search for: azur

...ll, An update. On 10/26/20 10:24 PM, Andrew Bartlett wrote: > The fact that there is a viable workaround (pass-though authentication) > also seems to be making this harder to fix - because it remains an > annoyance, not a deal-breaker. Today I tried again with these ingredients: - fresh azure tenant - fresh installed AD (samba 4.12.8 sernet) - an azure "custom domain name" for our AD realm, status "verified" - new Azure AD Connect Cloud Provisioning agent, using a "domain admins" AD account - with password-hash sync And it works. :-) No high CPU usage o...

...troller? Or would that have all kinds of other side-effects..? (we're currently running three dc's, all samba) One side-effect I can think of: GPO's, in a mixed samba/windows DC...? Any ideas what the requirements on the samba side would be, for samba to be able to accomodate those azure AD Sync password syncs? MJ On 11/11/2016 12:05 PM, Lesfourmisduweb via samba wrote: > Hi > > I tried it but it does not work. > I then use: https://github.com/Azure/azure-sdk-for-python > > This allows to manage my windows azure accounts in a python script. I > then create a...

...Bartlett via samba wrote: > On Fri, 2023-03-10 at 13:06 -0800, Ray Klassen via samba wrote: >> I'm very interested in this. Can one of the devs elaborate on what has been >> accomplished with this? Specifically, I'd like to know if the support is >> bidirectional -- can azure change passwords in samba ad? > > No, I just fixed the issue where it couldn't pull a password from Samba > to Azure AD > > Azure AD Cloud connect work out of the box (ish) > Azure AD connect needs the service account to also be made a domain > admin cool! While we'...

Hi Michal, Seems we are doing similar things at the moment: getting samba to work with azure AD. We also see the high CPU usage on the DC that the Azure AD Connect server connected to. Between 70 - 100 percent in our case. We are not seeing any replication issues after azure AD Connect, and I have a script that automatically checks replication every few minutes. I was the one reporti...

.../missing displayName attrib in some of objects which I have corrected and no more issues present at all. - no errors from AAD connect event viewer: final log message is "Scheduler::SchedulerThreadMain : Completed configured scheduler operations." (no errors before) - aad connect info: Azure AD Tenant - Settings PasswordHashSync: True ForcePasswordChangeOnLogOn: False UserWriteback: False DeviceWriteback: False UnifiedGroupWriteback: False Azure AD Connect - Global Settings Microsoft.AADFilter.ApplicationList: Microsoft.AADFilter.AttributeExclusionList: Microsoft.Configuration.Imp...

On Fri, 2023-03-10 at 13:06 -0800, Ray Klassen via samba wrote: > I'm very interested in this. Can one of the devs elaborate on what has been > accomplished with this? Specifically, I'd like to know if the support is > bidirectional -- can azure change passwords in samba ad? No, I just fixed the issue where it couldn't pull a password from Samba to Azure AD Azure AD Cloud connect work out of the box (ish) Azure AD connect needs the service account to also be made a domain admin Andrew, -- Andrew Bartlett (he/him) https://samba.or...

hello our AD domain is hosted by two samba AD domain controllers version 4.12.6 - replication between controllers is fine, no problems. - no schema errors. - no database errors, all fine. - no CPU utilizations - wthout noticeable bandwidth utilization Recently we have deployed Azure AD connector on dedicated windows system (system is domain member server). since this deployment we are observing following issues on DCs: - CPU utilization issue (one CPU core fully utilized) - high BW utilization - replication issue messages: [2020/10/21 17:41:55.043563,? 0] ../../source4/rpc...

Hi, We setup the microsoft azure AD Connect on a windows 2012 server, to start using (testing) office 365 in the future. We're running a samba 4.4.4 AD. This all worked, in the portal.office.com admin section we can see that: > Company Name COMPANY > Domains verified 2 > Domains not verified 1 > Directo...

hello all just to summarize this topic for anybody else. after some time spent with tshooting there seems is a sufficient workaround for this issue: disable "sync of password hashes" option within Azure AD connect tool. with disabling this option all three issues (CPU/Bandwidth utilization/replication logs) are gone! seems that for now the only working option for samba and Azure connect tool is to: - use pass-through authentication - deploy at least one authentication agent (agent is installed...

