Umbrella Active Directory Connector - Version 1.14

gaushar7 · ‎07-16-2024

On Monday, 16^th September 2024, Cisco Umbrella will release version 1.14.3 of the Active Directory Connector (the Windows Service component) to the final wave of production.

On Tuesday, 13^th August 2024, Cisco Umbrella will release version 1.14.3 of the Active Directory Connector (the Windows Service component) to the second and third waves of production.

On Thursday, 25^th July 2024, Cisco Umbrella will release version 1.14.3 of the Active Directory Connector (the Windows Service component) to the first wave of production.

On Thursday, 18^th July 2024, Cisco Umbrella will release version 1.14.3 of the Active Directory Connector (the Windows Service component) to the stage track.

Change Summary (Active Directory Connector 1.13.8 to 1.14.3)

Introduces Enhanced Authentication for Active Directory Connector.
Introduces support for manually-provided LDIFs as an alternate to Active Directory.
Includes branding changes that will impact service description, program name, executables, some file/ folders names and locations.

Note: According to the release data for production-1, production-2, and production-3, some assets encountered errors during updating and required troubleshooting. If you encounter any errors during updating, it is recommended to use the latest download (Version 1.14.3).

marufe · ‎10-28-2024

This update changes the expected service account name for the AD Connector from "OpenDNS_Connector" to "Cisco_Connector," which is hardcoded in our deployment script when we set up the connector. I'm sure we're not the only ones that have done so. That account name hasn't changed in quite some time. It would've been nice to have received a bit more notice that this account name was changing besides "branding changes that will impact... program name."
What does Enhanced Authentication for Active Directory Connector mean? Where is the info on what this feature is, what it does, and why it exists?
The current version of AD Connector available for me to download from Umbrella is version 1.14.4. This article only goes up to 1.14.3. No new AD Connector updates have been posted. Can we get info what changes are contained in the subversions after 1.14.0?

marufe · ‎10-30-2024

Since the 1.14 update made 'branding changes' to the various installers and scripts, the "Windows Configuration script for Domain Controller" (which is made available for download from Umbrella dashboards when configuring Active Directory integration) is no longer working with its default settings.

The script is still looking for the old 'OpenDNS_Connector' service account name:

However, the default "Windows Service" installer is now looking for the new 'Cisco_Connector' service account name:

This means the configuration script will fail unless you manually update the script to use the Cisco_Connector service account name, or run the script from command line with the --forceUserExists true parameter.

Can we get the default 'Configuration' script updated to reference the correct service account name that is expected by the Connector Service installer?

gaushar7 · ‎11-04-2024

Hi Marufe,

First and foremost Thanks for sharing the feedback. I'll work with the team and ascertain that the "Configuration Script" works as desired. I will update the community if and when the changes are made.

For the query regarding "Enhanced Authentication" for AD Connector, info can be found at: https://docs.umbrella.com/umbrella-user-guide/docs/configure-authentication-ad-connectors-and-vas

And for the clarity on latest available version for AD Connector, as an old habit I had published the release notes earlier on the support.umbrella.com last month, which was later published on the community.cisco.com (https://community.cisco.com/t5/umbrella-software-release-notes/release-of-active-directory-connector-version-1-14-4/ta-p/5212716)

Also, we will try to update the community page more promptly in future to give you a better heads-up for the upcoming changes.