Is it possible to synchronize AD password into a ADAM Instan
 




IT Certification FAQ

 
|
Home
|
Microsoft
|
CISCO
|
CompTIA
|
Exam/Study FAQ
|
Employment FAQ
| Links  | Forums  |
Book Reviews


FAQFAQ  SearchSearch  MemberlistMemberlist  UsergroupsUsergroups  RegisterRegister  ProfileProfile  Log in to check your private messagesPrivate messages  Log inLog in

Is it possible to synchronize AD password into a ADAM Instan

 
Post new topic   Reply to topic    Forum Index -> microsoft.public.windows.server.active_directory
Author Message
bwa
Guest





PostPosted: Thu May 18, 2006 11:39 am    Post subject: Is it possible to synchronize AD password into a ADAM Instan Reply with quote

Hello. I'm concidering to use ADAM/ADAMSynch to replicate my AD users to a
application server.

But when I'm reading the Step-by-Step Guide to Deploying ADAM (September
2005) at page 28 it's stated:

ActiveDirectory to ADAM Synchronizer does not synchronize user passwords
between Active Directory and ADAM.

But when reading several post in this newsgroup it look like this is still
possible...

Is it ? or Not ?

Regards Bjørn-Willy
Back to top
Lee Flight
Guest





PostPosted: Thu May 18, 2006 1:34 pm    Post subject: Re: Is it possible to synchronize AD password into a ADAM In Reply with quote

Hi

ADAMSync does not synchronize passwords. You need a more
powerful synchronization tool like MIIS/IIFP and there you get password
sync only when the AD password is reset as you cannot mine existing
passwords out of AD.

Depending on the type of application you are building you might want
to look at:
bindProxy functionality in ADAM which can help in some,
usually legacy application cases,

granting windows/domain accounts access to ADAM data through
appropriate ACLs on ADAM data

both of these hand off the authentication to AD; this is covered in the
Step-by-Step Guide.

Lee Flight


"bwa" <bwa@discussions.microsoft.com> wrote in message
news:0D3D3BCE-9312-4EEF-B72A-5E4A9252C1A2@microsoft.com...
Quote:
Hello. I'm concidering to use ADAM/ADAMSynch to replicate my AD users to a
application server.

But when I'm reading the Step-by-Step Guide to Deploying ADAM (September
2005) at page 28 it's stated:

ActiveDirectory to ADAM Synchronizer does not synchronize user passwords
between Active Directory and ADAM.

But when reading several post in this newsgroup it look like this is still
possible...

Is it ? or Not ?

Regards Bjørn-Willy
Back to top
bwa
Guest





PostPosted: Thu May 18, 2006 3:37 pm    Post subject: Re: Is it possible to synchronize AD password into a ADAM In Reply with quote

Ok.

At he the MIIS homepage it's stated:

Identity Integration Feature Pack 1a for Microsoft Windows Server Active
Directory: The feature pack is a free download and provides identity
integration/directory synchronization, account provisioning/de-provisioning,
and password synchronization—but only between Active Directory directory
service, Active Directory Application Mode (ADAM), or Microsoft Exchange
Server 2000 or Exchange 2003 instances

Does this mean that the MIIS requiret to synchonize AD and ADAM is free of
change ?


"Lee Flight" wrote:

Quote:
Hi

ADAMSync does not synchronize passwords. You need a more
powerful synchronization tool like MIIS/IIFP and there you get password
sync only when the AD password is reset as you cannot mine existing
passwords out of AD.

Depending on the type of application you are building you might want
to look at:
bindProxy functionality in ADAM which can help in some,
usually legacy application cases,

granting windows/domain accounts access to ADAM data through
appropriate ACLs on ADAM data

both of these hand off the authentication to AD; this is covered in the
Step-by-Step Guide.

Lee Flight


"bwa" <bwa@discussions.microsoft.com> wrote in message
news:0D3D3BCE-9312-4EEF-B72A-5E4A9252C1A2@microsoft.com...
Hello. I'm concidering to use ADAM/ADAMSynch to replicate my AD users to a
application server.

But when I'm reading the Step-by-Step Guide to Deploying ADAM (September
2005) at page 28 it's stated:

ActiveDirectory to ADAM Synchronizer does not synchronize user passwords
between Active Directory and ADAM.

But when reading several post in this newsgroup it look like this is still
possible...

Is it ? or Not ?

Regards Bjørn-Willy



Back to top
Paul Williams [MVP]
Guest





PostPosted: Thu May 18, 2006 5:33 pm    Post subject: Re: Is it possible to synchronize AD password into a ADAM In Reply with quote

If your connected directories are AD and ADAM then yes, you can use the IIFP
(1a), which is free.

You still require Windows 2003 Enterprise and SQL 2000.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net
Back to top
Display posts from previous:   
Post new topic   Reply to topic    Forum Index -> microsoft.public.windows.server.active_directory All times are GMT
Page 1 of 1

 

Copyright © 2002-2006 Web-S-Sense Pty. Ltd. All rights reserved.

Powered by phpBB
Advertising | Policies/Disclaimers | Contact us | Link to us


Featured Sites: Free Antivirus and Antispyware Info | Free PC Support | MCSE Directory