Questions tagged [active-directory]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
75 views

Ubuntu, failed to join an AD over TLS/SSL with realmd

actualy I tried to establish a connection between a Ubuntu-Host and an Active Directory, with the goal to authentification my Linux-Host over the AD. For this, I use SSSD and Realmd, but not ADSys. We ...
Alphabeit's user avatar
1 vote
1 answer
49 views

Suse VM Full disk encryption, storing keys in Azure

We currently have a solution to have our data partition encrypted with the keys stored on the system partition to allow for booting without user interaction, but not our system partition as we have no ...
Fabby's user avatar
  • 5,374
0 votes
0 answers
42 views

why does the domain name get delete during setup using a Cloudinit script?

I am using a Cloud-Init script to setup up my Ubuntu 22.04 server. but when i check the logs to join an active directory it delete the subdomain name why? i can only remote connect through IP address ...
AzReaL's user avatar
  • 1
4 votes
0 answers
239 views

SSH with Kerberos from Windows client

I have an Ubuntu 22.04 LTS machine which I've joined to my Active Directory with SSSD. Everything works great, I can login with my AD-users to the Linux-server the user gets a kerberos ticket etc. ...
PatricF's user avatar
  • 141
0 votes
1 answer
182 views

SSSD and sudo-rules in Active Directory

Note While making this post I managed to find the problem myself so I thought I might as well post in case it may help someone else later on. The problem was that I had a typo in /etc/nsswitch.conf, I ...
PatricF's user avatar
  • 141
0 votes
0 answers
14 views

Network transfer speed decreases when using samba through kerberos (active directory)

Raspberry Pi 2 running Ubuntu Server hosting an AD domain as a DC using kerberos. Network transfer speed to a share is approx 3Mb/s when it used to be 28 or 30Mb/s using samba alone rather than using ...
Oliver Ricketts's user avatar
0 votes
0 answers
38 views

Active directory server default gateway resolution issues

I am using a Raspberry Pi 2 running Ubuntu Server acting as an active directory domain controller with samba and kerberos etc as detailed in this video. I have three Windows 11 Professional clients ...
Oliver Ricketts's user avatar
0 votes
1 answer
178 views

Active directory server set up DNS resolution failure or VERY SLOW, can I route external DNS requests the traditional way, before the server existed?

I'm very new to the world of active directory, windows server etc., so I apologise if some of the questions I ask are a bit stupid, but I'll try and explain exactly what I want to do below, and my ...
Oliver Ricketts's user avatar
0 votes
0 answers
19 views

IWA authentication alternative on linux

Im having a windows server configured with an adfs, which is used as Idp with saml in keycloak for my application, then I'm using adfs Device authentication, so I can login to my apps using my session ...
Ayoub Beltarchi's user avatar
0 votes
0 answers
96 views

FREEIPA Identity Provider server: Azure Active Directory

I am trying to add AAD as the identity server provider in Freeipa and configured it as shown in the below screenshot. There isn't much available in the documentation. Can anyone help with what else ...
Muhammad Naeem Akhtar's user avatar
0 votes
0 answers
195 views

Cannot authenticating with AD user to RHEL 8 through xRDP

In order to authenticate to an existing ADFS environement connected to keycloak using DeviceAuthentication, I configured my RHEL 8 workstation and I'm able to authenticate with AD user with command ...
Ayoub Beltarchi's user avatar
0 votes
1 answer
179 views

Red Hat Directory Server and LDAP

So as the title suggests I have a Red Hat Directory Server with OpenLDAP installed. I also have Windows Active Directory (mixed network). I want to script creating new users on the Red Hat Side. Now ...
Neo Trin's user avatar
0 votes
0 answers
175 views

pam_unix error when attempting to setup rdxp with AD integration

Issue: Installed Realm, SSSD and SSH works with all users, but trying to remote desktop using xrdp fails with the following errors Aug 30 00:00:00 PC-NAME xrdp-sesman[220997]: pam_unix(xrdp-sesman:...
themantimeforgot's user avatar
0 votes
0 answers
20 views

Joining mininet hosts to Active DIrectory VM

I am trying to add mininet hosts to domain in a test environment. I have a host OS (WIn 10) with 2 VMs. One mininet VM and the other WIndows Server 2012 VM which is domain controller. I want the ...
Shoaib's user avatar
  • 1
0 votes
0 answers
31 views

Module RPCSEC_GSS skipped unmet check (ConditionPathExists=/etc/krb5.keytab)

I use Debian Kerberos is my worst nightmare. I can no longer even use windows to Active Directory hijacking. I have been using Debian on this computer for almost a year. I am not setting up a network ...
AgentDragonfly's user avatar
2 votes
1 answer
1k views

Cannot logon to Ubuntu server using trusted domain AD credentials

I've got an AD domain joined Ubuntu 22.04 server. I need to be able to logon to it using credentials from a trusted domain that is attached to the AD domain that the server is a member of. Logon is ...
Redeye's user avatar
  • 23
0 votes
1 answer
169 views

Samba AD DC - Directory entry for a shared folder

Suppose that you have: a Linux machine (A) running a Samba AD DC, a Windows machine (B), with a shared folder \\B\shared_folder. I would like to know if there is an entry in the directory for this ...
Léa Massiot's user avatar
0 votes
0 answers
852 views

How to execute a script after login with active directory for every user

My script is called configproxy.sh and use gsettings command. I'm on ubuntu 22.04. I put my script in /etc/profile.d/ and it seems to work only with local users. When I log myself with an active ...
Xetolone's user avatar
  • 101
0 votes
1 answer
1k views

In RHEL, can you associate the GID of an AD group with the GID of a local group?

