sfonteneau / azureadconnect_samba4 Goto Github PK

switch to sqlite3 for backup data, no json file

Hi,
Currently Microsoft is enforcing MFA for all users, so i wanted to know is there a way where we can connect samba4 and azure ad with MFA enabled.

Azure AD is not allowing to switch on user sync to ON from the admin console. The only way it appears is to install Azure Connect or provisioning client ona windows server and do a sync.

Is there a way to switch on the directory sync from the Azure console

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-design-concepts#using-ms-ds-consistencyguid-as-sourceanchor

After fetching the new update it throws below error:

INFO:root:{"type": "enable_ad_sync", "timestamp": "2023-08-22 13:32:31.194630", "data": {"EnableDirSync": true}}
INFO:root:{"type": "enable_password_hash_sync", "timestamp": "2023-08-22 13:32:31.886941", "data": {"PasswordHashSync": true}}
INFO:root:{"type": "error", "timestamp": "2023-08-22 13:32:33.833815", "data": "Traceback (most recent call last):\n File "/opt/sync-azure/run_sync.py", line 302, in \n run_sync(force=False)\n File "/opt/sync-azure/run_sync.py", line 133, in run_sync\n azure.generate_all_dict()\n File "/opt/sync-azure/libsync.py", line 113, in generate_all_dict\n list_groups = self.az.list_groups()\n File "/opt/sync-azure/AADInternals_python/AADInternals.py", line 573, in list_groups\n dict_cloudanchor_sourceanchor = self.get_dict_cloudanchor_sourceanchor()\n File "/opt/sync-azure/AADInternals_python/AADInternals.py", line 562, in get_dict_cloudanchor_sourceanchor\n sourceanchor = v["c:Value"]['#text']\nKeyError: '#text'\n"}
Traceback (most recent call last):
File "/opt/sync-azure/run_sync.py", line 302, in
run_sync(force=False)
File "/opt/sync-azure/run_sync.py", line 133, in run_sync
azure.generate_all_dict()
File "/opt/sync-azure/libsync.py", line 113, in generate_all_dict
list_groups = self.az.list_groups()
File "/opt/sync-azure/AADInternals_python/AADInternals.py", line 573, in list_groups
dict_cloudanchor_sourceanchor = self.get_dict_cloudanchor_sourceanchor()
File "/opt/sync-azure/AADInternals_python/AADInternals.py", line 562, in get_dict_cloudanchor_sourceanchor
sourceanchor = v["c:Value"]['#text']
KeyError: '#text'

Hi Simon,

When i am doing the dry run to synchronise the samba ad and azure ad it gives below error.

Traceback (most recent call last):
File "run_sync.py", line 209, in
run_sync(force=False)
File "run_sync.py", line 94, in run_sync
azure.generate_all_dict()
File "/opt/sync-azure/libsync.py", line 82, in generate_all_dict
list_groups = self.az.list_groups()
File "/opt/sync-azure/AADInternals_python/AADInternals.py", line 510, in list_groups
dict_cloudanchor_sourceanchor = self.get_dict_cloudanchor_sourceanchor()
File "/opt/sync-azure/AADInternals_python/AADInternals.py", line 490, in get_dict_cloudanchor_sourceanchor
for entry in self.get_syncobjects(False):
File "/opt/sync-azure/AADInternals_python/AADInternals.py", line 538, in get_syncobjects
return self.xml_to_result(response,command).get('b:ResultObjects',{}).get('b:AzureADSyncObject',[])
AttributeError: 'NoneType' object has no attribute 'get'

original issue : sfonteneau/AADInternals_python#3

https://aadinternals.com/post/devices/#azure-ad-hybrid-joined

az.set_azureadobject(SourceAnchor='VsCL7BRnb0WPfh+yGdrc+g==',usertype="Device",deviceOSType="windows",deviceTrustType="ServerAd",deviceId='VsCL7BRnb0WPfh+yGdrc+g==',displayName='testsfmachine')

https://learn.microsoft.com/en-us/azure/active-directory/devices/device-registration-how-it-works#hybrid-azure-ad-joined-in-managed-environments

https://learn.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-manual#configure-a-service-connection-point