Could not find the CSF-Administration-OU Organizational Unit in Active Directory

I am trying to install CSF 3.0 on a machine joined to my domain. I choose Complete install, and leave the Optional Top Level OU box unchecked. I've also tried manually creating the CSF-Administration-OU in AD, but I get the same error.

Am I supposed to have SSL Certs pre-installed before running CSF install

This is from the MSI log:

Property(C): SetCertificateList = SESSIONWEBSITECERTIFICATE,IDMWEBSITECERTIFICATE,PMWEBSITECERTIFICATE,PIWEBSITECERTIFICATE,SCWEBSITECERTIFICATE,NPWEBSITECERTIFICATE
Property(C): DEBUG3a34 = 34
Property(C): DEBUG1a34 = 34
Property(C): SetSqlComboBoxSet = 1
Property(C): ORGDESC = CSFHOSTINGORGANIZATIONDESC
Property(C): ERROR = No SSL Certificates in Certificate Store!
Property(C): ERRORTRACE =    at Microsoft.ConnectedServices.Installer.Util.IIS.GetIISCerts(Store CertStore)
   at ManagedCustomActions.SetCertificateWebSites(Session session)
Property(C): SetCertificateWebSitesSet = 1
Property(C): SelectedSetupType = Custom
Property(C): PASSWORD2 = **********
Property(C): ADMIN = CSFHOSTINGORGANIZATIONSUPERUSER
Property(C): PASSWORD = **********
Property(C): HSTORG = CSFHOSTINGORGANIZATIONID
Property(C): OU = CSFHOSTINGORGANIZATIONPARENTID
=== Logging stopped: 11/7/2006  10:31:26 ===
MSI (c) (0C:70) [10:31:26:688]: Product: Microsoft Connected Services Framework 3.0 Developer Edition -- Installation operation failed.

 

Thanks,

Mark



Answer this question

Could not find the CSF-Administration-OU Organizational Unit in Active Directory

  • TheViewMaster

    I'm not sure I understand why dev vs. production makes a difference. I'll gladly follow the steps manually, but I don't see why something so fundamental to CSF doesn't work for me. LDAP is LDAP, no
  • Zero_

    I'm still unable to install...any help would be appreciated!
  • sluggy

    I've raised to Windows Server 2003, and still experience the error. I was disassembling your installer, and noticed you may make some assumptions about domain naming. For example, you have "dc=com" in the installer code. My domain is LDAP://dc=foo,dc=bar,dc=local so any dc=com suffix will break me. Is there an manual install, or a script to do it without the MSI

    From Microsoft.ConnectedServices.Installer.Util.OS:

    [EnvironmentPermission(SecurityAction.LinkDemand, Unrestricted=true)]
    public static string GetOUADPath(string strParentOUPath, string strDomainName)
    {
       try
       {
          DirectoryEntry entry1 = new DirectoryEntry("LDAP://RootDSE");
          if (!strParentOUPath.Contains("LDAP://"))
          {
             if ((strDomainName == null) | (strDomainName.Trim() == string.Empty))
             {
                DirectoryEntry entry2 = new DirectoryEntry("LDAP://RootDSE");
                strDomainName = entry2.Properties["defaultNamingContext"][0].ToString();
             }
             else
             {
                strDomainName = "DC=" + strDomainName + ",DC=com";
             }
             entry1 = new DirectoryEntry("LDAP://" + strParentOUPath + strDomainName);
          }
          else
          {
             entry1 = new DirectoryEntry(strParentOUPath);
          }
          string text2 = entry1.Name;
          return entry1.Path;
       }
       catch (Exception)
       {
          return string.Empty;
       }
    }
    


  • Scythen

    My current domain functional level is Windows 2000 mixed. Should I raise it to Windows 2000 native or Windows Server 2003
  • MrBrilliant

    Please select Custom install instead of Complete. And select 'Create AD Structure' and 'Create AD Operators options'. If you would like to have message based security, then there is no need to have cerfificates preinstalled.

    Thanks,

    Natraj


  • imed-deborah

    Hi Mark, I guess you are installing on your own dev domain. In that case would not it be possible to have appropriate domain name. Installing manually would involves number of steps where by copying the binaries and creating database , setting up virtual directories and app pools and creating accounts and setting identittiies etc.
  • qqterry123

    Raymond,

    Yes, once I tried installing on physical hardware, instead of the virtual server environment I was using, everything worked fine. Satish walked me through the rest of the install over the phone.

    Thanks again,
    Mark

  • boston123

    Yep, did that too.
  • kefren

    I actually chose Custom, not Complete. I picked those two options and it gave the errors I reported.
  • Проничкин

    Hi Mark,

    Could you try doing a custom install, deselect all options except the first two which are related to AD OU creation. Once this is done, re-run the installer to install CSF. If you are planning to use SSL you need to have the certificate installed prior running the CSF installer. You can use message level security option and bypass certificate requirement.

    Installer will fail if AD functional level is 2000 or 2003.

    Thanks,
    Satish



  • BrianMcCashin

    Hi Mark,

    Sorry for the delay in getting back to you on this. Have been able to resolve this issue



  • Paul Burg

    Please make sure that you logged in domain admin while running installer.
  • Could not find the CSF-Administration-OU Organizational Unit in Active Directory