Google Apps and sync with AD

[rama1712]

We ar movig our students to Gmail and i have a couple of issues

 

1) How do we get it to sync passwords with our AD on windows 2008 r2, I ahve seen a mixture of solutions but not a really clear step by step

 

I have installed GADS and that works great I have installed the google password sync but nothing happens even when i change password it still does not logmein

 

Is it that i have to wait a longer for sync to happen or am i missing something some people are talking about sha1filter dll but i read nothing about thaton google help.

 

I would even consinder single sign on but we CANNOT pay anything. I know my way round IIS so if it something we can do for free then i will consider that option.

 

If someone could be kind enough to give a step throu guid on getting this to work please would save me going mental.

 

Config this end Windows 2008 RC2 RM cc4.3

 

Thanks

Stuart

[CyberNerd]

I'd go for SSO.

Do you have moodle? theres an SSO module here:

git.catalyst.net.nz Git - moodle-r2.git/summary

 

Other Opensource SSO's that will work with google apps are:

SimpleSAMLphp

Shibboleth - Home

[Netman]

I think GADS and sha1filter is now old hat - Take a look at GAPS Google Apps Password Sync (GAPS) - Google Apps Help No personal experience of this though as we used to use GADS and sha1filter but then I decided to just make our users have separate passwords for AD and Google Apps - they can have them the same or different (recommended) - I leave it up to them!

[rama1712]

I have tried the GAPS but it does not work with our ad

 

I am stuck

 

Any Advice

CC4 windows 2008 r2 servers ,reverse password encryption NOT enabled.

[enjay]

GADS doesn't run automatically - we have a scheduled task set up to run it once an hour. GAPS would be preferable though, as that is live.

[rama1712]

Got GADS working and creating the users and set schdule but cannot get GAPS working

 

I do not have reverse password encryption tick in AD do i need that some forums say yes and some say no.

Is it because it is a CC$ RM AD i know htey modify it for themselves

 

THanks

Stuart

[IT_Man_Dan]

Hi Stuart,

Did you ever get GAPS working? I'm just staring to set it up, have got Directory sync working but I can't even get the page to load to grant OAuth access to Gaps in IE?!? It works on a workstation just not on 2008 R2 server, I suspect an IE setting. Did you have this issue?

 

Thanks

Dan

[enjay]

I can't even get the page to load to grant OAuth access to Gaps in IE?!?

I had that when installing GAPS a few days ago. In desperation, I selected the box which says "I don't have a password" and it took me to a Google login page, where I logged in with my admin account credentials and it then authenticated!

 

I haven't actually tried using it to sync a password yet though...

[IT_Man_Dan]

I only have the Option saying 'I can't access my account' that then takes me to the forgotten password page :-(

Before launching the IE browser there is an option saying 'Yes I have a password' but it is greyed out so I can't select it.

 

It's driving me crazy right now

[IT_Man_Dan]

I'VE CRACKED IT

 

Javascript wasn't enabled in IE settings on Server.

 

For anyone who needs to know:

Internet Options>Security>Custom Level>Scripting>Set Active Scripting to Enabled = Problems solved...

 

Thanks

Dan