Questions tagged [active-directory]
The active-directory tag has no usage guidance.
0
votes
0answers
3 views
sudo su user from Active Directory server
Is it possible to somehow sync or access Active Directory users to Linux (Ubuntu)? I am looking for a daemon service setup that will do this so that I can sudo su user an account from an AD server.
0
votes
0answers
13 views
Sync AD domain user folders across machines connected to the same domain
I followed this tutorial and have successfully added twenty machines running Ubuntu 16.04 to my ad domain and users in the domain can now login to these machines using their ad credentials. The ...
2
votes
0answers
45 views
Linux clients can't login on samba share while windows and mac can (active directory env)
Setup
server
Centos 7.6
Samba 4.8
Winbind
SSSD
Kerberos
This machine is attached to the company active directory as member server but not domain controller (I followed the RadHat documentation to ...
0
votes
0answers
25 views
Add all users in AD-Group to the local wheel group
We have limited 'su' to users that are in the wheel group and are now looking to permit certain users that are in a particular AD-Group.
The users that we want to permit to use the program 'su' are ...
0
votes
0answers
38 views
sudoer: AD domain group in sudoer file won´t work
My server is joined to AD domain, and I used SSSD and realm to do so. I can log fine to the server using SSH and my AD credentials.
I wanted to allow my user to run sudo, so I added %MY_AD_GROUP ALL=(...
0
votes
0answers
85 views
Samba: share is not accessible for AD groups
I have a CentOS server joined to an ID domain with realm(8) using sssd(8). I don´t have winbind installed, though. I can log fine with AD domain users into this CentOS server. I set up samba shares in ...
0
votes
0answers
18 views
kinit using keytab fails while using password succeeds
I'm facing a strange problem configuring KRB5 on Ubuntu 16.04 using Windows 2012 DCs as KDC. Calling kinit with an service AD account succeeds, if the password is provided to kinit's password prompt, ...
0
votes
0answers
7 views
Register Active Directory users with system
I have connected my system to a Windows (Active Directory) Domain, and everything works for the most part.
Additionally, I have connected a Windows drive using NTFS-3G and its User Mapping feature to ...
0
votes
0answers
36 views
chroot multiple directories in linux using active directory groups
I have integrated a linux server with Active directory. I have multiple Active directory groups created sftpgroup1, sftpgroup2 and sftpgroup3. UserA is part of sftpgroup1 and sftpgroup2. I am trying ...
0
votes
0answers
144 views
Access Windows share via CIFS and Kerberos: “Key has been revoked”
I'm trying to mount a Windows share on a Linux host (Ubuntu 16.04) using Kerberos / Active Directory authentication. The Linux host has been joined to the AD, and I can access shares on it from the ...
1
vote
0answers
42 views
Setting default Linux Shell in RHEL7 using Active Directory
I have a client who has an install script that needs to run under /bin/tcsh as the shell on their Active Directory Domain Joined RHEL7 Virtual Machine.
This install script will be run using a service ...
0
votes
0answers
13 views
Should I run a boot script on nsswitch.conf? (Debian 9)
I have a Debian 9 box that's joined to a Windows AD domain.
The main domain controller runs in a VM on this Debian box alongside another physical backup DC.
As it stands the backup DC is out of ...
1
vote
0answers
66 views
Cannot access samba share using AD managed service account [closed]
I am using Samba version 4.6.16-git.124.aee309c5c183.32.1-SUSE-SLE_12-x86_64, and the server is member of a Windows AD domain.
We have a couple of jobs using shares on the Linux machine and have been ...
0
votes
0answers
107 views
Allow NTLM Authentication after inclusion in Windows Domain
In a user session outside of domain authentication, I had NTLM authentication working for web requests sending Auth headers:
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
But, now I've ...
0
votes
0answers
84 views
SAMBA 4.9 AD: Join of a new ADDC with internal DNS to a 4.2 AD with bind dns?
I've to fix this situation soon and need your advice:
Environment is now:
2 old gentoos with never patched Samba AD's of the old 4.2.x generation. The DC do use the bind service as DNS and the domain ...
1
vote
3answers
253 views
Allow AD group to access samba share
On my Linux I created a samba share like this, it was working fine.
[global]
security = user
passdb backend = tdbsam
map to guest = Bad User
guest account = mcms
[mml-t1]
path = /...
0
votes
2answers
49 views
On Solaris I get good id mapping..on linux not,why?
