Active Directory Changeover

[cknox]

Greetings,

We are currently migrating to a new Active Directory structure. Is anyone aware of any issues we might have with changing Vault from one domain to another? The usernames are currently staying the same, but in the future they will be changing as well...

Any ideas and suggestions on how to test this would be greatly appreciated.

Thanks,

[Beth]

Will the AD name be changing?

If you didn't set up the AD authentication with Vault, then the user login names won't be affected. If you did, then this will depend on what changes you are making.

The only problems I had seen were cases where people changed the entire domain name and everything they had was having problems at the same time. How much Vault is affected depends on how Vault was setup. An easy way to fix most of that is to perform an uninstall and re-install of Vault, but choosing to keep and reuse the same database.

[cknox]

I am currently working on building a test server to try some things, but basically we're changing the AD domain name. It used to be internal.com, and is going to become domain.parent.com (or just internal and domain). The AD authentication is turned on, but the usernames aren't changing just yet (I'll still be cknox, just domain\cknox instead of the previous internal\cknox)

I will report on any issues I have in the test environment, perhaps this would be a good time to upgrade from 4.1.4 to 5.0.2!

[Beth]

You could do the upgrade at the same time, but you will need to change the entry you have in the Vault admin web page for the AD integration.