. It did not do this
before the problem occured. Does this mean I h ...

Are there any errors in the DC machine's event log related to not being able
to use or find an appropriate SSL certificate?

The common problems would be:
- Cert WITH private key not installed in lo ...

Just live with the error, it isn't hurting anything and you know what it is.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4 ...

I have found that the failures are actually due to the enchancements in 2008
Kerberos in regard to AES.

"This error was caused by Kerberos Enhancements in Windows Server 2008. The
base Kerberos pro ...

This is referencing a group that contains no members. I'm guessing these
are not related.

ServiceSid S-1-0-0
http://msdn.microsoft.com/en-us/library/aa379649.aspx

--
Paul Bergson
MVP - Directory ...

I was able to get an error message. When it fails, I receive the following
failure in Security logs. I am hoping this will shed some light on the
problem.

- Provider

I don't know of anythi ...

I don't know of anything that could be blocking this.

Maybe this ties into an issue with the lssas service? I don'r have much to
go on this for you. You could try running wireshark to see if somet ...

Thanks for the reply. My PDC emulator is pulling NTP off of an internal Time
server and the linux box running PHP is pulling from it as well. The other
three domain controllers are pulling time from ...

My only thought is time skew, but I doubt it since you do get some
successful connections. How close are the two clocks? I believe this could
also be caused by lag time between packets sent out an ...

I have four 2008 Domain Controllers in a single domain and a 2008 CA. I am
connecting from a linux machine to ldap over ssl using a Domain Controller
Certificate issued by the CA. I can connect with ...

Some more log data (see previous post.

Thanks

"PerUpdate" regulated and can NOT download. Sequence 7729 vs AcceptRate 0.
2009-05-26 21:46:06:802 1176 1614 DnldMgr Regulation:
{7971F918-A847-4430-92 ...

Thanks Paul and Meinolf,

I downloaded the portqueryui tool and ran that. Very useful..did not know
about that tool. I ran it and I think everything is good. Again BIND DNS
always clogs my output wi ...

Hello paul thank you

got it working it is the certificate , i remove the existing one, and re
generate a new one.

also found this article useful http://support.microsoft.com/kb/321051

"Mr555" w ...

Hi Paul

Thank you so much for your reply.

I have attempted 389 it works but doesn't work with 636 even without ssl
I perform this test within the forest root DC. certificate services is
enabled ...

Hello Mr555,
Have you attempted 389? Did it work?
Have you attempted 636 without ssl?

The name on the cert needs to match the connection to the dc (So don't use
an IP Address) so verify this.
http: ...

Hello Meinolf,
It is not stored anywhere. So as Meinolf said auditing is your only option.
There is no way to go back and find out about changes that have already
been made.

--
Paul Bergson
MVP ...

Hello Marwan,

Don't think that it will be stored on another place. You can see the last
modification of the useraccount on the "Object" tab. But this changes are
all that belongs to the AD settings ...