search

j3155426 / hashing-password-filter

Automatically exported from code.google.com/p/hashing-password-filter
0 stars 0 forks source link

Multiple Domain Controllers #7

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
Windows Server 2003 r2 32 bit
Multiple Domain Controllers
hashing-password-filter installed on all DCs

O.K.  I've installed it on one domain controller for testing.
I'm using our AD adminstrator account only for testing purposes to make sure it 
is working.

The HashingPasswordFilter.log is showing
[2010/06/09 16:20:54:674]:Error during quering sAMAccountName=user.name: No 
Such Object
[2010/06/09 16:20:54:674]:Change failed for user "user.name"

Any suggestions?

Original issue reported on code.google.com by timblo...@gmail.com on 11 Jun 2010 at 12:03

GoogleCodeExporter commented 8 years ago 
Another odd item is that the system is now catching machine sAMAccountNames as 
well.  Is that expected?

Original comment by timblo...@gmail.com on 11 Jun 2010 at 5:12

GoogleCodeExporter commented 8 years ago 
We are investigating on multiple AD controllers.
As regards Comment#1: this should simply create a dirtier log, without 
affecting the system functionality...

Original comment by giorgio....@gmail.com on 23 Jun 2010 at 8:19

GoogleCodeExporter commented 8 years ago 
Issue 8 has been merged into this issue.

Original comment by giorgio....@gmail.com on 23 Jun 2010 at 8:20

GoogleCodeExporter commented 8 years ago

Original comment by giorgio....@gmail.com on 23 Jun 2010 at 8:20

GoogleCodeExporter commented 8 years ago 
[deleted comment]
GoogleCodeExporter commented 8 years ago 
I belive I have it working now.

It seems my problem was with invalid syntax in the .ini file.

I included notatition in my .ini file template to explane the use of double 
quotes to surround the ldap syntax.

The updated template is below.  That info would be good to know for anyone else 
attempting to use this slick utility.

[Main]
;name of you google apps
appsDomain=googleappsdomainname
;name and password of an administrator account of google apps
appsAdmin=username@googleappsdomainname
appsPasswd=password
;DN and password of an AD user that can write the “hashedPassword” field 
must be encapsulated by double quotes.
ldapAdminBindDn="CN=administrator,CN=OrganizationalUnit,DC=Domain,DC=Domain"
ldapAdminPasswd=password
;LDAP query to find your AD users field must be encapsulated by double quotes
ldapSearchBaseDn="OU=OrginizationalUnit,DC=Domain,DC=Domain"
;path of sync application executable (GoogleHashUpdater.exe)
processPath=C:\Program Files\Google\PWSync\GoogleHashUpdater.exe
;name and password of a local account to use to run the sync application
processUser=administrator
processPasswd=password
;settings for the proxy to use to connect to google apps
;leave blank if not needed
proxyAddress=
proxyUser=
proxyPassword=

Original comment by timblo...@gmail.com on 14 Jul 2010 at 6:43

GoogleCodeExporter commented 8 years ago 
timblough,

Are you saying you got it working on multiple domain windows 2k3 x64 
controllers? I have been waiting on implementing this utility until I could 
verify that it worked.

Original comment by carrickh...@gmail.com on 14 Jul 2010 at 6:53

GoogleCodeExporter commented 8 years ago 
I've just rebooted the other domain controllers and tested.  It all works as 
intended.  Even the part that updates google apps with the new passwords.  I 
just had  five of my students reset their passwords and they were able to log 
into Google Apps immediately following the change.

I connected ADUC to the other domain controllers and reset passwords and test 
accounds and they worked as well.

Original comment by timblo...@gmail.com on 14 Jul 2010 at 7:21

GoogleCodeExporter commented 8 years ago 
timblough,

I also work at a university. Is there any way you could pm your email address 
as reference if I encounter any issues?

Original comment by carrickh...@gmail.com on 14 Jul 2010 at 7:45

GoogleCodeExporter commented 8 years ago 
I should clarify that I am running 32 bit Windows. Not 64bit.

Original comment by timblo...@gmail.com on 15 Jul 2010 at 5:07

GoogleCodeExporter commented 8 years ago 
It looks like timblough solved the issue...

we don't have a Wiki yet, but if anyone volunteers for such a burden just 
contact us :-)

Original comment by giorgio....@gmail.com on 21 Jul 2010 at 12:40