Password users in Active Directory from employee data stored in SAP HR

[Former Member]

Hi experts,

I have a report that create employee stored in SAP HR to Active Directory. All work fine, but, I want create this users with passwords; I try the attribute userpassword but It doesn´t work.

Has anybody know how create the users in Active Directory with password?

Thanks in advance,

Regards,

[Former Member]

Any idea?

[former_member192421]

Hi Victor,

The following links might helpful for you.

1. http://support.microsoft.com/default.aspx?scid=kb;EN-US;269190

2. http://support.microsoft.com/default.aspx?scid=kb;EN-US;263991

The above settings are based on Windows 2000, but I think this can be applicable to Windows 2003 too.

Regards,

Rajkumar

[Former Member]

I try the attribute unicodePwd but it does not work...

Any other attribute?

Regards,

[Former Member]

Any idea?

[former_member192421]

Hi Victor,

Check out this link once:
http://pig.made-it.com/pig-adusers.html

Regards,

Rajkumar

[Former Member]

I have not clear with this document.

Are there any attribute like givenName, sn, cn, sAMAccountName.... but with the password?

I try with userPassword, Password but it does not work.

Any other idea?

Regards,

[former_member192421]

Hi Victor,

I don't know which/how your ABAP report is creating users in Active Directory. However there is way that you can do it by customizing the report.

This can be done by calling OS commands from the report. Involve an ABAP developer for help. For example,

dsadd user "cn=Test User,cn=Users,dc=myorg,dc=com" -samid testuser -upn testuser@myorg.com -fn Test -ln User -display "Test User" -pwd P@ssw0rd -disabled no

This command is meant for Active Directory to create user "Test User" with first name as "Test" and last name as "User" display name as "Test User" password as P@ssw0rd and account created with enable.

For more help on dsadd, type dsadd /?

Screenshot:

I hope this may help you.

Regards,

Rajkumar

[Former Member]

I need to use the report rpldap_extract

Regards,

[former_member192421]

Hi Victor,

The reports neither rpldap_extract nor rsldapsync_user would fulfill your requirements, this is because, Passwords in Active Directory ain't saved in any string characters. These reports are based on string, interger, boolean characters only. Whereas the passwords are saved within AD in encrypted hash values.

So meet your requirements you have two options.

1. Customize these standard SAP reports

OR

2. Use any third party tools. Such as SAP NetWeaver® Identity Management or Quest-One Quick Connect.

Check ou this Document once

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/40bba5aa-50f7-2a10-739d-e48e40730...

Please let me know your views/comment on this.

Regards,

Rajkumar

[michael_ruth3]

Hi,

This should help you out.

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/40b0d690-0201-0010-2c86-909240752...

[Former Member]

I known these document, but not appear nothing about passwords.

Regards,