GAL sync issue

Hi all,

two exchange 2003 organizations
by following this link
http://msmvps.com/blogs/clustering/a.../06/15141.aspx

About the GALsync and these are exact steps I did as the link:

Forest A Forest B

Create galsync account Create galsync account

Create OU ForestB Create OU ForestA

Create OU contacts under ForestB Create OU contacts under ForestA

Assigned permission as specified Assigned permission as specified

Create ForestA GAL MA Create ForestB GAL MA

Target container: Target container:

Ou=Contacts, OU=forestB, DC=forestA OU=Contacts, OU=forestA,
DC=forestB

Source container: Source container:

OU=IT, DC=ForestA OU=Finance, DC=ForestB

__________________________________________________ _________________

Run the Full Import with staging for ForestA GAL MA and ForestB GAL MA

Run delta synchronization for the ForestA GAL MA and ForestB GAL MA

Run the export for ForestA GAL MA and ForestB GAL MA

______________________

I can not see the forest A users in the created contacts OU of forest B or
can not see the forest B users in the created contacts OU of forest A.

I tried to troubleshoot this for several day already but still can not get
this to work.

I still could not understand if you assign the specified user to your own
forest rigts and permisions, how could it bring other forest's users as
contacts in your own forest?

(For two forest with a two-way trust, I only need IIFP on one forest, right?

the end result should be forest A users shown as contacts in the forest B,

and forest B users shown as contacts in the forest A)

What might I miss?

THANK YOU!

Hello ed,

To get you correct, your forests are named forestA and forestB only? Single
label domain names? If not then change:

Ou=Contacts,OU=forestB,DC=forestA to Ou=Contacts,OU=forestB,DC=forestA,DC=DOMAIN,DC=COM

if your domain name is foresta.domain.com. Same for the other forest.

What error message do you get when starting the sync process?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi all,
>
> two exchange 2003 organizations
> by following this link
> http://msmvps.com/blogs/clustering/a.../06/15141.aspx
> About the GALsync and these are exact steps I did as the link:
>
> Forest A Forest B
>
> Create galsync account Create galsync account
>
> Create OU ForestB Create OU ForestA
>
> Create OU contacts under ForestB Create OU contacts under
> ForestA
>
> Assigned permission as specified Assigned permission as
> specified
>
> Create ForestA GAL MA Create ForestB GAL MA
>
> Target container: Target
> container:
>
> Ou=Contacts, OU=forestB, DC=forestA OU=Contacts, OU=forestA,
> DC=forestB
>
> Source container: Source
> container:
>
> OU=IT, DC=ForestA OU=Finance,
> DC=ForestB
>
> __________________________________________________ _________________
>
> Run the Full Import with staging for ForestA GAL MA and ForestB GAL MA
>
> Run delta synchronization for the ForestA GAL MA and ForestB GAL MA
>
> Run the export for ForestA GAL MA and ForestB GAL MA
>
> ______________________
>
> I can not see the forest A users in the created contacts OU of forest
> B or can not see the forest B users in the created contacts OU of
> forest A.
>
> I tried to troubleshoot this for several day already but still can not
> get this to work.
>
> I still could not understand if you assign the specified user to your
> own forest rigts and permisions, how could it bring other forest's
> users as contacts in your own forest?
>
> (For two forest with a two-way trust, I only need IIFP on one forest,
> right?
>
> the end result should be forest A users shown as contacts in the
> forest B,
>
> and forest B users shown as contacts in the forest A)
>
> What might I miss?
>
> THANK YOU!
>

Hi Meinolf,

thank you for your help.
Sorry that I did not state them clearly. not single label name. ex:


Forest A name: a.local
Forest B name: b.local

Forest A :a.local
For target container: ou=contacts,ou=forestB,dc=a,dc=local
source container: ou=IT, dc=a, dc=local

forest B: b.local
For target container: ou=contacts,ou=forestA,dc=b,dc=local
source container: ou=Fiance, dc=b, dc=local

I just tested out specified OU users and not everybody.
I run each agent full import with staging, delta synchronization export.
with no error, but, I can not see b.local users as contacts in company
a.local and can not see company a.local users as contacs in company b.local.

Let's make the situation simple, if I only need company b.local users in the
company a.local, what are profiles that have to run? If the target and source
are in the same forest, how would it bring users as contacts in other forest?

I am totally lost now and thank you for your help.








