Anonymous_User Absent Member.
Absent Member.
1137 views

AD Driver and Password Sync Filter upgrade


Hi,

I have upgraded the AD driver to the latest patch from 4.0.0.0 to
4.0.1.0, It was successfull. And i have upgraded the Paswword Sync
filter in the remote loader server.

I have upgraded two files regarding password syncfilter ---
PassSyncConfig.cpl, PwdFilter.dll, in \c:\windows\system32
and i have updated PwdFilter.dll in the
\c\novell\passSyncFilter\pwdfilter.dll.

After upgrading the files in these locations i asked to reboot the
server. After rebooting the server i didnt find the icon in the control
pannel.
I tried to open the passwordsyncfilter using PassSyncConfig.cpl as an
administrator. even though it was opened.

Can anyone suggest what we need to do to open the password syncfilter.


Thanks in Advance.


--
123newton
------------------------------------------------------------------------
123newton's Profile: https://forums.netiq.com/member.php?userid=10431
View this thread: https://forums.netiq.com/showthread.php?t=54821

Labels (1)
0 Likes
20 Replies
Knowledge Partner
Knowledge Partner

Re: AD Driver and Password Sync Filter upgrade


> I have upgraded two files regarding password syncfilter ---
> PassSyncConfig.cpl, PwdFilter.dll, in \c:\windows\system32

Hi Newton,
Do you still have PassSyncConfig.cpl in your c:\windows\system32?
You can execute it directly.

Alex


--
If you find this post helpful, please show your appreciation by clicking
on the star below :cool:
------------------------------------------------------------------------
al_b's Profile: https://forums.netiq.com/member.php?userid=209
View this thread: https://forums.netiq.com/showthread.php?t=54821

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: AD Driver and Password Sync Filter upgrade


Hi,
I have PassSyncConfig.cpl in the location c:\windows\system32
when i try to execute i didnt see anything. even i try to execute as a
administrator.

New.


--
123newton
------------------------------------------------------------------------
123newton's Profile: https://forums.netiq.com/member.php?userid=10431
View this thread: https://forums.netiq.com/showthread.php?t=54821

0 Likes
Knowledge Partner
Knowledge Partner

Re: AD Driver and Password Sync Filter upgrade

Are you on the system itself, or are you accessing it via RDP? Try
non-RDP connections in case that helps.

Otherwise, as mentioned, it should just load regardless as I do that
regularly.

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: AD Driver and Password Sync Filter upgrade


Hi ab,

Thanks for the response. I dont have an access for the system. i can
login for that system through RDP only.

can you clarify on thing for me. when we are upgrading the
passwordsyncfilter on the remote loader server.

what we need to update?
As i have seen in the document. if we need to update the password
synchronization we need to copy the PassSyncConfig.cpl and placed in the
c:\windows\system32.
And copy the pwFilter.dll and placed in the
drive:\Novell\IDM_PassSync\x64 or x86. And do we need to update in
drive:\windows\system32\pwFilter.dll

And if we are updating the passwordSyncfilter in DC's we have to copy
the new file and placed in th edrive:\windows\system32\pwFilter.dll.

Dont we need to update the PSEVENT.DLL?

Thanks in advance.


--
123newton
------------------------------------------------------------------------
123newton's Profile: https://forums.netiq.com/member.php?userid=10431
View this thread: https://forums.netiq.com/showthread.php?t=54821

0 Likes
Knowledge Partner
Knowledge Partner

Re: AD Driver and Password Sync Filter upgrade

On 12/08/2015 01:24 PM, 123newton wrote:
>
> Thanks for the response. I dont have an access for the system. i can
> login for that system through RDP only.
>
> can you clarify on thing for me. when we are upgrading the
> passwordsyncfilter on the remote loader server.
>
> what we need to update?


Ideally use the applet itself to do the copying of filters, and you ONLY
need the CPL file on the Remote Loader (RL) system. The two DLLs,
particularly in /windows/system32, are the only things you need for the
filter to work.

Also, if you do need to update things manually as you are doing, be very
careful because while windows may not be clever enough to give you an
error, you CANNOT overwrite pwfilter.dll while it is in use. If you try
to copy at the command line you will often not see the failure to copy,
though it definitely fails (verify by comparing checksums); this is
windows, not Linux, so you cannot just overwrite the file and expect it to
work. The way the control panel applet handles things is that it renames
the current file, copies the file out there, and then reboots the box and
deletes the old file when the system boots again. If you are not doing
something like that, you're not really patching and windows has deceived you.

> As i have seen in the document. if we need to update the password
> synchronization we need to copy the PassSyncConfig.cpl and placed in the
> c:\windows\system32.


On the one box, sure.

> And copy the pwFilter.dll and placed in the
> drive:\Novell\IDM_PassSync\x64 or x86. And do we need to update in


No, does nothing.

