Questions tagged [active-directory]
The active-directory tag has no usage guidance.
0
votes
0answers
12 views
How to resolve problems connecting to Samba4 Active Directory Domain Controller on Ubuntu Micro AWS Instance
I'm trying to set up a Active Directory Domain Controller on an Ubuntu 16.04 instance on Amazon's EC2 micro services. I do everything right (following at least three different tutorials) and get all ...
0
votes
0answers
10 views
SetGID on folder with Active Directory users
I have a directory which staff are allowed to sftp into on an Ubuntu 18.04 server. The directory is root:www-data owned (it's a web server) and I've set chmod +t and chmod g+s so data cannot be ...
-3
votes
0answers
19 views
How to sync OpenLDAP with Active Directory? [duplicate]
I have a project where I need to sync openLDAP with Active Directory. Can anyone help me with some suggestion to sync these two? And what method should I try?
0
votes
1answer
54 views
Use AD Groups Instead of Linux Groups
On our file server, we are using a bunch of Linux groups that are still in use and need to be replaced by their counterparts in AD. The groups in AD and /etc/groups have an identical name, so, (I'm ...
0
votes
0answers
19 views
Samba shares - How to restrict access to Active Directory groups
I'm working in an Active Directory domain environment and am trying to configure some Samba shares so certain directories on a SUSE UNIX server are accessible by Windows clients.
Access to each share ...
0
votes
0answers
13 views
Sync AD domain user folders across machines connected to the same domain
I followed this tutorial and have successfully added twenty machines running Ubuntu 16.04 to my ad domain and users in the domain can now login to these machines using their ad credentials. The ...
5
votes
1answer
309 views
Linux clients can't login on samba share while windows and mac can (active directory env)
Setup
server
Centos 7.6
Samba 4.8
Winbind
SSSD
Kerberos
This machine is attached to the company active directory as member server but not domain controller (I followed the RadHat documentation to ...
0
votes
0answers
75 views
Add all users in AD-Group to the local wheel group
We have limited 'su' to users that are in the wheel group and are now looking to permit certain users that are in a particular AD-Group.
The users that we want to permit to use the program 'su' are ...
0
votes
0answers
115 views
sudoer: AD domain group in sudoer file won´t work
My server is joined to AD domain, and I used SSSD and realm to do so. I can log fine to the server using SSH and my AD credentials.
I wanted to allow my user to run sudo, so I added %MY_AD_GROUP ALL=(...
0
votes
0answers
193 views
Samba: share is not accessible for AD groups
I have a CentOS server joined to an ID domain with realm(8) using sssd(8). I don´t have winbind installed, though. I can log fine with AD domain users into this CentOS server. I set up samba shares in ...
0
votes
0answers
70 views
kinit using keytab fails while using password succeeds
I'm facing a strange problem configuring KRB5 on Ubuntu 16.04 using Windows 2012 DCs as KDC. Calling kinit with an service AD account succeeds, if the password is provided to kinit's password prompt, ...
0
votes
0answers
8 views
Register Active Directory users with system
I have connected my system to a Windows (Active Directory) Domain, and everything works for the most part.
Additionally, I have connected a Windows drive using NTFS-3G and its User Mapping feature to ...
0
votes
0answers
80 views
chroot multiple directories in linux using active directory groups
I have integrated a linux server with Active directory. I have multiple Active directory groups created sftpgroup1, sftpgroup2 and sftpgroup3. UserA is part of sftpgroup1 and sftpgroup2. I am trying ...
0
votes
0answers
338 views
Access Windows share via CIFS and Kerberos: “Key has been revoked”
I'm trying to mount a Windows share on a Linux host (Ubuntu 16.04) using Kerberos / Active Directory authentication. The Linux host has been joined to the AD, and I can access shares on it from the ...
1
vote
0answers
50 views
Setting default Linux Shell in RHEL7 using Active Directory
I have a client who has an install script that needs to run under /bin/tcsh as the shell on their Active Directory Domain Joined RHEL7 Virtual Machine.
This install script will be run using a service ...
0
votes
0answers
18 views
Should I run a boot script on nsswitch.conf? (Debian 9)
I have a Debian 9 box that's joined to a Windows AD domain.
The main domain controller runs in a VM on this Debian box alongside another physical backup DC.
As it stands the backup DC is out of ...
