Questions tagged [active-directory]
The active-directory tag has no usage guidance.
198
questions
1
vote
0answers
13 views
How to use Active Directory (domain groups) for user management in SLURM?
We have a GPU cluster (centOS 8) in our company network which runs SLURM.
Now we would like to realize the SLURM user management via our windows domain controller (active directory).
Every user which ...
-2
votes
0answers
19 views
Remove Linux Server from AD Domain
Can anyone please help with the ssh script or command to remove the Linux server from the active directory domain?
Thanks
0
votes
1answer
29 views
AD users unable to access Samba Share
I have a RHEL 7.6 server joined to AD using sssd and realm. I am able to SSH into the Linux servers as AD users, but the same users are unable to access the Samba share configured in the server. When ...
0
votes
0answers
12 views
fstab with SAMBA mountpoints and multiuser
I got a CentOS 7 server where several people can login, either via SSH or via xrdp. This works fine. Users are authenticated agains an active directory, which works fine as well.
However what I want ...
0
votes
0answers
29 views
Can't access CentOS samba file server using IP address but can using domain name in Windows Explorer
I have set up a samba file server on CentOS that is on a domain. AD users can access it through Windows Explorer using its domain name, but they cannot access it through using its IP address. When ...
0
votes
0answers
29 views
How to add LDAP user to a local group?
We are trying to add a user in Azure AD to a local group but when we do that we get this error
#-> gpasswd -a sjain68 docker
gpasswd: user 'sjain68' does not exist
It is true this user does not ...
0
votes
0answers
31 views
Winbind connecting to AD DC on port 139
I have a Samba server on Linux which is integrated with Windows AD for user authentication. Everything is working fine, but we see a lot of Firewall denies on port 139. Upon investigation, I found ...
0
votes
0answers
46 views
How can I authenticate to Linux from AD using a KeyTab files?
I was reading the following blog post https://docs.microsoft.com/en-gb/archive/blogs/pie/all-you-need-to-know-about-keytab-files
I went through the exercise and created the keytab file and used it on ...
0
votes
0answers
21 views
Use Active Directory via LDAPS for login
I have a Fedora 31 installation in a network where we also have an Active Directory. The AD is accessible via LDAPS. What I would like to do now is to use the AD to enable people to log in on the ...
1
vote
1answer
23 views
Using autojump / z in combination with pushd popd
Autojump or z let you move around in your filesystem by entering only a part of the entire path (e.g. z foo takes me to /long/long/path/to/foo).
I often want to jump to a path, do something, and get ...
0
votes
0answers
2k views
SSSD new groups not added to user, “tsig verify failure … update failed: REFUSED”?
After adding a user to a group in Active Directory and looking for that group to appear with the user on a linux server linked to AD via SSSD, noticing that the group is not added to the user (even ...
0
votes
1answer
326 views
Automate a domain join on linux
I'm new to Linux and searched the whole day on how to automate a domain join and i didn't find anything. This is the code i came up with.
realm join domain.com --user=exampleuser
echo "password"
I ...
0
votes
0answers
4 views
Squid and NTLM issues
i setup squid 3.5 to autenticate users via NTLM_AUTH in order to manage different user based ACLs.
Everything works almost fine, i said almost because i can't understand why some of the requests made ...
1
vote
0answers
73 views
Why some Active Directory domain users can't connect to the server?
I've been experiencing an issue with a RHEL 7 Server in which relatively newly created Active Directory domain users can't connect to the server.
When I try to login with users which were created ...
1
vote
0answers
212 views
Can gpasswd add non-local users to local group?
We use CentrifyDC in our organization.
I have a local group to which I want to add AD users.
# getent passwd aduser
aduser:x:12345:12345:AD User:/home/aduser:/bin/bash
As illustrated, getent ...
1
vote
1answer
266 views
SAMBA AD new files group is “domain users” not the Primary Group
We're using samba Acitve Directory (AD) Version 4.3.11-Ubuntu with Windows Active Directory Users and Computers MMC console. The file server (attached to the domain) is Ubuntu 14.04.6 LTS. In this ...
0
votes
0answers
13 views
Connecting to WIFI that requires Microsoft Windows login
This problem is a bit hard to explain but I will try my best.
I have just been assigned with a new customer and when sitting at their office, i have to use the computer they gave me in order to ...