I use an Active Directory server for authentication,Solaris works fine following this Howto.
All works,and my user "user1" get the right UID assigned
on Windows AD,which is 10000.
On linux I follow ...
1
vote
0answers
137 views
Debian Stretch: Samba Winbind Offline Logon Not working - kerberos keytab not persistent after reboot?
This is being tried onDebian stretch referred to as 9.6 in /etc/debian_version
I'm in a Windows Domain environment with two 2012R2 controllers that have IDMU/Unix Attributes.
Other versions of stuff:...
0
votes
0answers
165 views
How to generate keytab for headless AD user
I was provided a headless Active Directory user account with a randomly generated password we need to use to access some network resources. Since this headless account will need to be run from an ...
0
votes
1answer
76 views
ReadOnly Access for members of Active Directory Group
I have a Linux host that runs on CentOS 7, joined to domain through realm.
My goal is to provide ReadOnly access to one of the AD groups say "LinuxRO-USR", the users of this group should only
be ...
1
vote
0answers
158 views
Changing permissions on CIFS files and folders from a Linux client
I'm using an Ubuntu 18.04 workstation in a corporate enviroment that is mostly windows based. The workstation has joined the Active Directory environment using pbis-open, and several shares are ...
-1
votes
1answer
99 views
Unable to change home folder setting in Samba/Winbind
I'm using a Debian 8 server at work. Recently, I used Samba and Winbind to join it to the domain. This domain is managed by Active Directory on a Windows Server machine. This all works: domain users ...
5
votes
2answers
637 views
Setting login shell in SSS configuration for users from Active Directory
I'm trying to define different login shells for different users of an AD domain, as described here. The aim is to deny members of a particular group from logging in while allowing them to do SSH ...
1
vote
1answer
280 views
Authenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password
Dears,
I spent much time on this and even successfully verified (Auth)Linux-LDAP-openLDAP ok. But get blocked with AD.I can now switch to user from root account but can not log on with password(...
0
votes
0answers
103 views
How to find with ldapsearch the DN of a particular Active Directory group?
How can we use ldapsearch to find the full DN of a particular Active Directory group?
I've tried to pass it the options -s sub -b "DC=mydomain,DC=com" "(dn=My Group Name)" but it doesn't find it.
...
2
votes
1answer
1k views
sssd and Active Directory user does not exist in CentOS
When I try to do a su user1@ADREALM.COM I get a "user does not exist" message.
user1@ADREALM.COM exists in Active Directory. I can do kinit user1@ADREALM.COM successfully and get a ticket. Here are ...
1
vote
1answer
511 views
What must be added to nsswitch.conf to show AD users and groups?
This is a follow-up to this question.
I have a CentOS 7 machine which has joined a domain FOOBAR. It is possible to successfully get info about users stored in the AD via
id user@FOOBAR.GLOBAL
...
3
votes
1answer
3k views
Assignment of UID and GID from Active Directory
My CentOS 7 machine has successfully joined a domain FOOBAR (as verified by realm list) and here's the information about an user coming from the AD (non-local):
[root@centos7 ~]# id jdoe@FOOBAR....
0
votes
1answer
37 views
Is it possible/practical to use a Linux server to authenticate Windows devices?
I am from a small concern and we are currently looking into getting a server purely for authentication and saving user data's. I do not want to push software to the devices or anything like that. I ...
0
votes
2answers
35 views
How do I activate time based admin login to a Linux system using windows active directory?
I have set up a solution where the login to our linux systems is regulated by microsoft active Directory and group memberships. Now i want the access time based so that the ad user will be kicked out ...
-1
votes
0answers
31 views
ISC DHCP and Microsoft DNS [duplicate]
I have devices that pull their IP addresses from DHCP which are not on the domain. I however need the devices to provide the DHCP server with a hostname -- make a DNS entry and update it when the IP ...
1
vote
0answers
39 views
About connecting to Active Directory from CentOS7
I've searched several videos on Youtube, articles in other Stack Exchange sites, and some blogs.. but I couldn't make this done yet..
My environment is Windows Server 2012 RC and CentOS7.
1. I ...
-1
votes
0answers
54 views
How it possible to use Samba as a Fileserver with AD, but using another LDAP server for SSH-Login?
We have a mixed Linux and Windows environment. There is an active directory server for the Windows side. For the Linux side, we will install an LDAP server.
Now we would like to set up a Samba file ...