1
vote
0answers
97 views
Cannot access samba share using AD managed service account [closed]
I am using Samba version 4.6.16-git.124.aee309c5c183.32.1-SUSE-SLE_12-x86_64, and the server is member of a Windows AD domain.
We have a couple of jobs using shares on the Linux machine and have been ...
0
votes
0answers
184 views
Allow NTLM Authentication after inclusion in Windows Domain
In a user session outside of domain authentication, I had NTLM authentication working for web requests sending Auth headers:
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
But, now I've ...
0
votes
0answers
116 views
SAMBA 4.9 AD: Join of a new ADDC with internal DNS to a 4.2 AD with bind dns?
I've to fix this situation soon and need your advice:
Environment is now:
2 old gentoos with never patched Samba AD's of the old 4.2.x generation. The DC do use the bind service as DNS and the domain ...
1
vote
3answers
604 views
Allow AD group to access samba share
On my Linux I created a samba share like this, it was working fine.
[global]
security = user
passdb backend = tdbsam
map to guest = Bad User
guest account = mcms
[mml-t1]
path = /...
0
votes
2answers
58 views
On Solaris I get good id mapping..on linux not,why?
I use an Active Directory server for authentication,Solaris works fine following this Howto.
All works,and my user "user1" get the right UID assigned
on Windows AD,which is 10000.
On linux I follow ...
1
vote
0answers
202 views
Debian Stretch: Samba Winbind Offline Logon Not working - kerberos keytab not persistent after reboot?
This is being tried onDebian stretch referred to as 9.6 in /etc/debian_version
I'm in a Windows Domain environment with two 2012R2 controllers that have IDMU/Unix Attributes.
Other versions of stuff:...
0
votes
0answers
271 views
How to generate keytab for headless AD user
I was provided a headless Active Directory user account with a randomly generated password we need to use to access some network resources. Since this headless account will need to be run from an ...
0
votes
1answer
100 views
ReadOnly Access for members of Active Directory Group
I have a Linux host that runs on CentOS 7, joined to domain through realm.
My goal is to provide ReadOnly access to one of the AD groups say "LinuxRO-USR", the users of this group should only
be ...
1
vote
0answers
180 views
Changing permissions on CIFS files and folders from a Linux client
I'm using an Ubuntu 18.04 workstation in a corporate enviroment that is mostly windows based. The workstation has joined the Active Directory environment using pbis-open, and several shares are ...
-1
votes
1answer
163 views
Unable to change home folder setting in Samba/Winbind
I'm using a Debian 8 server at work. Recently, I used Samba and Winbind to join it to the domain. This domain is managed by Active Directory on a Windows Server machine. This all works: domain users ...
5
votes
2answers
814 views
Setting login shell in SSS configuration for users from Active Directory
I'm trying to define different login shells for different users of an AD domain, as described here. The aim is to deny members of a particular group from logging in while allowing them to do SSH ...
1
vote
1answer
331 views
Authenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password
Dears,
I spent much time on this and even successfully verified (Auth)Linux-LDAP-openLDAP ok. But get blocked with AD.I can now switch to user from root account but can not log on with password(...
0
votes
0answers
115 views
How to find with ldapsearch the DN of a particular Active Directory group?
How can we use ldapsearch to find the full DN of a particular Active Directory group?
I've tried to pass it the options -s sub -b "DC=mydomain,DC=com" "(dn=My Group Name)" but it doesn't find it.
...
3
votes
1answer
2k views
sssd and Active Directory user does not exist in CentOS
When I try to do a su user1@ADREALM.COM I get a "user does not exist" message.
user1@ADREALM.COM exists in Active Directory. I can do kinit user1@ADREALM.COM successfully and get a ticket. Here are ...
1
vote
1answer
699 views
What must be added to nsswitch.conf to show AD users and groups?
This is a follow-up to this question.
I have a CentOS 7 machine which has joined a domain FOOBAR. It is possible to successfully get info about users stored in the AD via
id user@FOOBAR.GLOBAL
...
4
votes
1answer
4k views
Assignment of UID and GID from Active Directory
My CentOS 7 machine has successfully joined a domain FOOBAR (as verified by realm list) and here's the information about an user coming from the AD (non-local):
[root@centos7 ~]# id jdoe@FOOBAR....
0
votes
1answer
39 views
Is it possible/practical to use a Linux server to authenticate Windows devices?
I am from a small concern and we are currently looking into getting a server purely for authentication and saving user data's. I do not want to push software to the devices or anything like that. I ...