I am trying to track down what happened with the ?kernel-azure? packages that were created by the Virt SIG? I see the last release was August 2020. I also can?t seem to find the sources in the Virt repo (http://mirror.centos.org/centos/7/virt/x86_64/azure/Packages/k/), nor in the CentOS git repo (https://git.centos.org/group/sig-virt). I?m assuming the statu...

...a samba DC have similar password hashes as a (real) windows DC? Can we somehow allow the AD Connect to access that hash? It would be SO disappointing if we really need all kinds of extra tools to make this work. :-( And Simon, would you be willing to share a bit more on your https://github.com/Azure/azure-sdk-for-python setup? MJ On 11/11/2016 01:13 PM, mj via samba wrote: > That is a major bummer. :-( > > Would it work any better, if I promoted our windows 2012 server to a > domain controller? > > Or would that have all kinds of other side-effects..? (we're currently...

Hi, We are (again) looking at syncing our samba AD to the azure AD cloud. I installed a win2016 server domain member server and set it up for syncing, including password hashes, so users can login azure/O365 using their on-prem passwords. We're using microsoft's latest tech: the new "Azure AD Connect cloud provisioning". We made sure to...

...sync is done every 30 minutes without errors. but this is definitely not correct behaviour regards to CPU and BW utilization... regards michal On 10/21/2020 9:16 PM, mj via samba wrote: > Hi Michal, > > Seems we are doing similar things at the moment: getting samba to work > with azure AD. > > We also see the high CPU usage on the DC that the Azure AD Connect > server connected to. Between 70 - 100 percent in our case. > > We are not seeing any replication issues after azure AD Connect, and I > have a script that automatically checks replication every few min...

...lished on CRAN! This package?enables logging in 'R' by extending the functionality of 'logger' package. There is an option to add additional custom meta-data while logging, which can sometimes be helpful.?Logging messages are displayed on console and optionally they are sent to 'Azure Log Analytics' workspace in real-time. The package comes with a vignette, How to use azlogr, that (hopefully) provides a good introduction to using the functions for easy logging. Example usage below: # Azure Log Analytics workspace id and shared key are fetched # from environment variables. S...

...lished on CRAN! This package?enables logging in 'R' by extending the functionality of 'logger' package. There is an option to add additional custom meta-data while logging, which can sometimes be helpful.?Logging messages are displayed on console and optionally they are sent to 'Azure Log Analytics' workspace in real-time. The package comes with a vignette, How to use azlogr, that (hopefully) provides a good introduction to using the functions for easy logging. Example usage below: # Azure Log Analytics workspace id and shared key are fetched # from environment variables. S...

On 14/11/2016 0:43, Andrew Bartlett via samba wrote: > On Fri, 2016-11-11 at 11:42 +0100, mj via samba wrote: >> Hi, >> >> We setup the microsoft azure AD Connect on a windows 2012 server, to >> start using (testing) office 365 in the future. We're running a >> samba >> 4.4.4 AD. >> >> This all worked, in the portal.office.com admin section we can see >> that: >> >>> Company Name COMPANY &gt...

Hi everyone, I like to connect azure ad to my samba4 installation via AD Azure Sync (with password passthrough authentication). Passthrough authentication and User synchronizations working with a Windows 2016 domain member server without any harm. But group membership synchronizations fails always because AD Azure Sync cannot parse...

...20 10:24 PM, Andrew Bartlett wrote: >> The fact that there is a viable workaround (pass-though authentication) >> also seems to be making this harder to fix - because it remains an >> annoyance, not a deal-breaker. > > Today I tried again with these ingredients: > - fresh azure tenant > - fresh installed AD (samba 4.12.8 sernet) > - an azure "custom domain name" for our AD realm, status "verified" > - new Azure AD Connect Cloud Provisioning agent, using a "domain > admins" AD account > - with password-hash sync > > And...

We joined one MS Windows 2012 R2 server to our Samba DC fleet and pointed the Azure AD sync tool to that new Windows AD server and Azure password sync is working well now. I don?t have any experience with distribution groups. Good Luck! > On May 4, 2020, at 10:21 AM, Marcio Merlone via samba <samba at lists.samba.org> wrote: > > So, testing samba 4.12 on a Debi...

Hi, We are preparing to migrate our mail server to Azure and would like to integrate it vi AD Connect with our AD - Samba 4.7 upgrading to 4.11 (Thanks Louis!). Anyone willing to share the experience? I see on some not-so-old posts there is a problem syncing password hashes, but since samba is an ever evolving solution I would like to know how are...