The tag has no usage guidance.

learn more… | top users | synonyms (1)

1
vote
0answers
52 views

postgresql auth against samba active directory

I've recently set up a new Samba4 Active Directory to handle centralized authentication for my small office network. On this server is also a postgresql-9.5 instance, and I'm trying to have it ...
0
votes
1answer
90 views

Trouble Joining an Active Directory Domain

I'm trying to join an Ubuntu 14.04 server to a Windows 2003 R2 domain. My admin says that from the controller side, it is part of the domain. But SSSD can't seem to start and DNS update fails. I've ...
0
votes
0answers
26 views

FTP user home directory for LDAP group

My company uses LDAP server for users authentication. We are now planning to add FTP server. The complicated thing is - we need several users belonging to the one group in LDAP have same home (chroot) ...
1
vote
1answer
14 views

Generating a keytab for Active Directory user?

I am relatively new to Kerberos, we have integrated Active Directory for authentication. I.E. When we do kinit ad_user, we get a valid TGT. Now I want to run the application as a user in headless ...
2
votes
1answer
87 views

Login not chdir()ing to correct home directory (AD/realmd/sssd)

I'm forced (ugh) to join several linux machines to a domain. I'm currently using debian stable, and am joining the machines using a join script I wrote (at https://rbmj.github.io/join.sh for ...
1
vote
0answers
39 views

Mounting samba directory changes all file permissions to user who mounted it

I have a xubuntu 14.04 client, a debian 8 Samba File server and an external Active Directory service. I log in as user1 on the client authenticating against the ADS with winbind. My home directory /...
1
vote
1answer
325 views

Kerberos/Samba can't join Active Directory [DEBIAN 8]

I have an issue when I try to join my domain. I am able to create the kerberos ticket successfully. root@debian:~# kinit Administrateur@ASP.DOMAIN Password for Administrateur@ASP.DOMAIN: root@debian:...
3
votes
1answer
54 views

ACL not working on directories

For some reason when I create new file from Windows I can change the permissions just fine but when I create a folder it won't let me change the permissions, I get this error: A device attached to ...
0
votes
1answer
39 views

can't send mail to domain prefixed username

How can I send mail to a local user with a domain prefixed username? Running SUSE Linux Enterprise Server 11.3 joined to an active directory domain with Heirloom mailx version 12.5 7/5/10 Scenario: ...
4
votes
1answer
397 views

ISC DHCP with Active Directory Secure Dynamic DNS Updates

I'm attempting to replace Windows Server DHCP with ISC DHCP. In order to do so, I need to be able to facilitate updating DNS records from clients that do and do not support dynamic DNS record ...
0
votes
0answers
81 views

linux + vastool + print password by vastool

please advice how to print the password from active directory ( LDAP ) of specific user by vastool ? user=admin1 /opt/quest/bin/vastool Copyright 2014 Quest Software, Inc. ALL RIGHTS RESERVED. ...
0
votes
0answers
45 views

Samba4 AD privilege problem

I mounted NFS share to debian. Below following fstab record: //192.168.14.24/estimating /srv/samba/WDEstimating cifs credentials=/root/.oakservercredentials,iocharset=utf8,file_mode=0777,dir_mode=...
0
votes
1answer
155 views

SSSD Centos 7 AD Binding - only some users are able to login

I have been trying to nail down the process of binding a Centos 7 install to a Windows domain but am struggling. I have managed to successfully do this in the past on a couple of boxes but I am now ...
1
vote
1answer
90 views

windbind NT_STATUS_INVALID_COMPUTER_NAME

I'm tryng to join an Active Directory server with centOS. I started authconfig-tui, then I run net join -w univ-tours -S x.x.x.x -U xxxx@univ-tours. I get the following message: Error in domain ...
3
votes
0answers
140 views

Linux Authentication Flow (NSS -> PAM -> AD)

I am a new system administrator at an organization looking to understand the process flow of authentication in regards to how NSS, PAM and WINBIND work together. We've been having winbind related ...
2
votes
0answers
32 views

Active Directory UID Mapping to Specific Unix UIDs

I need a bit of help here. I'm a junior systems admin who's sort of been thrown into the deep end with everything! I really don't understand the translation of Active Directory UIDs Mapping to Unix ...
0
votes
0answers
162 views

AutoMount A Windows CIFS Share to CentOS 7 Using Active Directory In A Single SignOn Scenario

I have a CentOS 7 machine I setup which is integrated into a Windows 2k8r2 Active Directory domain using SSSD and RealmD. I am using AD Security Groups to restrict domain user access to the Cent ...
1
vote
1answer
64 views

Can a Linux server that authenticates against an Active Directory accept public/private keys for passwordless login?

