[lsc-changes] [Ldap Synchronization...] page changed: documentation:2.0:howtos:activedirectory

[webmaster]

A page in your DokuWiki was added or changed. Here are the details:

Date : 2013/05/02 17:15
Browser : Mozilla/5.0 (X11; Linux i686 on x86_64; rv:20.0) Gecko/20100101 Firefox/20.0
IP-Address : 80.67.162.201
Hostname : gw-puteaux.linagora.com
Old Revision: http://lsc-project.org/wiki/documentation/2.0/howtos/activedirectory?rev=1335164592
New Revision: http://lsc-project.org/wiki/documentation/2.0/howtos/activedirectory
Edit Summary: [Approaches]
User : david.coutadeur

@@ -94,9 +94,9 @@
==== Approaches ====

There are several approaches to synchronizing passwords with Active Directory. A few we (the authors of LSC) have tried are metioned here. If you have other approaches, we'd love to hear about them.

- - Store passwords in your source repository, either in clear text or in a two-way encryption scheme (LSC includes tools to encrypt and decrypt such an algorithm), then use LSC's [[http://lsc-project.org/javadoc/latest/org/lsc/utils/directory/AD.html#getUnicodePwd(java.lang.String)|AD tool-class]] to update the password in AD. [[..:configuration:syncoptions:activedirectory|here]] an example how to do this.
+ - Store passwords in your source repository, either in clear text or in a two-way encryption scheme (LSC includes tools to encrypt and decrypt such an algorithm: see [[..:configuration:syncoptions:security|here]]), then use LSC's [[http://lsc-project.org/javadoc/latest/org/lsc/utils/directory/AD.html#getUnicodePwd(java.lang.String)|AD tool-class]] to update the password in AD. [[..:configuration:syncoptions:activedirectory|here]] an example how to do this.
- Use AD as your main password store, and configure an OpenLDAP directory server to redirect authentications there, via SASL and LDAP binds. See [[http://ltb-project.org/wiki/documentation/general/sasl_delegation|detailed documentation to set up OpenLDAP and saslauthd to bind to AD]].
- Configure Active Directory to capture password changes, by either:
- Notifying another server on user password changes, using the [[http://technet.microsoft.com/en-us/library/cc727636(WS.10).aspx|Password Synchronization]] component of Microsoft's **Services For Unix** addon.
- Capturing the passwords, using [[http://passwdhk.sourceforge.net/|PasswdHk]], a password filter DLL.