AD Problems while Migrating from Kerio to UCS+Kopano

[cpzengel]

Hi Guys,

we have three Kerio with AD Extension Customers to Migrate

First Problem was that not all Users are shown in UCS Managment Console

The following Article helped for the first view

Speed up LDAP-Binds on AD member mode systems

LDAP-Binds are slower than usual in AD member mode scenario The reason for this behaviour is the way the authentication is handled on the UCS system. In the default setting, the Active Directory connection in AD member mode set up does not transfer any password data from AD to the UCS directory service. Authentication request (e.g. LDAP binds) are forwarded as Kerberos requests to the Windows Active Directory Controller. That may affect the performance of the authentication as it introduces add…

After that kind of Binding all Users are shown in UCS and getend passwd, but…

Some Users are greyed out, working to login but some Fields like E-Mailaddress missing.
Other Users not greyed out. I have to set Mailaddress and Password to set manually, then working.

So this is not a productive Solution.

Please help out with any Ideas end Experiences

Cheers

Chriz

Screenshots taken from same System, same Time

[fbartels]

I was pointed to this thread since it contains the word “kopano”. The source of the problem is ihmo the ad integration. If there is no other reply to this topic, then I would suggest to open a case with the univention support.

[externa1]

this looks for me as normal behaviour - when connecting ucs to ad domain ucs can not modify ad users (only ucs parts of them) - the user you’re able to set email etc seems to be created in ucs

rg
christian