I have a Windows Active Directory system and the GID of group X is 1745005454. The RHEL machines are AD joined using realm and SSSD authenticated, and when you do an id username it will show that that ...
bpartin2009's user avatar
1 vote
0 answers
563 views

Linux server - AD Login enabled - how to add AD group to local group

My RHEL servers are enabled with Active Directory authentication configured in sssd.conf I have allowed few AD groups in sssd.conf to login to the Linux server. the issue is I need to know how do I ...
judi's user avatar
  • 71
0 votes
1 answer
169 views

Active Directory & firewall-cmd

I'm using a RHEL based VM as a router and I'm trying to get AD running on the network but I'm not being successful at it. When I set up the interfaces on the LAN side to the trusted zone everything ...
DefaultVLAN's user avatar
1 vote
0 answers
882 views

Domains are not found after joining Ubuntu 22.04 to Active Directory using SSSD

Since Ubuntu 20.04 we are using SSSD and realmd to join these server to one of our Active Directory domains. This works (almost) out-of-the-box. For Ubuntu 22.04, however, we run into issues. And I am ...
Smithers91's user avatar
0 votes
1 answer
367 views

bash script for activeDirectory join; facing issues using expect to bypass password entry

Will preface here stating that this is poor practice but I have been requested anyway to store the svc-account credential within the script which will live in vRA for VM template.. not my choice, but ...
onceIHadASoul94's user avatar
1 vote
1 answer
681 views

Linux - Local account, password from AD

I have users defined in AD but because of some overrides, I have to add those accounts in my local /etc/passwd. Precisely, I want to assign a user a different GID then it is defined in AD. I want to ...
Miki's user avatar
  • 31
1 vote
0 answers
448 views

Check account status as a Samba domain member

I have a Rocky Linux 8.5 machine running as an Active Directory domain member. I've added it to the domain with net ads join command and I can run several commands to list domain objects as expected. ...
Daichi42's user avatar
4 votes
1 answer
10k views

How to troubleshoot a LDAP error 53 (WILL_NOT_PERFORM)?

I am trying to make a CentOS 7 server join an AD, but it results in an error: AD LDAP ERROR: 53 (Server is unwilling to perform): 0000216D: SvcErr: DSID-031A1241, problem 5003 (WILL_NOT_PERFORM), ...
dr_'s user avatar
  • 29.5k
1 vote
0 answers
74 views

Specific domain computer login when integrating with Windows domain

I'm trying to let a user named "linuxuser" can only login to a specific domain computer. My test environment description: Windows Server 2016 with Active Directory Service Ubuntu Server 20....
YukijiEri's user avatar
2 votes
0 answers
199 views

Is pam_krb5 affected by Active Directory kerberos changes due to CVE-2021-42287?

I use pam_krb5 to authenticate Linux users against a Microsoft Active Directory. Due to CVE-2021-42287, Microsoft is pushing out updates that will change the way kerberos works in AD. Microsoft's ...
Bryan Wright's user avatar
1 vote
0 answers
423 views

Joined linux host to AD server using realmd. Unable to change ad user passwords from the command line

Have a fairly simple setup of one AD server with various linux hosts. We attached the linux hosts to our domain by using: realm discover domain.example.com realm join domain.example.com -U user.adm ...
IT_User's user avatar
  • 362
2 votes
0 answers
292 views

Sync LDAP groups and UIDs with Active Directory

Currently, our organization has a working OpenLDAP server that we use to login to our Linux environments. However, due to the increase in Windows devices, the higher-ups have decided to migrate to an ...
Qiangong2's user avatar
  • 121
1 vote
1 answer
842 views

Linux in Active Directory: Persistent users

I was able to successfully join my Ubuntu 18.04 machine into AD. For this I'm using SSSD and Kerberos. I can ssh into in using AD domain credentials. Everything is fine except that those domain users ...
Anton  Merzliakov's user avatar
0 votes
1 answer
2k views

How can I get the current time as an LDAP timestamp in Unix?