0
votes
2answers
36 views
How do I activate time based admin login to a Linux system using windows active directory?
I have set up a solution where the login to our linux systems is regulated by microsoft active Directory and group memberships. Now i want the access time based so that the ad user will be kicked out ...
1
vote
0answers
44 views
About connecting to Active Directory from CentOS7
I've searched several videos on Youtube, articles in other Stack Exchange sites, and some blogs.. but I couldn't make this done yet..
My environment is Windows Server 2012 RC and CentOS7.
1. I ...
0
votes
1answer
208 views
About PAM authentication using sssd
there.
I succeed to join Linux environment to Windows Server domain, using realm join command. (Thanks Roaima) From this Stack ticket.
Now the next step seems to authenticate to Active Directory.
So,...
0
votes
0answers
214 views
On starting sssd
there.
At first, it says the daemon couldn't find the /etc/sssd/sssd.conf. So, I created this and, when executing sssd "systemctl start sssd.service", it shows the following errors.
Jun 25 21:00:48 ...
2
votes
1answer
2k views
Connecting to Active Directory (possibly with winbind)
I'm trying to figure out how to integrate Linux environment authentication system to Windows server 2012, and I found a way using winbind.
I've searched Google and there are several pages that ...
0
votes
1answer
685 views
Cannot login to Linux with AD account and /bin/bash
I have configured everything necessary to log in with an AD account into Linux (Kerberos v5, SSSD, Samba and NTP), but when I connect with Putty to the server, the default shell that starts is /bin/sh....
4
votes
1answer
3k views
How do I clear a user's cached Active Directory password on CentOS 7?
I built a CentOS 7 install on my company laptop and configured it to authenticate to the company AD servers like so:
Install packages:
yum install sssd realmd oddjob oddjob-mkhomedir adcli samba-...
0
votes
1answer
344 views
How nsswitch call sssd for credential?
I'm stuck with Kerberos - sssd - AD. I've tried a lot of things, with lot of googling, in LinuxMint, Ubuntu 16.04 and Debian 9. I have always the same result :
kinit username works fine
msktutil -u --...
3
votes
1answer
2k views
Mapping AD groups to Linux groups - sssd and Windows server 2016
I have a setup with RHEL 7.4 machines that connect to Active Directory (AD) running on a Windows Server 2016 Datacenter Edition. The Linux machines are in direct integration with the AD.
Since ...
2
votes
1answer
1k views
Authentication mechanism to connect to Windows AD in Linux?
My company has asked me to look into connecting our CentOS 7 instance's to our Active Directory to make it easier for user management.
I have so far looked at:
Kerberos, doing it via command line - ...
3
votes
0answers
708 views
auto groups in CentOS 7 in Active Directory domain?
I am having an issue that might be mostly cosmetic but I've gotta keep the user complaints down. :)
I have a set of servers running CentOS 7.4 and have the requirement to join the servers to an ...
1
vote
0answers
354 views
Samba Active Directory Domain Controller not working
I have installed the current samba (via apt-get) on Debian (Debian 4.9.30-2+deb9u5) and am configuring it to be an Active Directory Domain Controller (AD-DC).
I've also got it configured to use LDAP ...
0
votes
1answer
2k views
How to export a full list of users in Samba Active Directory?
I have an Active Directory running on Samba 4.6.3, on a server with Debian Jessie. On a Windows 7 PC (AD client) I installed the RSAT and from there I manage the server using an administrator account, ...
0
votes
0answers
66 views
It's necessary “demote” an old PDC?
Hello: in my work there is an Active Directory mounted in Samba 4.1.7 (Debian Wheezy), I did not know much about the topic so I started studying and recently added a secondary Domain Controller, which ...
0
votes
1answer
108 views
Only bind user can connect to Postfix server using LDAP
I have a functioning Active Directory server, but whenever I try to authenticate against the Postfix server that uses it (with saslauthd) I notice that only the bind user can connect. Whenever I try ...
1
vote
1answer
854 views
SSSD delete users
It is my first question on the forum, so please, don't be mad if I miss important information about my issue.
I use Debian 8 and I joined an Active Directory domain (Windows server 2012) with SSSD ...
0
votes
1answer
262 views
Univention - Samba - ERROR - exceptions.TypeError - No such file or directory
I'm configuring Univention UCS 4.2
I did a normal installation, installing the following UCS applications:
Active Directory Connection
Active Directory Takeover
Active Directory-compatible Domain ...
