New version of the Google Apps Directory Sync tool

[ianniow]

Here is the text fm site

"Last week we started rolling out Google Apps Directory Sync 2.0, an update that features new enhancements including:

Aggressive multi-threading to dramatically improve the speed of synchronizing users

Support for OAuth, which eliminates the need to input and remember admin passwords

Support for synchronizing conference rooms and other room resources

For more information about these features, please review the updated administrator's guide. Existing Google Apps Directory Sync users should see these changes today, and new customers can download the tool on our help center. As always, we appreciate your feedback, so please leave us a comment below to let us know your thoughts."

[AngryTechnician]

Another unlisted improvement is that it now only syncs the password when it actually changes. The previous version would update the password on every user even when there had been no change. This means it no longer lists a change for every user in the log on every run, and probably accounts for some of the speed improvements too.

[reggiep]

Has anyone managed to sync their users active directory password using the tool?

I can't see what else you need to do outside the tool to enable this!

[AngryTechnician]

You have to have the password in a hashed format (either SHA1 or MD5) in your AD. Bizarrely, Google don't provide a tool that does this themselves. I use this one, but this one is also reported to work.

 

If you are particularly security conscious, you may be interested in my article on how to make sure the hashes are not readable by internal domain users: Securing your Google Apps SHA1 password hashes