> drive:\windows\system32\pwFilter.dll


Yes.

> And if we are updating the passwordSyncfilter in DC's we have to copy


No reason to do this usually, since it's easiest to run this from one
place and push out to all DCs at once.

> the new file and placed in th edrive:\windows\system32\pwFilter.dll.


You did this above already.

> Dont we need to update the PSEVENT.DLL?


As long as you're copying stuff, sure. Do you really? I'm not sure I've
seen that change, but compare checksums (md5sum/sha1sum/etc.) to verify,
but better yet, just use the applet to push out the patches and reboot
domain controllers (DC).

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
Knowledge Partner
Knowledge Partner

Re: AD Driver and Password Sync Filter upgrade

123newton <123newton@no-mx.forums.microfocus.com> wrote:
>
> Thanks for the response. I dont have an access for the system. i can

login for that system through RDP only.
>


I strongly doubt that RDP is an issue here. (It can be an issue with other
parts of eDirectory on Windows.)

Have you checked if the updated files you copied are "blocked/tagged as
unsafe". That can often prevent correct launch.

You can use powershell to unblock all files in a directory.

> can you clarify on thing for me. when we are upgrading the

passwordsyncfilter on the remote loader server.
>
> what we need to update?
> As i have seen in the document. if we need to update the password

synchronization we need to copy the PassSyncConfig.cpl and placed in the
c:\windows\system32.

Yes this is correct.

> And copy the pwFilter.dll and placed in the

drive:\Novell\IDM_PassSync\x64 or x86.

Yes this is correct.

> And do we need to update in

drive:\windows\system32\pwFilter.dll
>


Yes, plus the NLS directory

> And if we are updating the passwordSyncfilter in DC's we have to copy

the new file and placed in th edrive:\windows\system32\pwFilter.dll.
>


Yes, you can do this via the control panel or directly on each DC

I prefer to use the INF script that Lothar wrote, this is linked as a cool
solution

https://www.netiq.com/communities/cool-solutions/cool_tools/idm-35-pwfilterdll-updater-inf/

> Dont we need to update the PSEVENT.DLL?
>


That has not been updated in any patch I have worked with.



--
If you find this post helpful and are logged into the web interface, show
your appreciation and click on the star below...
Alex McHugh - Knowledge Partner - Stavanger, Norway
Who are the Knowledge Partners
If you appreciate my comments, please click the Like button.
If I have resolved your issue, please click the Accept as Solution button.
0 Likes
6423241 Super Contributor.
Super Contributor.

Re: AD Driver and Password Sync Filter upgrade

Was there a resolution to this issue?  I'm having the same problem with PassSyncConfig.cpl.  It's not visible in Control Panel, and when I try to launch it directly nothing happens.

Platform: Windows Server 2016 Standard

Remote loader version: 4.6.4

PWsync version: 3.1.0.0 (20181120)

 

Thanks

 

 

 

 

 

 

0 Likes
Knowledge Partner
Knowledge Partner

Re: AD Driver and Password Sync Filter upgrade

What terminal session you use, when you connected to your server via RDP?
To ensure you are on the console (Session ID=0) of the server, please run the command "query session" from a Command Prompt.
0 Likes
6423241 Super Contributor.
Super Contributor.

Re: AD Driver and Password Sync Filter upgrade

I just logged on using VMware Console. When I run 'query session' I see:

SESSIONNAME              USERNAME        ID          STATE

console                             <my login ID>   4             Active

I tried launching PassSyncConfig.Cpl and got a popup asking if I want Windows Host Process (Rundll32) to make changes to my device.  Clicked 'Yes'.  Nothing happened.

 

 

 

0 Likes
6423241 Super Contributor.
Super Contributor.

Re: AD Driver and Password Sync Filter upgrade

I just tried this on a Windows 2016 server in a different (test) domain and got the same result.

Installed IDM Remote Loader 4.6

Applied patch 4.6.4

Installed ADDriver patch 4120

Manually copied PassSyncConfig.cpl and pwfilter.dll to Windows\System32

Still nothing when I try to run PassSyncConfig.cpl. Just for grins, I ran PassSyncTroubleshootingTool.exe. Output is attached.

 

0 Likes
Knowledge Partner
Knowledge Partner

Re: AD Driver and Password Sync Filter upgrade

Your log clearly shows that you miss registry keys:

Thu Jan 30 10:05:14 2020 : Error occurred while querying the value 'Driver Machine' in the registry key[SOFTWARE\NOVELL\PASSSYNC]. Error string is The system cannot find the file specified.
Thu Jan 30 10:05:14 2020 : Error occurred while querying the value 'Domains' in registry key[SOFTWARE\NOVELL\PASSSYNC\DATA]. Error string is The system cannot find the file specified.


Try to review information in this TID3614450
Password Sync - AD to eDirectory Components
https://support.microfocus.com/kb/doc.php?id=3614450

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.