Some AD connectors were in a state of error
The customer had not actioned the API key and AD username updates.
Step 1 - Fix the API key as per cisco's instructions
Make sure to save your secrets in a pw fault
https://www.cisco.com/c/en/us/support/docs/security/umbrella/225982-configure-and-verify-new-authentication.html
Step 2 - Confirm password for opendns_connector user, now cisco_connector
Testing pw cmd:
- runas /netonly /user:OpenDNS_Connector@domain.int notepad.exe
Testing pw powershell:
Add-Type -AssemblyName System.DirectoryServices.AccountManagement
$ctx = New-Object System.DirectoryServices.AccountManagement.PrincipalContext('Domain','domain.int')
$ctx.ValidateCredentials('OpenDNS_Connector', (Read-Host 'Password'))
Update the username in AD to Cisco_Connector
Reset the password if needed
Step 3 - Download latest connector installer and script from umbrella dashboard
Step 4 - Uninstall connector, run script, re-install connector
Uninstall old connector
Run AD script
Install connector, choose AD
Enter the Cisco_Connector password we updated above
Step 5 - Check logs and wait for cloud sync (15 min)
Check logs in
C:\Program Files (x86)\Cisco\CiscoADConnector\v1.x.x
CiscoAuditClient
2026-10-02 10:34:01.522: Bearer token request Successful
2026-10-02 10:34:01.522: GetBearerToken() Success: 200
CiscoAuditClient.error
Check for errors
Hard refresh the umbrella dashboard ctrl + F5.
If sync issues are not resolve gather logs and raise case with cisco TAC
No comments:
Post a Comment