Directory Agent communication issues
If Directory Agent is prevented from communicating with directory service to gather user information, or if Directory Agent cannot connect to Sync Service, updated user and group information cannot be sent to the hybrid service.
Communication problems can occur if:
- There is problem in the network.
- The ports used for directory service (see table) or Sync Service (55832) communication are blocked between the Directory Agent machine and the target machine.
Port Used for: 139 NetBIOS communication: Active Directory 389 LDAP communication: Active Directory, Novell eDirectory, Oracle (formerly Sun Java) Directory Server 636 SSL port: Novell eDirectory, Oracle (formerly Sun Java) Directory Server 3268 Active Directory 3269 SSL port: Active Directory - Directory Agent is using incorrect credentials, or the target service is unable to authenticate the connection.
- A service is not available, because of a service restart or a machine reboot, for example.
To determine what is causing the communication problem, consult the Windows Event Viewer or websense.log file for detailed information.