0
votes
0answers
36 views
Linux Active Directory user group authentication
We are managing Linux machines in our company.
Today they are migrate with Active Directory but still not in production. (connecting via local authentication).
What I want to do is to set ...
0
votes
0answers
18 views
Run httpd as domain account for NFS-mounted storage
I have this VM running CentOS 8 that hosts a web app. I want the files for the web app to be hosted over NFS on a dedicated file server so I don't have to deal with virtual disk sizing (because they ...
1
vote
1answer
3k views
realm join unable to create computer account
Reading man realm I see the following:
--computer-ou=OU=xxx
The distinguished name of an organizational unit to create the computer account. The exact format of the distinguished name depends on ...
0
votes
0answers
160 views
ldap home directory permission issue on debian/ubuntu
I have joined the debian9 machine to microsoft AD when i run su - test1 it create the home directory but with below permission.
root@debiantest:/home# ls -ltr
drwxr-xr-x 2 test1 data 4096 Sep 18 22:...
5
votes
3answers
167 views
How can i list a user's groups when their names contain spaces?
Our site uses Active Directory, and many group names contain spaces. This renders the output of groups impossible to parse reliably, even by eye (are there groups "London" and "Developers", or a group ...
0
votes
0answers
158 views
Mounting a share read-only from fstab on a Windows Domain with Ubuntu Windows Linux Subsystem?
There are windows machines out on the network and I want to mount for instance \\Some-Box\c$\Program Files (x86)\calc
I went into the man page for mount.cifs and found the following:
sec=
...
1
vote
1answer
615 views
Domain Joined Linux - PAM mkhomedir creating homedirs owned as root for SSH
Currently, I have a fleet of linux computers joined to an active directory domain with SSSD for user management - primarily ubuntu, with some Raspian as well.
I'm using pam_mkhomedir.so to create ...
0
votes
0answers
1k views
Samba winbind: how to authenticate from trusted AD domain (one-way trust)?
Hello linux newbie here.
What I am trying to achieve: to be able to login to Linux machine with Active Directory credentials from trusted domain.
I have the following setup:
+...
0
votes
0answers
111 views
How to login as a domain user after using realm join domain
I have made my rhel 8 join Windows Active Directory and it is also visible from the server end. But now how do I login as a user of that domain?
0
votes
1answer
308 views
How to resolve problems connecting to Samba4 Active Directory Domain Controller on Ubuntu Micro AWS Instance
I'm trying to set up a Active Directory Domain Controller on an Ubuntu 16.04 instance on Amazon's EC2 micro services. I do everything right (following at least three different tutorials) and get all ...
0
votes
1answer
2k views
Use AD Groups Instead of Linux Groups
On our file server, we are using a bunch of Linux groups that are still in use and need to be replaced by their counterparts in AD. The groups in AD and /etc/groups have an identical name, so, (I'm ...
2
votes
0answers
285 views
Samba shares - How to restrict access to Active Directory groups
I'm working in an Active Directory domain environment and am trying to configure some Samba shares so certain directories on a SUSE UNIX server are accessible by Windows clients.
Access to each share ...
5
votes
1answer
2k views
Linux clients can't login on samba share while windows and mac can (active directory env)
Setup
server
Centos 7.6
Samba 4.8
Winbind
SSSD
Kerberos
This machine is attached to the company active directory as member server but not domain controller (I followed the RadHat documentation to ...
0
votes
0answers
195 views
Add all users in AD-Group to the local wheel group
We have limited 'su' to users that are in the wheel group and are now looking to permit certain users that are in a particular AD-Group.
The users that we want to permit to use the program 'su' are ...
0
votes
0answers
495 views
sudoer: AD domain group in sudoer file won´t work
My server is joined to AD domain, and I used SSSD and realm to do so. I can log fine to the server using SSH and my AD credentials.
I wanted to allow my user to run sudo, so I added %MY_AD_GROUP ALL=(...
0
votes
0answers
1k views
Samba: share is not accessible for AD groups
I have a CentOS server joined to an ID domain with realm(8) using sssd(8). I don´t have winbind installed, though. I can log fine with AD domain users into this CentOS server. I set up samba shares in ...
0
votes
1answer
1k views
kinit using keytab fails while using password succeeds
I'm facing a strange problem configuring KRB5 on Ubuntu 16.04 using Windows 2012 DCs as KDC. Calling kinit with an service AD account succeeds, if the password is provided to kinit's password prompt, ...
