AD LDS - Unable to bind with AD LDS ID

hi,

i have ad lds instance running on w2k8 r2 member server in single dc w2k8 r2 forest. 

i unable bind ad lds security principal lds instance. i'm using simple bind method.

to bind windows security principal lds instance works fine.

i have created application partition called "o=macdb,c=nap-b". user "ldsadmin-nap-b" created there , member of administrators group.

i tried dn, upn, username nothing works.

the password has been reset make sure nothing changed there. suggestion helpful.
 

here ldp connect , bind error information receive:

ld = ldap_open("localhost", 389);
established connection localhost.
retrieving base dsa information...
getting 1 entries:
dn: (rootdse)
configurationnamingcontext: 
cn=configuration,cn={5beb9b31-432b-4b18-b106-ba3820b978e3};
currenttime: 09.06.2011 09:32:49 w. europe daylight time;
dnshostname: napb-srv-mem2.nap-b.local;
domaincontrollerfunctionality: 4 = ( win2008r2 );
dsservicename: cn=ntds
settings,cn=napb-srv-mem2$nap-b-lds,cn=servers,cn=default-first-site-name,cn=sites,cn=configuration,cn={5beb9b31-432b-4b18-b106-ba3820b978e3};
forestfunctionality: 2 = ( win2003 );
highestcommittedusn: 16403;
issynchronized: true;
namingcontexts (3): 
cn=configuration,cn={5beb9b31-432b-4b18-b106-ba3820b978e3};
cn=schema,cn=configuration,cn={5beb9b31-432b-4b18-b106-ba3820b978e3};
o=macdb,c=nap-b;
schemanamingcontext: 
cn=schema,cn=configuration,cn={5beb9b31-432b-4b18-b106-ba3820b978e3};
servername: 
cn=napb-srv-mem2$nap-b-lds,cn=servers,cn=default-first-site-name,cn=sites,cn=configuration,cn={5beb9b31-432b-4b18-b106-ba3820b978e3};
subschemasubentry: 
cn=aggregate,cn=schema,cn=configuration,cn={5beb9b31-432b-4b18-b106-ba3820b978e3};
supportedcapabilities (6): 1.2.840.113556.1.4.1851 = ( active_directory_adam ); 1.2.840.113556.1.4.1670 = (
active_directory_v51 ); 1.2.840.113556.1.4.1791 = ( active_directory_ldap_integ ); 1.2.840.113556.1.4.1935 = (
active_directory_v61 ); 1.2.840.113556.1.4.2080; 1.2.840.113556.1.4.1880 = ( active_directory_adam_digest ); supportedcontrol (28): 1.2.840.113556.1.4.319 = ( paged_result );
1.2.840.113556.1.4.801 = ( sd_flags ); 1.2.840.113556.1.4.473 = ( sort ); 1.2.840.113556.1.4.528 = ( notification ); 1.2.840.113556.1.4.417 = ( show_deleted ); 1.2.840.113556.1.4.619 = ( lazy_commit );
1.2.840.113556.1.4.841 = ( dirsync ); 1.2.840.113556.1.4.529 = ( extended_dn ); 1.2.840.113556.1.4.805 = ( tree_delete );
1.2.840.113556.1.4.521 = ( crossdom_move_target ); 1.2.840.113556.1.4.970 = ( get_stats ); 1.2.840.113556.1.4.1338 = ( verify_name ); 1.2.840.113556.1.4.474 = ( resp_sort );
1.2.840.113556.1.4.1339 = ( domain_scope ); 1.2.840.113556.1.4.1340 = ( search_options ); 1.2.840.113556.1.4.1413 = ( permissive_modify );
2.16.840.1.113730.3.4.9 = ( vlvrequest ); 2.16.840.1.113730.3.4.10 = ( vlvresponse ); 1.2.840.113556.1.4.1504 = ( asq );
1.2.840.113556.1.4.1852 = ( quota_control ); 1.2.840.113556.1.4.802 = ( range_option ); 1.2.840.113556.1.4.1907 = ( shutdown_notify );
1.2.840.113556.1.4.1948 = ( range_retrieval_noerr );
1.2.840.113556.1.4.1974 = ( force_update ); 1.2.840.113556.1.4.1341 = ( rodc_dcpromo ); 1.2.840.113556.1.4.2026 = ( dn_input );
1.2.840.113556.1.4.2064 = ( show_recycled ); 1.2.840.113556.1.4.2065 = ( show_deactivated_link ); supportedldappolicies (14): maxpoolthreads; maxdatagramrecv; maxreceivebuffer; initrecvtimeout; maxconnections; maxconnidletime; maxpagesize; maxqueryduration; maxtemptablesize; maxresultsetsize; minresultsets; maxresultsetsperconn; maxnotificationperconn; maxvalrange; supportedldapversion (2): 3; 2; supportedsaslmechanisms (4): gssapi; gss-spnego; external; digest-md5;

-----------
res = ldap_simple_bind_s(ld, 'cn=ldsadmin-napb,ou=lds admins,o=macdb,c=nap-b', <unavailable>); // v.3 error <49>: ldap_simple_bind_s() failed: invalid credentials server error: 8009030c: ldaperr: dsid-0c0903a9, comment: 
acceptsecuritycontext error, data 533, v1db0 error 0x8009030c logon attempt failed
-----------
res = ldap_simple_bind_s(ld, 'ldsadmin-napb', <unavailable>); // v.3 error <49>: ldap_simple_bind_s() failed: invalid credentials server error: 8009030c: ldaperr: dsid-0c0903a9, comment: 
acceptsecuritycontext error, data 2030, v1db0 error 0x8009030c logon attempt failed
-----------
res = ldap_simple_bind_s(ld, 'ldsadmin-napb@macdb.nap-b', <unavailable>); // v.3 error <49>: ldap_simple_bind_s() failed: invalid credentials server error: 8009030c: ldaperr: dsid-0c0903a9, comment: 
acceptsecuritycontext error, data 533, v1db0 error 0x8009030c logon attempt failed
-----------

problem solved!

i can not tell error was. it's embarrassing... :-)

as lds newbee did not notice new created lds accounts disabled default.

after enabling them worked charm...

 

thousand sorries stealing time such stupid mistake , thanks

regards mat

Windows Server  >  Directory Services