I have a Linux server that authenticates users against an Active Directory. Now interactive logins require username and password and automatic login requires a keytab (Kerberos) for passwordless ...
0
votes
1answer
34 views

Clone directories [closed]

I have certain directory path like this /backup/data/cm/au and /backup/data/cm/ds. I have to create paths from /cm/au and cm/ds in tmp with same owner and group of their originals.
0
votes
0answers
44 views

How to disabled login for domain user in CentOS 6

I have all my CentOS 6 machines joined with samba and winbind to a windows domain (2008) and all users that I need to access those machines are in a certain AD group called "engineering". I also have ...
0
votes
1answer
132 views

Add AD users to sudo group not working | CentOS 6.7

Just as the title states I am on CentOS 6.7 and want to add two domain admins to the sudo group. I have tried adding both users individully and both together see below: someuser ALL=(ALL) ALL #...
0
votes
0answers
215 views

Can I have an AD domain implemented using Samba4 trust an NT4-style domain (also running Samba4)?

I have a Samba4 server that serves an NT4-style domain. I would like to keep it for the time being, because its LDAP backend is integrated with a number of other tools and switching to a different ...
0
votes
1answer
74 views

Is it possible to change how usernames are displayed on an AD bound CentOS system?

I don't even know if such a thing is even possible. I'm not referring to the bash shell customization. On an Active Directory bound CentOS 7 system, a local user account will just show as username ...
1
vote
1answer
293 views

How can I restrict SSH login on CentOS 7 to Active Directory groups? [closed]

I've successfully added CentOS 7 to AD and can login locally or SSH with domain credentials before I try restricting login. I'm using the AllowGroups flag in sshd_config and this works if I specify a ...
1
vote
1answer
183 views

sssd realm discover: Not authorized to perform this action

I am testing sssd on CentOS and am unable to progress as per the error below: [root@sssd-testing ~]# realm discover realm: Couldn't discover realms: Not authorized to perform this action [root@sssd-...
3
votes
1answer
458 views

Set default shell as bash for users not in /etc/passwd

On my company's Ubuntu 15.10 desktop system, I log in via Active Directory using some magic based upon PBIS. Thus, my user account is not listed in /etc/passwd even though I have a home directory ...
-1
votes
1answer
44 views

Linux + LDAP/ActiveDirectory: Can't create a private group for the user like “username:username”

My apologies first for not phrasing this question very well, because it's difficult to Google. (Try finding a Google answer with the terms "self user group" in it.) Normally, with PAM in Linux, when ...
1
vote
1answer
97 views

changes to domain group membership not showing for user in SLES 11 SP3

Joined server linux02 runing SUSE enterprise linux server service pack 3 to a Windows active directory domain example.com no problem. Users, like fred from the domain can login no problem via ssh ...
1
vote
2answers
1k views

Failed to join domain: failed to set machine kerberos encryption types: Insufficient access

did someone have this error when try to join CentOS 7 to Active Directory. I tried on a various ways(via cli, gui, tui) and always get same error. Failed to join domain: failed to set machine ...
0
votes
0answers
22 views

dovecot and quota notifications customization

I've enabled quotes on my mail server. Dovecot now takes quota value from AD. Everything seems to be working, but I have some questions. 1) Many users have highly over-quota mailbox now. If I make ...
0
votes
2answers
85 views

Configuring MSAD in RHEL [closed]

We are trying to configure MSAD in our LINUX VM(RHEL).So that users can login with there accounts directly to the LINUX VM(RHEL) instead of using service accounts.Can someone help me out here ? ...
0
votes
0answers
38 views

realmd vs authconfig

What is the difference in functionality between realmd and authconfig? (using fedora 22) What is the correct way to connect to an active directory realm with using Kerberos and using SSSD server?
0
votes
1answer
314 views

How does this Turnkey Linux domain-controller replace Microsoft Active Directory?