"Meinolf Weber [MVP-DS]" wrote:

> Hello ed,
>
> To get you correct, your forests are named forestA and forestB only? Single
> label domain names? If not then change:
>
> Ou=Contacts,OU=forestB,DC=forestA to Ou=Contacts,OU=forestB,DC=forestA,DC=DOMAIN,DC=COM
>
> if your domain name is foresta.domain.com. Same for the other forest.
>
> What error message do you get when starting the sync process?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi all,
> >
> > two exchange 2003 organizations
> > by following this link
> > http://msmvps.com/blogs/clustering/a.../06/15141.aspx
> > About the GALsync and these are exact steps I did as the link:
> >
> > Forest A Forest B
> >
> > Create galsync account Create galsync account
> >
> > Create OU ForestB Create OU ForestA
> >
> > Create OU contacts under ForestB Create OU contacts under
> > ForestA
> >
> > Assigned permission as specified Assigned permission as
> > specified
> >
> > Create ForestA GAL MA Create ForestB GAL MA
> >
> > Target container: Target
> > container:
> >
> > Ou=Contacts, OU=forestB, DC=forestA OU=Contacts, OU=forestA,
> > DC=forestB
> >
> > Source container: Source
> > container:
> >
> > OU=IT, DC=ForestA OU=Finance,
> > DC=ForestB
> >
> > __________________________________________________ _________________
> >
> > Run the Full Import with staging for ForestA GAL MA and ForestB GAL MA
> >
> > Run delta synchronization for the ForestA GAL MA and ForestB GAL MA
> >
> > Run the export for ForestA GAL MA and ForestB GAL MA
> >
> > ______________________
> >
> > I can not see the forest A users in the created contacts OU of forest
> > B or can not see the forest B users in the created contacts OU of
> > forest A.
> >
> > I tried to troubleshoot this for several day already but still can not
> > get this to work.
> >
> > I still could not understand if you assign the specified user to your
> > own forest rigts and permisions, how could it bring other forest's
> > users as contacts in your own forest?
> >
> > (For two forest with a two-way trust, I only need IIFP on one forest,
> > right?
> >
> > the end result should be forest A users shown as contacts in the
> > forest B,
> >
> > and forest B users shown as contacts in the forest A)
> >
> > What might I miss?
> >
> > THANK YOU!
> >
>
>
> .
>

Hello ed,

Do you have errors in the event viewer listed on either machine? Can you
ping between the servers with ip address, computername and FQDN?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi Meinolf,
>
> thank you for your help.
> Sorry that I did not state them clearly. not single label name. ex:
> Forest A name: a.local
> Forest B name: b.local
> Forest A :a.local
> For target container: ou=contacts,ou=forestB,dc=a,dc=local
> source container: ou=IT, dc=a, dc=local
> forest B: b.local
> For target container: ou=contacts,ou=forestA,dc=b,dc=local
> source container: ou=Fiance, dc=b, dc=local
> I just tested out specified OU users and not everybody.
> I run each agent full import with staging, delta synchronization
> export.
> with no error, but, I can not see b.local users as contacts in company
> a.local and can not see company a.local users as contacs in company
> b.local.
> Let's make the situation simple, if I only need company b.local users
> in the company a.local, what are profiles that have to run? If the
> target and source are in the same forest, how would it bring users as
> contacts in other forest?
>
> I am totally lost now and thank you for your help.
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello ed,
>>
>> To get you correct, your forests are named forestA and forestB only?
>> Single label domain names? If not then change:
>>
>> Ou=Contacts,OU=forestB,DC=forestA to
>> Ou=Contacts,OU=forestB,DC=forestA,DC=DOMAIN,DC=COM
>>
>> if your domain name is foresta.domain.com. Same for the other forest.
>>
>> What error message do you get when starting the sync process?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi all,
>>>
>>> two exchange 2003 organizations
>>> by following this link
>>> http://msmvps.com/blogs/clustering/a.../06/15141.aspx
>>> About the GALsync and these are exact steps I did as the link:
>>> Forest A Forest B
>>>
>>> Create galsync account Create galsync account
>>>
>>> Create OU ForestB Create OU ForestA
>>>
>>> Create OU contacts under ForestB Create OU contacts under
>>> ForestA
>>>
>>> Assigned permission as specified Assigned permission as
>>> specified
>>>
>>> Create ForestA GAL MA Create ForestB GAL MA
>>>
>>> Target container: Target
>>> container:
>>>
>>> Ou=Contacts, OU=forestB, DC=forestA OU=Contacts, OU=forestA,
>>> DC=forestB
>>>
>>> Source container: Source
>>> container:
>>>
>>> OU=IT, DC=ForestA OU=Finance,
>>> DC=ForestB
>>>
>>> __________________________________________________ _________________
>>>
>>> Run the Full Import with staging for ForestA GAL MA and ForestB GAL
>>> MA
>>>
>>> Run delta synchronization for the ForestA GAL MA and ForestB GAL MA
>>>
>>> Run the export for ForestA GAL MA and ForestB GAL MA
>>>
>>> ______________________
>>>
>>> I can not see the forest A users in the created contacts OU of
>>> forest B or can not see the forest B users in the created contacts
>>> OU of forest A.
>>>
>>> I tried to troubleshoot this for several day already but still can
>>> not get this to work.
>>>
>>> I still could not understand if you assign the specified user to
>>> your own forest rigts and permisions, how could it bring other
>>> forest's users as contacts in your own forest?
>>>
>>> (For two forest with a two-way trust, I only need IIFP on one
>>> forest, right?
>>>
>>> the end result should be forest A users shown as contacts in the
>>> forest B,
>>>
>>> and forest B users shown as contacts in the forest A)
>>>
>>> What might I miss?
>>>
>>> THANK YOU!
>>>
>> .
>>