0

We are trying to configure MSAD in our LINUX VM(RHEL).So that users can login with there accounts directly to the LINUX VM(RHEL) instead of using service accounts.Can someone help me out here ?

Thanks,

closed as too broad by jasonwryan, Archemar, dr01, slm Nov 26 '15 at 17:50

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • By MSAD, do you mean an MS AD? – Rui F Ribeiro Nov 17 '15 at 18:43
  • Microsoft Active Directory – user143405 Nov 17 '15 at 19:49
  • have you tried using libnss-ldap and libpam-ldap? AD is, or can configured to be, an LDAP server. there are even, IIRC, unix extensions for AD to help support account details needed by unix (such as uid and gid). – cas Nov 26 '15 at 7:14
1

What version of rhel?

For 6.x, the easiest tools are pbis, centrify. They do all the discovery and configuration. You only need to provide and account+password that can add/remove machines in AD.

For 7.x, the best tool is realmd

Edit:

We are using pbis here for both 6.x and 7.x:

  • go here and download pbis-open-8.3.0.3287.linux.x86_64.rpm.sh (or whatever is the latest version)
  • extract the rpm files (the files will go to pbis-open-8.3.0.3287.linux.x86_64.rpm/packages/):

    bash ./pbis-open-8.3.0.3287.linux.x86_64.rpm.sh --noexec
    
  • install pbis-open and pbis-open-upgrade rpms from above dir

  • start the service:

    service lwsmd start
    
  • add machine to ad:

    /opt/pbis/bin/domainjoin-cli join domain.com AD_user AD_pass
    
  • If you want to remove machine from ad:

    /opt/pbis/bin/domainjoin-cli leave --multiple domain.com AD_user AD_pass
    
  • Thanks cristi,We are on Red Hat Enterprise Linux Server release 6.5 (Santiago).Am very much new to this,Can you please give me the steps how to do that. – user143405 Nov 17 '15 at 18:46
  • pbis is a open source ? – user143405 Nov 17 '15 at 19:30
  • They have 2 versions: pbis open , which is open source (powerbrokeropen.org/licensing) and pbis enterprise, for which I don't know the license – cristi Nov 17 '15 at 20:17
  • Thanks Cristi for prompt response,I will try this and update you the same – user143405 Nov 17 '15 at 21:55
  • Tried Sir and below the error am getting – user143405 Nov 19 '15 at 5:17
0

I'm a fan of the native tools. This is a weak original answer but this is one of the best documents I've seen regarding your exact problem. It's somewhat laborious but well worth the read/effort.

[1]: https://access.redhat.com/sites/default/files/attachments/rhel-ad-integration-deployment-guidelines-v1.5.pdf

Not the answer you're looking for? Browse other questions tagged or ask your own question.