Endpoint Protection

SEPM 11.0.5002.233

I am getting an LDAP sync error on a particular OU in my AD.

"The Management Server has detected one or more problems with entries in LDAP. These entries were ignored.  This could be cause by duplicate entries or other problems. For details see the Debug Log."

Where, oh where is this magical "Debug Log"?

I have run a search across my entire server and no files relate to a time stamp near when this occured.

pls help.

its all under here
F:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs

can you post the AD logs lets see whats in there. 

How to debug the Symantec Endpoint Protection Manager console in Symantec Endpoint Protection 11.x

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007090612034148

What name is the "AD log"?

The only recent logs in this folder are sesmLU.log adn SesmLu-i.log  The other logs are all over 2 hours old.

B.

enable the logging in
in the conf.properties file
scm.log.loglevel=FINEST
then check the logs scm-server 0.log 

Thanks,

I set the setting to finest and rebooted the whole machine...

After an resync attempt, the error shows again, but still the scm-server 0.log shows only the startup info,

:(

I dont remember what the file name would be,but inside the logs folder there should be file related the AD error any new files inside logs folder after u enabled the loggin?

can you try this doc ??


LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT)" Message Appears in Symantec Endpoint Protection Manager's System Logs: Server Activity
http://service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/a7448fb5fe338a91802574ff005cf8c5?OpenDocument