Home / server / Questions / 489207
Accepted
Dungeon Hunter
Asked: 2013-03-20 02:28:07 +0800 CST

Developing a Password Sync Plugin for Active Directory

  • 772

Recently i came across through password sync plug-ins provided by many identity management provider vendors (Tivoli, Oracle, CA) they provide a password sync plug-in which we will install on every active directory domain controller. Then we will configure the plug-in with the identity manager servers information. Whenever there is a password is change for any user the password will be sent to the identity manager server to sync with the other target systems like (email,SAP etc).

Reading through this article http://www.enterprise-expert.com/2011/10/how-to-sync-active-directory-passwords.html i came to know there is a module we need to develop and then put it into the registry there by when password is changed it will be propagated to that module which can do anything with that password.

Is there any resource/idea can you give me to implement this module as i wanted to have this kind of functionality of getting notified with the password before it got changed.

Thanks.

active-directory

2 Answers

  1. Best Answer

    You're looking for what's known as a Password Filter. The project passwdhk is a simple example which should help get you started.

    • 4

  2. Download the Windows Platform SDK for Windows 2003 or 2008 (SDK). Install the Platform SDK and navigate to the samples directory and check the folder PasswordFilter for more samples.

    • 1