How does this VM replace Microsoft Active Directory, on a network with Windows Machines on it? Is there a specific component that is installed that replaces it? Is it Samba or Webmin? Are there any ...
2
votes
1answer
120 views

Winbind / AD - changed user account issue

So here's an odd one. We've had a user for years who happens to have a user id by local convention that matches a system account. So of course, I changed the users user ID in AD to avoid issues and ...
1
vote
0answers
240 views

realmd join AD and Cross Domain Auth

Small issue with realmd, I use realm join with a kerberos token generated before the join, it's working fine on a simple Active Directory Configuration My issue is when realm join must join a domain ...
1
vote
0answers
2k views

Adding CentOS 7 to Active Directory

I am having a hard time adding a CentOS 7 machine to my domain (Active Directory 2012 running in Windows 2008 mode). I am using realmd to join the machine to the domain. Here is what I have checked so ...
2
votes
1answer
853 views

usermod always reports user does not exist on RHEL 6.6

My RHEL 6.6 VM is running behind Centrify Active Directory. When I do sudo id 'any_existing_user' it will give back info about that user. But when I do sudo usermod -c 'Comments' '...
1
vote
1answer
123 views

How can I run unattended processes as authenticated AD/LDAP users?

I'm switching some servers over to Debian 8 and using realmd for Active Directory (LDAP/Kerberos) authentication. This has been working great and allows Domain Users to login to my server, etc. ...
0
votes
1answer
102 views

Allow only root and a certain AD domain group to access a certain server

I have configured a Linux server with PBIS-Open for AD authenticatie. I used the RequireMembershipOf command to add a allow a certain domain group to access the server. This is working great. There is ...
1
vote
0answers
170 views

How can I migrate Linux user account To Active Directory while preserving all user settings

How can I add a Linux user to an active directory account and keep all of the settings / profile from the Linux account? In other words, how can I add a specific Linux user to AD so that when I login ...
0
votes
0answers
24 views

A puppet configuration style for users

I want to set a configuration managment utility for users, like puppet but for users, I need to install one package or another or apply one manifest (in puppet) in order of the user that is logged in ...
1
vote
1answer
197 views

SOGo without Samba4 Active Directory

I'm tinkering with SOGo groupware to be run on my homeserver. I'm especially interested in the ActiveSync capability to synchronize contacts and calendar of my Android devices without the need for ...
0
votes
1answer
138 views

how to verified LDAP on Linux machine

I want to test the LDAP connectivity between my linux machine to the windows domain controler , so I installed successfully the tool- ldapsearch The Linux machine do authentication of users agaisnt ...
0
votes
1answer
1k views

What are the other alternative to test a LDAP connection on linux machine

I have Linux machine, Redhat 5.8, that gets data via LDAP. For an unclear reason, I can’t get the data via LDAP. I see that from /var/log/messages and /var/log/secure the problem is that the ...
0
votes
0answers
447 views

RSAT : Samba 4 Server not operational

Samba 4 now supports GPO and management through the Active Directory Windows console. But, when I open it after installation, I cannot access the server nor the domain. The message returned is that ...
1
vote
1answer
447 views

Kerberos Join Active Directory Failure

I try to join Active Directory and Samba 4 in Ubuntu 12.04.05. When I run host -t SRV _kerberos._udp.test.sg I get the error: Host _kerberos._udp.test.sg not found: 3(NXDOMAIN) meanwhile $# host ...
2
votes
0answers
2k views

sssd configuration with Active directory

I need help in configuring the sssd so that we can use Windows Active directory username to login to Redhat machine. I have below configuration file for sssd.conf file I get the following error in ...
2
votes
0answers
97 views

Avoid creation of .k5login file in a SFTP Chroot configuration

I've successfully set up an sftp with authentication on Active Directory. All users in a particular AD group are managed by SSH's sftp subsystem and chrooted into a common home directory, let's say /...
1
vote
0answers
74 views

Users authenticating via AD are no longer being prompted for password

Platforms: Oracle Linux 5, Oracle Linux 6 PowerbrokerOpen V7.01 What we want to happen: Users are able to login to the Linux command line using their Active Directory username and password. What'...
0
votes
1answer
1k views

FreeRadius: Authentication with active directory

I need to setup a radius server with active directory authentication, on a RHEL 6.5 server. I have been following this guide. As per the guide, I have made necessary configurations which are as ...