similar to: Azure Sync

Hi Martin, > I have been searching the whole samba wiki and the whole mailinglist in the meantime and have not found a command. > > I saw that the most helpful supporters here are even more helpful if one does use up to date samba versions. > > I do not insist on debian standard packages. > > Someone has already done that? you can install adconnect on a windows domain member,

> Le 9 juil. 2020 ? 19:26, Bernhard Dick via samba <samba at lists.samba.org> a ?crit : > > ?Hi, > >> Am 02.07.2020 um 17:23 schrieb Martin Hauptmann via samba: >> Sorry if I didn't find the right manual. >> I would like to set up a new Domain Controller and connect it to an existing Office 365 with Exchange in a way, AD-Users of a certain group can login

On 09.07.20 18:59, Bernhard Dick via samba wrote: > Hi, > > Am 02.07.2020 um 17:23 schrieb Martin Hauptmann via samba: >> Sorry if I didn't find the right manual. >> >> I would like to set up a new Domain Controller and connect it to an >> existing Office 365 with Exchange in a way, AD-Users of a certain >> group can login and not having to login to

Hi, Am 02.07.2020 um 17:23 schrieb Martin Hauptmann via samba: > Sorry if I didn't find the right manual. > > I would like to set up a new Domain Controller and connect it to an existing Office 365 with Exchange in a way, AD-Users of a certain group can login and not having to login to Office365. > > My questions: > > Can I map the existing Office365-Accounts to the

Hi, Something else that might be interesting: Azure AD Connect cloud provisioning. https://docs.microsoft.com/en-us/azure/active-directory/cloud-provisioning/what-is-cloud-provisioning It's something new, that I guess could be relevant for someone checking out Azure Sync options. MJ On 7/10/20 10:03 PM, Georges Martin via samba wrote: > > >> Le 9 juil. 2020 ? 19:26,

Can anyone direct me to a really good tutorial on Shibboleth integration with Rails, or indeed some sample code? I''ve been tearing my hair out all day on this one. Thanks RobL --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to

Hello, I have been searching the whole samba wiki and the whole mailinglist in the meantime and have not found a command. I saw that the most helpful supporters here are even more helpful if one does use up to date samba versions. I do not insist on debian standard packages. Someone has already done that? Can I map existing Azure Users to a new Samba AD? And - independently of that - what do

Hi, in my current setup, LDAP authentication + userdb works fine. I'd like to integrate Dovecot with Shibboleth. I have a custom module at the IdP (*) that inserts short-time tokens to an SQL table at user authentication, and I want Dovecot to use the token table for passdb but keep LDAP for storing the userdb (uid, quota, etc) I thought it was simple as omitting the sql user_query, but I

Hi, we use "Azure AD connect" to sync users from the samba-AD to office365. The synchronization worked fine for about 2 years. Now I get an error when I start a full import: stopped-connectivity - failed-search - timeout - Errorcode: 0x55 I'm not sure if it has happened since upgrading from 4.10.5 to 4.12.6 or if it is due to the increased amount of users. I have to do a

The AD connect sync to office365 also works with 4.10.18 i can not test with 4.11.x because on this version there is another bug requarding adding DNS records. so: 4.10.x -> the sync works 4.11.x -> i can not test 4.12.6 -> the sync fails with Errorcode: 0x55 Am Mittwoch, den 30.09.2020, 20:45 +0000 schrieb Heinz H?lzl via samba: > Hi, > > > I have downgraded a DC to

Hi, We setup the microsoft azure AD Connect on a windows 2012 server, to start using (testing) office 365 in the future. We're running a samba 4.4.4 AD. This all worked, in the portal.office.com admin section we can see that: > Company Name COMPANY > Domains verified 2 > Domains not verified 1 > Directory sync enabled true > Last directory sync last synced 3

Hi all, An update. On 10/26/20 10:24 PM, Andrew Bartlett wrote: > The fact that there is a viable workaround (pass-though authentication) > also seems to be making this harder to fix - because it remains an > annoyance, not a deal-breaker. Today I tried again with these ingredients: - fresh azure tenant - fresh installed AD (samba 4.12.8 sernet) - an azure "custom domain

That is a major bummer. :-( Would it work any better, if I promoted our windows 2012 server to a domain controller? Or would that have all kinds of other side-effects..? (we're currently running three dc's, all samba) One side-effect I can think of: GPO's, in a mixed samba/windows DC...? Any ideas what the requirements on the samba side would be, for samba to be able to

Practically speaking, most popular IAM and SSO solutions offer OIDC SAML tokens but do not offer Kerberos tickets.? OpenID Connect is a standard which itself is based on RFC6749 (OAuth2). This provides a compelling reason to support it in addition to Kerberos.? I'll also note that OIDC tokens are easy to validate without a bidirectional trust relationship between the IdP and RP. SSH

We have just published a neat little toolkit for those of you who are interested in SAML-enabling your enterprise application. SAML is a standards-based single sign-on protocol, which allows an identity provider to securely log users into an application without a password. Some of the advantages of SAML that you avoid passwords altogether and can centralize access control at your identity

Hi, I want to ask: the AD connect in 4.10.x work and sync also group members? Luk?? In 4.10.x Dne 02. 10. 20 v 15:16 Heinz H?lzl via samba napsal(a): > The AD connect sync to office365 also works with 4.10.18 > > i can not test with 4.11.x because on this version there is another bug > requarding adding DNS records. > > so: > 4.10.x -> the sync works > 4.11.x ->

On Thu, Feb 8, 2024 at 1:18?PM Chris Rapier <rapier at psc.edu> wrote: > > I know that there are some methods to use federated identities (e.g. > OAuth2) with SSH authentication but, from what I've seen, they largely > seem clunky and require users to interact with web browsers to get one > time tokens. Which is sort of acceptable for occasional logins but > doesn't

hi mj did you also put sync account MSOL_xyz a member of "domain admins"? cheers michal On 10/27/2020 9:15 PM, mj via samba wrote: > Hi all, > > An update. > > On 10/26/20 10:24 PM, Andrew Bartlett wrote: >> The fact that there is a viable workaround (pass-though authentication) >> also seems to be making this harder to fix - because it remains an >>

Hi I tried it but it does not work. I then use: https://github.com/Azure/azure-sdk-for-python This allows to manage my windows azure accounts in a python script. I then create a script that sends the user's password when it changes. It is a system similar to that of "G Suite Password Sync" I use the "Check password script" option in samba. (Valid in the branch 4.5 of

Microsoft says: "We synchronize the password hashes" Does a samba DC have similar password hashes as a (real) windows DC? Can we somehow allow the AD Connect to access that hash? It would be SO disappointing if we really need all kinds of extra tools to make this work. :-( And Simon, would you be willing to share a bit more on your https://github.com/Azure/azure-sdk-for-python