Syncing UCS User Passwords with Google Workspace

[jakegarrison]

Hi There,

I’m working on integrating our google workspace with our UCS directory (SambaAD Side) using Google’s GCDS application. I’m syncing users, profiles, and groups just fine. However, I am struggling with figuring out how to properly get passwords for users and pass them on to google work space. I have done a fair share of google searching and see where a few people might be trying the same:

UCS 5.XX and Google Workspace

Hi, will it be possible to use UCS 5.XX with Google Workspace? I don’t find anything on the subject. Thanks José

UCS LDAP-Passwort

I’m bringing this back up because I had a conversation with someone else who referred to this. I think vargax knows all of this by now, but for anyone coming back to this topic because of searching for plaintext passwords or password hashes: UCS does not store user passwords in plaintext Base64 is not a hashing algorithm, but an encoding (one can easily decode it. Hashes are only one-way) Unsalted MD5 and SHA1 hashes are considered broken and should be treated as a security risk Regarding th…

How are others doing this? It seems that UCS 5.x does not have the “G Suite Connector” app that is in 4.x so there must be some other way to accomplish this?

From reading google’s documentation it seems that for Microsofts Version of AD they use a separate password sync application that is triggered when a passwords changes in AD. Is there a Samba AD/UCS equivalent to this?

I also see that it is suggested to use USC SAML for the google login as an alternative to changing the password. I plan on federating Apple Business Manager with Google Workspace and worry that using the saml method passwords would not be passed UCS → Google → ABM. (please let me know if I have this wrong!

Looking for any advice on how to move forward.

Thanks!