Active Directory access and CMA

[Anonymous]

Hi, just wondering how the CMA detects AD servers?  Currently we set the discovery value to auto, but i notice it jumps through different servers, going from Australia to Holland...  I opened some firewall rules, and entered a local domain server.  This was accepted, but i noticed CMA desktop clients could not connect, even after exiting and logging back in.  So i reset the value.  Any idea?

[simons3]

When set to Auto, the CMA will try to find the closest Global Catalog server based on the AD site topology. The AD site topology is also referenced in your DNS namespace. A quck packet capture from the CMA willshow this behavior.

In your case, I would try to reset the computer account password as this account is used to authenicate CMAD users (bottom portion of the CMA LDAP page). Once the computer account has been reset, then try entering the LDAP server again. If you pick a different AD server than what you used to reset the computer account, you must force replication or wait 10-15 minutes to make sure replication has completed.

S.

[Anonymous]

Hi, the only problem with picking only one AD server is that it's a single point of failure.  I opened our firewall to allow local AD servers, but still i get timeouts...