How to synchronize the passwords if the SMP is integrated with AD domain Server? - Ruijie Community

On SMP 2.65 and earlier versions, the function "Learn new users password during authentication" is enabled by default.

Each time when an AD domain user is authenticated, the user password is checked in the AD domain. The password will be saved locally if the password check is successful. When the communications between the SMP and the AD domain is faulty, the user password that is saved locally can be used for user authentication.

If the local password of the SMP is changed, the password in the AD domain is not affected. Upon user authentication, the password will be checked in the AD domain and saved to the SMP locally. If the password in the AD domain is changed, the new password is checked in the AD domain when it is used for authentication, and synchronized to the SMP. Given that Windows AD domain has a mechanism that can delay the expiration of the previous password, the previous password can still be used in a period of time after the AD domain password is changed.