similar to: azure AD Connect | passwords not syncing

That is a major bummer. :-( Would it work any better, if I promoted our windows 2012 server to a domain controller? Or would that have all kinds of other side-effects..? (we're currently running three dc's, all samba) One side-effect I can think of: GPO's, in a mixed samba/windows DC...? Any ideas what the requirements on the samba side would be, for samba to be able to

On 14/11/2016 0:43, Andrew Bartlett via samba wrote: > On Fri, 2016-11-11 at 11:42 +0100, mj via samba wrote: >> Hi, >> >> We setup the microsoft azure AD Connect on a windows 2012 server, to >> start using (testing) office 365 in the future. We're running a >> samba >> 4.4.4 AD. >> >> This all worked, in the portal.office.com admin section we

Microsoft says: "We synchronize the password hashes" Does a samba DC have similar password hashes as a (real) windows DC? Can we somehow allow the AD Connect to access that hash? It would be SO disappointing if we really need all kinds of extra tools to make this work. :-( And Simon, would you be willing to share a bit more on your https://github.com/Azure/azure-sdk-for-python

Hi I tried it but it does not work. I then use: https://github.com/Azure/azure-sdk-for-python This allows to manage my windows azure accounts in a python script. I then create a script that sends the user's password when it changes. It is a system similar to that of "G Suite Password Sync" I use the "Check password script" option in samba. (Valid in the branch 4.5 of

On Fri, 2016-11-11 at 11:42 +0100, mj via samba wrote: > Hi, > > We setup the microsoft azure AD Connect on a windows 2012 server, to  > start using (testing) office 365 in the future. We're running a > samba  > 4.4.4 AD. > > This all worked, in the portal.office.com admin section we can see > that: > > > > > Company Name  COMPANY > > Domains

For my script : https://github.com/sfonteneau/script_modify_password_googleapps_and_office365 Azure AD: https://github.com/sfonteneau/script_modify_password_googleapps_and_office365/blob/master/script/office/officepassword.py Another idea: AD refuses to change a password on a clear connection. It may be the same for the consultation of the hash? Have you set up lts or ldaps with ad ? The

just small update: - idfix tool (Directory Synchronization Error Remediation Tool / https://github.com/microsoft/idfix) shows just small issues like empty/missing displayName attrib in some of objects which I have corrected and no more issues present at all. - no errors from AAD connect event viewer: final log message is "Scheduler::SchedulerThreadMain : Completed configured scheduler

Hi all, An update. On 10/26/20 10:24 PM, Andrew Bartlett wrote: > The fact that there is a viable workaround (pass-though authentication) > also seems to be making this harder to fix - because it remains an > annoyance, not a deal-breaker. Today I tried again with these ingredients: - fresh azure tenant - fresh installed AD (samba 4.12.8 sernet) - an azure "custom domain

> Le 9 juil. 2020 ? 19:26, Bernhard Dick via samba <samba at lists.samba.org> a ?crit : > > ?Hi, > >> Am 02.07.2020 um 17:23 schrieb Martin Hauptmann via samba: >> Sorry if I didn't find the right manual. >> I would like to set up a new Domain Controller and connect it to an existing Office 365 with Exchange in a way, AD-Users of a certain group can login

Hi Michal, Seems we are doing similar things at the moment: getting samba to work with azure AD. We also see the high CPU usage on the DC that the Azure AD Connect server connected to. Between 70 - 100 percent in our case. We are not seeing any replication issues after azure AD Connect, and I have a script that automatically checks replication every few minutes. I was the one reporting the

Hi Michal, Thanks for updating, I can confirm your findings on our site. Pass-through auth works nicely here as well. However, when reading the ticket, we understand that Ralph B?hme claims that password-hashes should also work, after making the sync account MSOL_604447e... a member of "domain admins". (instead of keeping the default rights that are granted by the installer, which

Hello, I am currently trying to connect my Dovecot mail server to Microsoft's Azure-AD and use it as password and user database. I am using version 2.3.7.1. Using the Azure-AD as passdb already works. In this context I noticed that the scope implementation is not yet merged. Since I haven't found any hints for an OAuth2 userdb implementation yet, I wanted to ask if there are any plans

Hi, we use "Azure AD connect" to sync users from the samba-AD to office365. The synchronization worked fine for about 2 years. Now I get an error when I start a full import: stopped-connectivity - failed-search - timeout - Errorcode: 0x55 I'm not sure if it has happened since upgrading from 4.10.5 to 4.12.6 or if it is due to the increased amount of users. I have to do a

The AD connect sync to office365 also works with 4.10.18 i can not test with 4.11.x because on this version there is another bug requarding adding DNS records. so: 4.10.x -> the sync works 4.11.x -> i can not test 4.12.6 -> the sync fails with Errorcode: 0x55 Am Mittwoch, den 30.09.2020, 20:45 +0000 schrieb Heinz H?lzl via samba: > Hi, > > > I have downgraded a DC to

Sorry if I didn't find the right manual. I would like to set up a new Domain Controller and connect it to an existing Office 365 with Exchange in a way, AD-Users of a certain group can login and not having to login to Office365. My questions: Can I map the existing Office365-Accounts to the new Domain? Is the existing username scheme in Office 365 of lois.griffin at company.com compatible

Hi Martin, > I have been searching the whole samba wiki and the whole mailinglist in the meantime and have not found a command. > > I saw that the most helpful supporters here are even more helpful if one does use up to date samba versions. > > I do not insist on debian standard packages. > > Someone has already done that? you can install adconnect on a windows domain member,

hello all just to summarize this topic for anybody else. after some time spent with tshooting there seems is a sufficient workaround for this issue: disable "sync of password hashes" option within Azure AD connect tool. with disabling this option all three issues (CPU/Bandwidth utilization/replication logs) are gone! seems that for now the only working option for samba and Azure

Hi, We are (again) looking at syncing our samba AD to the azure AD cloud. I installed a win2016 server domain member server and set it up for syncing, including password hashes, so users can login azure/O365 using their on-prem passwords. We're using microsoft's latest tech: the new "Azure AD Connect cloud provisioning". We made sure to check "password hash sync".

Hi, Reading the microsoft troubleshooting guide, it seems that password hash sync issues can be caused by: > The Active Directory account used by Azure AD Connect to communicate > with on-premises Active Directory is not granted Replicate Directory > Changes and Replicate Directory Changes All permissions, which are > required for password synchronization. How to verify existance or

hello our AD domain is hosted by two samba AD domain controllers version 4.12.6 - replication between controllers is fine, no problems. - no schema errors. - no database errors, all fine. - no CPU utilizations - wthout noticeable bandwidth utilization Recently we have deployed Azure AD connector on dedicated windows system (system is domain member server). since this deployment we are observing