AD migragtion utility - schema extension

[Jennifer Auiler_3]

When using the schema extension utility we get the error message 'unknown username or bad password' at the directory login page. The user is a schema administrator logged in with the same credentials that he is using for the utility. Can this possibly be some kind of 'generic' error that does not reflect some other problem?

[Junior Yharte · Accepted solution]

If its the same user that is logged into the domain, it should work. Make sure it's not the local Administrator account, but just to make sure, use the fully distinguished name.

[Jennifer Auiler_3]

Thanks for the quick response. I ran it again on another domain, and got the error "The directory service is busy." Any ideas??

[Junior Yharte]

Jennifer,
Please try the LDIFDE utility that Luis suggested. I have not seen this message pop up but please let us know if you can not get around this.

[Derek_31]

Make sure that your AD server has a PKI certificate, so that LDAP over SSL is enabled. Also, make sure the account you are using has the schema update right, along with domain admin rights.

And, point the HP utility to the schema master DC.

[Jennifer Auiler_3]

The utility did not get the unknown user error the next time we used it. We did however later run into an issue with the AD server certification once the schema was extended. Although it appeared to be valid and functional, it had somehow become corrupt. Once a new cert was issued AD authentication began to work. Thanks everyone for your help.