Problem:

Why does adinfo report "Preferred site: ". How does one correct the issue?


Cause:

The problem is reproducible by simply turning off the traffic flow on 389/udp port for ldap when the machine is being joined to the domain.

The reason why its showing for preferred site: Typically during the adjoin process when the site information is being determined but 389/udp is blocked - then Centrify cannot get information about what’s the preferred site and hence nothing gets written into /var/centrifydc/kset.site file. This theory can be validated by checking if the file exists or if its contents are empty.

If 389/udp is open for traffic then the adjoin created and updates the file with the following example contents

[root@rhel root]# cat /var/centrifydc/kset.site Default-First-Site-Name

After that adinfo just blindly reads the contents from the file /var/centrifydc/kset.site and displays for the “Preferred site:”

Resolution:

Either open the port 389/udp on the domain controllers. OR Manually do the following steps:

1. Create a file /var/centrifydc/kset.site

2. echo -n Default-First-Site-Name > /var/centrifydc/kset.site

3. And make sure file has the following permissions on it:

-rw-r--r-- 1 root root 23 Dec 18 11:56 kset.site

But doing the second option .. you might still see some delay when you execute adinfo.