I have users defined in AD but because of some overrides, I have to add those accounts in my local /etc/passwd. Precisely, I want to assign a user a different GID then it is defined in AD.

I want to login with local user ( from /etc/passwd ) and with the use of the password from AD. When there is only local user defined and no password in /etc/shadow it doesn't work.

When I define the password locally with passwd username and it gets stored to /etc/shadow i can log in. If I try and remove the local user from /etc/passwd then I can login but without those overrides which I want to have.

I have tried adjusting the nsswitch.conf order and pam common-auth ( plus as suggested here) but nothing worked.

Has anyone any idea how to achieve this? LOCAL USER with AD PASSWORD Distro: Ubuntu

  • not directly related, you can add to AD user a secondary group by editing /etc/group
    – Archemar
    Jul 25, 2022 at 12:12

1 Answer 1


Found out the solution!

One need to create the /etc/shadow entry with passwd user and then later manually change the password hash to *

If the password field contains some string that is not a valid result of crypt(3), for instance ! or *, the user will
       not be able to use a unix password to log in (but the user may log in the system by other means).





Important part here is the user may log in the system by other means - so I tried it and it works!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.