Questions tagged [active-directory]
The active-directory tag has no usage guidance.
1
vote
2answers
17 views
On Solaris I get good id mapping..on linux not,why?
I use an Active Directory server for authentication,Solaris works fine following this Howto.
All works,and my user "user1" get the right UID assigned
on Windows AD,which is 10000.
On linux I follow ...
0
votes
0answers
12 views
Debian Stretch: Samba Winbind Offline Logon Not working - kerberos keytab not persistent after reboot?
This is being tried onDebian stretch referred to as 9.6 in /etc/debian_version
I'm in a Windows Domain environment with two 2012R2 controllers that have IDMU/Unix Attributes.
Other versions of stuff:...
0
votes
0answers
15 views
How to generate keytab for headless AD user
I was provided a headless Active Directory user account with a randomly generated password we need to use to access some network resources. Since this headless account will need to be run from an ...
0
votes
0answers
14 views
pam_ldap detecting expiring password on Active Directory
I am maintaining some code that uses: pam_ldap version 186
which compiles against openldap 2.4.40
We are using Active Directory on Windows 2012 for the LDAP backend.
pam_ldap successfully ...
0
votes
0answers
42 views
Linux ACLs and Samba
I have a debian stretch file server that is joined to an active directory domain. I have several samba shares set up on it. And am able to authenticate using domain accounts. But I want a samba share ...
0
votes
1answer
54 views
ReadOnly Access for members of Active Directory Group
I have a Linux host that runs on CentOS 7, joined to domain through realm.
My goal is to provide ReadOnly access to one of the AD groups say "LinuxRO-USR", the users of this group should only
be ...
1
vote
0answers
66 views
Changing permissions on CIFS files and folders from a Linux client
I'm using an Ubuntu 18.04 workstation in a corporate enviroment that is mostly windows based. The workstation has joined the Active Directory environment using pbis-open, and several shares are ...
5
votes
2answers
270 views
Setting login shell in SSS configuration for users from Active Directory
I'm trying to define different login shells for different users of an AD domain, as described here. The aim is to deny members of a particular group from logging in while allowing them to do SSH ...
1
vote
1answer
92 views
Authenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password
Dears,
I spent much time on this and even successfully verified (Auth)Linux-LDAP-openLDAP ok. But get blocked with AD.I can now switch to user from root account but can not log on with password(...
0
votes
0answers
71 views
How to find with ldapsearch the DN of a particular Active Directory group?
How can we use ldapsearch to find the full DN of a particular Active Directory group?
I've tried to pass it the options -s sub -b "DC=mydomain,DC=com" "(dn=My Group Name)" but it doesn't find it.
...
2
votes
1answer
285 views
sssd and Active Directory user does not exist in CentOS
When I try to do a su user1@ADREALM.COM I get a "user does not exist" message.
user1@ADREALM.COM exists in Active Directory. I can do kinit user1@ADREALM.COM successfully and get a ticket. Here are ...
1
vote
1answer
113 views
What must be added to nsswitch.conf to show AD users and groups?
This is a follow-up to this question.
I have a CentOS 7 machine which has joined a domain FOOBAR. It is possible to successfully get info about users stored in the AD via
id user@FOOBAR.GLOBAL
...
0
votes
0answers
74 views
Linux SMB file share setup issues
Using Ubuntu 18 LTS, want to use Linux SMB shares at branch offices with AD authentication and file permissions.
Client Windows computer is Windows 10 Pro.
Followed information found online.
https://...
2
votes
1answer
754 views
Assignment of UID and GID from Active Directory
My CentOS 7 machine has successfully joined a domain FOOBAR (as verified by realm list) and here's the information about an user coming from the AD (non-local):
[root@centos7 ~]# id jdoe@FOOBAR....
0
votes
1answer
35 views
Is it possible/practical to use a Linux server to authenticate Windows devices?
I am from a small concern and we are currently looking into getting a server purely for authentication and saving user data's. I do not want to push software to the devices or anything like that. I ...
0
votes
0answers
45 views
Can not restrict domain users access to Ubuntu SFTP server
I have an Ubuntu SFTP server that has joined an AD domain using winbind and sssd. I'd like to restrict user access (Ideally to allow only a domain group to access but for now to only one user).
I ...
0
votes
0answers
9 views
Connect DS389 to W2012R2
Trying to configure DS389 to connect to a Windows ADDS server for a class practical.
I have been following this guide:
https://www.overclockers.com/forums/showthread.php/709625-HowTO-Sync-Active-...
0
votes
2answers
35 views
How do I activate time based admin login to a Linux system using windows active directory?
I have set up a solution where the login to our linux systems is regulated by microsoft active Directory and group memberships. Now i want the access time based so that the ad user will be kicked out ...
0
votes
0answers
17 views
ISC DHCP and Microsoft DNS [duplicate]
I have devices that pull their IP addresses from DHCP which are not on the domain. I however need the devices to provide the DHCP server with a hostname -- make a DNS entry and update it when the IP ...
1
vote
0answers
37 views
About connecting to Active Directory from CentOS7
I've searched several videos on Youtube, articles in other Stack Exchange sites, and some blogs.. but I couldn't make this done yet..
My environment is Windows Server 2012 RC and CentOS7.