0
votes
1answer
188 views
About PAM authentication using sssd
there.
I succeed to join Linux environment to Windows Server domain, using realm join command. (Thanks Roaima) From this Stack ticket.
Now the next step seems to authenticate to Active Directory.
So,...
0
votes
0answers
151 views
On starting sssd
there.
At first, it says the daemon couldn't find the /etc/sssd/sssd.conf. So, I created this and, when executing sssd "systemctl start sssd.service", it shows the following errors.
Jun 25 21:00:48 ...
2
votes
1answer
1k views
Connecting to Active Directory (possibly with winbind)
I'm trying to figure out how to integrate Linux environment authentication system to Windows server 2012, and I found a way using winbind.
I've searched Google and there are several pages that ...
0
votes
1answer
507 views
Cannot login to Linux with AD account and /bin/bash
I have configured everything necessary to log in with an AD account into Linux (Kerberos v5, SSSD, Samba and NTP), but when I connect with Putty to the server, the default shell that starts is /bin/sh....
3
votes
1answer
2k views
How do I clear a user's cached Active Directory password on CentOS 7?
I built a CentOS 7 install on my company laptop and configured it to authenticate to the company AD servers like so:
Install packages:
yum install sssd realmd oddjob oddjob-mkhomedir adcli samba-...
0
votes
1answer
262 views
How nsswitch call sssd for credential?
I'm stuck with Kerberos - sssd - AD. I've tried a lot of things, with lot of googling, in LinuxMint, Ubuntu 16.04 and Debian 9. I have always the same result :
kinit username works fine
msktutil -u --...
0
votes
0answers
65 views
Why isn't my principal found in the Kerberos database?
I am trying to join multiple Linux machines to my institution's Active Directory domain so that they can participate in domain authentication, not only for logins but also for access to domain ...
0
votes
0answers
17 views
Remove default_realm from krb5.conf file CentOS 7
I have a CentOS 7 server that was joined to Windows Active Directory. After an update it can't connect anymore.
While checking the settings in krb5 file I realised that two of the default realms are ...
-1
votes
0answers
325 views
getent passwd suddenly doesn't return UID from /etc/passwd?
My Linux CentOS server is connected to an active directory.
In recent days, a user's UID has changed when he logs in with telnet.
the getent passwd command returns an UID that is not that in the /etc/...
3
votes
1answer
2k views
Mapping AD groups to Linux groups - sssd and Windows server 2016
I have a setup with RHEL 7.4 machines that connect to Active Directory (AD) running on a Windows Server 2016 Datacenter Edition. The Linux machines are in direct integration with the AD.
Since ...
2
votes
1answer
1k views
Authentication mechanism to connect to Windows AD in Linux?
My company has asked me to look into connecting our CentOS 7 instance's to our Active Directory to make it easier for user management.
I have so far looked at:
Kerberos, doing it via command line - ...
3
votes
0answers
637 views
auto groups in CentOS 7 in Active Directory domain?
I am having an issue that might be mostly cosmetic but I've gotta keep the user complaints down. :)
I have a set of servers running CentOS 7.4 and have the requirement to join the servers to an ...
0
votes
0answers
43 views
Permission issue for folder with AD user
I have a folder on a linux machine to which a cisco(ISE) device sends the backup through SFTP. The files are coming to the folder successfully but unable to view the files from the device. CISCO TAC ...
1
vote
0answers
332 views
Samba Active Directory Domain Controller not working
I have installed the current samba (via apt-get) on Debian (Debian 4.9.30-2+deb9u5) and am configuring it to be an Active Directory Domain Controller (AD-DC).
I've also got it configured to use LDAP ...
0
votes
1answer
2k views
How to export a full list of users in Samba Active Directory?
I have an Active Directory running on Samba 4.6.3, on a server with Debian Jessie. On a Windows 7 PC (AD client) I installed the RSAT and from there I manage the server using an administrator account, ...
0
votes
0answers
62 views
It's necessary “demote” an old PDC?
Hello: in my work there is an Active Directory mounted in Samba 4.1.7 (Debian Wheezy), I did not know much about the topic so I started studying and recently added a secondary Domain Controller, which ...
0
votes
1answer
106 views
Only bind user can connect to Postfix server using LDAP
I have a functioning Active Directory server, but whenever I try to authenticate against the Postfix server that uses it (with saslauthd) I notice that only the bind user can connect. Whenever I try ...