0
votes
0answers
1k views
Access Windows share via CIFS and Kerberos: “Key has been revoked”
I'm trying to mount a Windows share on a Linux host (Ubuntu 16.04) using Kerberos / Active Directory authentication. The Linux host has been joined to the AD, and I can access shares on it from the ...
1
vote
0answers
171 views
Setting default Linux Shell in RHEL7 using Active Directory
I have a client who has an install script that needs to run under /bin/tcsh as the shell on their Active Directory Domain Joined RHEL7 Virtual Machine.
This install script will be run using a service ...
1
vote
3answers
3k views
Allow AD group to access samba share
On my Linux I created a samba share like this, it was working fine.
[global]
security = user
passdb backend = tdbsam
map to guest = Bad User
guest account = mcms
[mml-t1]
path = /...
0
votes
2answers
150 views
On Solaris I get good id mapping..on linux not,why?
I use an Active Directory server for authentication,Solaris works fine following this Howto.
All works,and my user "user1" get the right UID assigned
on Windows AD,which is 10000.
On linux I follow ...
1
vote
0answers
493 views
Debian Stretch: Samba Winbind Offline Logon Not working - kerberos keytab not persistent after reboot?
This is being tried onDebian stretch referred to as 9.6 in /etc/debian_version
I'm in a Windows Domain environment with two 2012R2 controllers that have IDMU/Unix Attributes.
Other versions of stuff:...
0
votes
1answer
293 views
ReadOnly Access for members of Active Directory Group
I have a Linux host that runs on CentOS 7, joined to domain through realm.
My goal is to provide ReadOnly access to one of the AD groups say "LinuxRO-USR", the users of this group should only
be ...
1
vote
0answers
240 views
Changing permissions on CIFS files and folders from a Linux client
I'm using an Ubuntu 18.04 workstation in a corporate enviroment that is mostly windows based. The workstation has joined the Active Directory environment using pbis-open, and several shares are ...
-1
votes
1answer
642 views
Unable to change home folder setting in Samba/Winbind
I'm using a Debian 8 server at work. Recently, I used Samba and Winbind to join it to the domain. This domain is managed by Active Directory on a Windows Server machine. This all works: domain users ...
5
votes
2answers
2k views
Setting login shell in SSS configuration for users from Active Directory
I'm trying to define different login shells for different users of an AD domain, as described here. The aim is to deny members of a particular group from logging in while allowing them to do SSH ...
1
vote
1answer
650 views
Authenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password
I spent much time on this and even successfully verified (Auth)Linux-LDAP-openLDAP ok. But get blocked with AD.
I can now switch to user from root account but can not log on with password (pam_unix(...
3
votes
1answer
5k views
sssd and Active Directory user does not exist in CentOS
When I try to do a su user1@ADREALM.COM I get a "user does not exist" message.
user1@ADREALM.COM exists in Active Directory. I can do kinit user1@ADREALM.COM successfully and get a ticket. Here are ...
1
vote
1answer
2k views
What must be added to nsswitch.conf to show AD users and groups?
This is a follow-up to this question.
I have a CentOS 7 machine which has joined a domain FOOBAR. It is possible to successfully get info about users stored in the AD via
id user@FOOBAR.GLOBAL
...
5
votes
1answer
9k views
Assignment of UID and GID from Active Directory
My CentOS 7 machine has successfully joined a domain FOOBAR (as verified by realm list) and here's the information about an user coming from the AD (non-local):
[root@centos7 ~]# id jdoe@FOOBAR....
0
votes
1answer
52 views
Is it possible/practical to use a Linux server to authenticate Windows devices?
I am from a small concern and we are currently looking into getting a server purely for authentication and saving user data's. I do not want to push software to the devices or anything like that. I ...
0
votes
2answers
62 views
How do I activate time based admin login to a Linux system using windows active directory?
I have set up a solution where the login to our linux systems is regulated by microsoft active Directory and group memberships. Now i want the access time based so that the ad user will be kicked out ...
1
vote
0answers
83 views
About connecting to Active Directory from CentOS7
I've searched several videos on Youtube, articles in other Stack Exchange sites, and some blogs.. but I couldn't make this done yet..
My environment is Windows Server 2012 RC and CentOS7.
1. I ...
