|
|
| Author |
Message |
bwa Guest
|
Posted: Thu May 18, 2006 11:39 am Post subject: Is it possible to synchronize AD password into a ADAM Instan |
|
|
Hello. I'm concidering to use ADAM/ADAMSynch to replicate my AD users to a
application server.
But when I'm reading the Step-by-Step Guide to Deploying ADAM (September
2005) at page 28 it's stated:
ActiveDirectory to ADAM Synchronizer does not synchronize user passwords
between Active Directory and ADAM.
But when reading several post in this newsgroup it look like this is still
possible...
Is it ? or Not ?
Regards Bjørn-Willy |
|
| Back to top |
|
 |
|
|
Lee Flight Guest
|
Posted: Thu May 18, 2006 1:34 pm Post subject: Re: Is it possible to synchronize AD password into a ADAM In |
|
|
Hi
ADAMSync does not synchronize passwords. You need a more
powerful synchronization tool like MIIS/IIFP and there you get password
sync only when the AD password is reset as you cannot mine existing
passwords out of AD.
Depending on the type of application you are building you might want
to look at:
bindProxy functionality in ADAM which can help in some,
usually legacy application cases,
granting windows/domain accounts access to ADAM data through
appropriate ACLs on ADAM data
both of these hand off the authentication to AD; this is covered in the
Step-by-Step Guide.
Lee Flight
"bwa" <bwa@discussions.microsoft.com> wrote in message
news:0D3D3BCE-9312-4EEF-B72A-5E4A9252C1A2@microsoft.com...
| Quote: | Hello. I'm concidering to use ADAM/ADAMSynch to replicate my AD users to a
application server.
But when I'm reading the Step-by-Step Guide to Deploying ADAM (September
2005) at page 28 it's stated:
ActiveDirectory to ADAM Synchronizer does not synchronize user passwords
between Active Directory and ADAM.
But when reading several post in this newsgroup it look like this is still
possible...
Is it ? or Not ?
Regards Bjørn-Willy
|
|
|
| Back to top |
|
 |
bwa Guest
|
Posted: Thu May 18, 2006 3:37 pm Post subject: Re: Is it possible to synchronize AD password into a ADAM In |
|
|
Ok.
At he the MIIS homepage it's stated:
Identity Integration Feature Pack 1a for Microsoft Windows Server Active
Directory: The feature pack is a free download and provides identity
integration/directory synchronization, account provisioning/de-provisioning,
and password synchronization—but only between Active Directory directory
service, Active Directory Application Mode (ADAM), or Microsoft Exchange
Server 2000 or Exchange 2003 instances
Does this mean that the MIIS requiret to synchonize AD and ADAM is free of
change ?
"Lee Flight" wrote:
| Quote: | Hi
ADAMSync does not synchronize passwords. You need a more
powerful synchronization tool like MIIS/IIFP and there you get password
sync only when the AD password is reset as you cannot mine existing
passwords out of AD.
Depending on the type of application you are building you might want
to look at:
bindProxy functionality in ADAM which can help in some,
usually legacy application cases,
granting windows/domain accounts access to ADAM data through
appropriate ACLs on ADAM data
both of these hand off the authentication to AD; this is covered in the
Step-by-Step Guide.
Lee Flight
"bwa" <bwa@discussions.microsoft.com> wrote in message
news:0D3D3BCE-9312-4EEF-B72A-5E4A9252C1A2@microsoft.com...
Hello. I'm concidering to use ADAM/ADAMSynch to replicate my AD users to a
application server.
But when I'm reading the Step-by-Step Guide to Deploying ADAM (September
2005) at page 28 it's stated:
ActiveDirectory to ADAM Synchronizer does not synchronize user passwords
between Active Directory and ADAM.
But when reading several post in this newsgroup it look like this is still
possible...
Is it ? or Not ?
Regards Bjørn-Willy
|
|
|
| Back to top |
|
 |
Paul Williams [MVP] Guest
|
Posted: Thu May 18, 2006 5:33 pm Post subject: Re: Is it possible to synchronize AD password into a ADAM In |
|
|
If your connected directories are AD and ADAM then yes, you can use the IIFP
(1a), which is free.
You still require Windows 2003 Enterprise and SQL 2000.
--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net |
|
| Back to top |
|
 |
|