I want to be able to generate an ActiveDirectory LDAP timestamp in Unix for some tests I need to run. Active Directory stores date/time values as the number of 100-nanosecond intervals that have ...
BennyMcBenBen's user avatar
0 votes
0 answers
32 views

p99 spikes in springboot api which communicates with MS AD

dont know if this question belongs to unix.stackechange/stackoverflow/devops.stackexchange. I open it here because i think it could be somehow unix/linux related. We have a custom java/springboot api, ...
Elytscha Smith's user avatar
2 votes
1 answer
3k views

Is it possible to have a local user with the same name as a domain user

I have a linux box set up with a local user that I've been using. If I join this computer to a domain using realm, will there be a conflict if the AD user I will be logging into has the same username ...
john doe's user avatar
  • 806
1 vote
1 answer
2k views

CentOS: Can AD id users in domain but AD users can't SSH in

I can join machines to a realm with Ubuntu no problem. So using the exact same steps for CentOS 7.7, I am able to join the domain and id users... but I can't ssh in! Steps I use only differ with ...
bluesquare's user avatar
2 votes
0 answers
2k views

SMB mount with Kerberos

I have set up a server with Fedora 33 and joined it to an Active Directory. This worked successful and users can authenticate themselves with their Active Directory user names. I can also see my Linux ...
T. Pluess's user avatar
  • 520
3 votes
1 answer
20k views

Samba file server + AD + SSSD without Winbind

Currently have a CentOS8 server AD integrated using SSSD + automatic SID->UID mapping/generation. I would like to setup some file shares to make use of AD groups, but am struggling to get it set up....
Stuart475898's user avatar
1 vote
2 answers
665 views

SUDO successful for Active Directory admin group member using wrong password

Environment: OS: FreeBSD 12.1-Release-p10 Sudo: 1.9.5p2 Samba: 4.13.1_1 We've recently migrated to an Active Directory backend for DNS, DHCP, and in-house SSO support. I have SSH logins ...
alzee's user avatar
  • 240
1 vote
0 answers
1k views

Authenticate samba users using AD

So I have an ubuntu 20.04 machine that I want to use as the storage server for my domain using samba. The server is not a DC, but it is joined to the domain as any other computer using realmd and sssd ...
DemosJarco's user avatar
1 vote
1 answer
5k views

Allowing Active Directory groups to sudo on Ubuntu 20.04

I've joined the domain and set up group login successfully, but can't get sudo to work for members of that group. %DOMAIN\\domain-group ALL=(ALL) ALL in /etc/sudoers doesn't work---users are not ...
ardelbrax's user avatar
1 vote
0 answers
826 views

How do I see which user accounts are available to systemd for launching services on system startup?

I have a systemd service that fails to launch on system startup with error code status=217/USER (see below), which means D001615 (AD user) does not exist according to this answer. However, if I ...
Shuzheng's user avatar
  • 4,283
1 vote
0 answers
336 views

How is folder redirection configured on Linux Clients?

I'm wanting to configure home directories on my Linux clients to be redirected to my samba AD-DC homes share. I tried using fstab to mount the user's home directory in /home, that creates issues for ...
Kaiden's user avatar
  • 11
0 votes
0 answers
407 views

Join MINT 20 System to Windows Server 2003 AD fails with "failed to lookup DC: Device Timeout

I've been following the instructions provided in https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member to try and get a Mint Linux 20 machine added to my Windows Server 2003 domain. At ...
tsc_chazz's user avatar
  • 203
1 vote
0 answers
1k views

FreeBSD + SSSD + Samba + Windos Server 2019 AD: Unable to set permissions or create files

I'm using: FreeBSD 12.1 release p10 amb64 Samba 4.10.17 sssd 1.11.7 I'm about to upgrade Active Directory from Windows 2012R2 to Windows 2019. In my existing setup, I have the unix attributes added ...
Steve K Jackson's user avatar
1 vote
0 answers
2k views

SUSE 15 SP2 AD Authentication: Server not found in Kerberos database

I am trying to configure configure Active Directory authentication on a SLE 15 SP2 host. The AD-domain exists of multiple DCs/AD-servers. I followed these guides: https://www.suse.com/c/the-sssd-...
Diskoteket's user avatar
1 vote
0 answers
283 views

CIFS mount locks active directory user

I am configuring a Windows Distributed File share with this fstab entry //company.local/DFSdata/Office/office_data /mnt/y cifs credentials=/home/user/.smbcredentials,file_mode=0666,dir_mode=...
ckoidl's user avatar
  • 111
0 votes
1 answer
591 views

Samba domain has multiple ips associated with it

I have been setting up a samba DC but the same machine has a couple of docker containers running and it picked up the network interfaces as active, now the domain has 5 different ips that aren't what ...
Mathias Hillmann's user avatar
1 vote
1 answer
642 views

Sync OpenLDAP - Active Directory

Today, we have an OpenLDAP that works very well. We would like to create a Domain & AD (Windows) that would be populated and synchronized by OpenLDAP. I could read some topics for reverse ...
Aldamova's user avatar
1 vote
1 answer
529 views

How to use Active Directory (domain groups) for user management in SLURM?

We have a GPU cluster (centOS 8) in our company network which runs SLURM. Now we would like to realize the SLURM user management via our windows domain controller (active directory). Every user which ...
Spenhouet's user avatar
  • 111
0 votes
1 answer
1k views

AD users unable to access Samba Share

I have a RHEL 7.6 server joined to AD using sssd and realm. I am able to SSH into the Linux servers as AD users, but the same users are unable to access the Samba share configured in the server. When ...
rohit pillai's user avatar

1
2 3 4 5