1. I ...
0
votes
0answers
49 views
How it possible to use Samba as a Fileserver with AD, but using another LDAP server for SSH-Login?
We have a mixed Linux and Windows environment. There is an active directory server for the Windows side. For the Linux side, we will install an LDAP server.
Now we would like to set up a Samba file ...
0
votes
1answer
110 views
About PAM authentication using sssd
there.
I succeed to join Linux environment to Windows Server domain, using realm join command. (Thanks Roaima) From this Stack ticket.
Now the next step seems to authenticate to Active Directory.
So,...
0
votes
0answers
54 views
On starting sssd
there.
At first, it says the daemon couldn't find the /etc/sssd/sssd.conf. So, I created this and, when executing sssd "systemctl start sssd.service", it shows the following errors.
Jun 25 21:00:48 ...
2
votes
1answer
727 views
Connecting to Active Directory (possibly with winbind)
I'm trying to figure out how to integrate Linux environment authentication system to Windows server 2012, and I found a way using winbind.
I've searched Google and there are several pages that ...
0
votes
1answer
158 views
Cannot login to Linux with AD account and /bin/bash
I have configured everything necessary to log in with an AD account into Linux (Kerberos v5, SSSD, Samba and NTP), but when I connect with Putty to the server, the default shell that starts is /bin/sh....
2
votes
1answer
1k views
How do I clear a user's cached Active Directory password on CentOS 7?
I built a CentOS 7 install on my company laptop and configured it to authenticate to the company AD servers like so:
Install packages:
yum install sssd realmd oddjob oddjob-mkhomedir adcli samba-...
0
votes
1answer
133 views
How nsswitch call sssd for credential?
I'm stuck with Kerberos - sssd - AD. I've tried a lot of things, with lot of googling, in LinuxMint, Ubuntu 16.04 and Debian 9. I have always the same result :
kinit username works fine
msktutil -u --...
0
votes
0answers
49 views
Why isn't my principal found in the Kerberos database?
I am trying to join multiple Linux machines to my institution's Active Directory domain so that they can participate in domain authentication, not only for logins but also for access to domain ...
0
votes
0answers
15 views
Remove default_realm from krb5.conf file CentOS 7
I have a CentOS 7 server that was joined to Windows Active Directory. After an update it can't connect anymore.
While checking the settings in krb5 file I realised that two of the default realms are ...
0
votes
0answers
251 views
getent passwd suddenly doesn't return UID from /etc/passwd?
My Linux CentOS server is connected to an active directory.
In recent days, a user's UID has changed when he logs in with telnet.
the getent passwd command returns an UID that is not that in the /etc/...
2
votes
1answer
1k views
Mapping AD groups to Linux groups - sssd and Windows server 2016
I have a setup with RHEL 7.4 machines that connect to Active Directory (AD) running on a Windows Server 2016 Datacenter Edition. The Linux machines are in direct integration with the AD.
Since ...
2
votes
1answer
500 views
Authentication mechanism to connect to Windows AD in Linux?
My company has asked me to look into connecting our CentOS 7 instance's to our Active Directory to make it easier for user management.
I have so far looked at:
Kerberos, doing it via command line - ...
3
votes
0answers
458 views
auto groups in CentOS 7 in Active Directory domain?
I am having an issue that might be mostly cosmetic but I've gotta keep the user complaints down. :)
I have a set of servers running CentOS 7.4 and have the requirement to join the servers to an ...
0
votes
0answers
40 views
Permission issue for folder with AD user
I have a folder on a linux machine to which a cisco(ISE) device sends the backup through SFTP. The files are coming to the folder successfully but unable to view the files from the device. CISCO TAC ...
1
vote
0answers
271 views
Samba Active Directory Domain Controller not working
I have installed the current samba (via apt-get) on Debian (Debian 4.9.30-2+deb9u5) and am configuring it to be an Active Directory Domain Controller (AD-DC).
I've also got it configured to use LDAP ...
0
votes
1answer
1k views
How to export a full list of users in Samba Active Directory?
I have an Active Directory running on Samba 4.6.3, on a server with Debian Jessie. On a Windows 7 PC (AD client) I installed the RSAT and from there I manage the server using an administrator account, ...
0
votes
0answers
51 views
It's necessary “demote” an old PDC?
Hello: in my work there is an Active Directory mounted in Samba 4.1.7 (Debian Wheezy), I did not know much about the topic so I started studying and recently added a secondary Domain Controller, which ...
0
votes
1answer
90 views
Only bind user can connect to Postfix server using LDAP
I have a functioning Active Directory server, but whenever I try to authenticate against the Postfix server that uses it (with saslauthd) I notice that only the bind user can connect. Whenever I try ...
1
vote
1answer
564 views
SSSD delete users
It is my first question on the forum, so please, don't be mad if I miss important information about my issue.
I use Debian 8 and I joined an Active Directory domain (Windows server 2012) with SSSD ...
0
votes
1answer
188 views
Univention - Samba - ERROR - exceptions.TypeError - No such file or directory
I'm configuring Univention UCS 4.2
I did a normal installation, installing the following UCS applications:
Active Directory Connection
Active Directory Takeover
Active Directory-compatible Domain ...
2
votes
0answers
832 views
samba share inaccessible / you don't have permissions
I have setup a samba share folder, however, when I try to access the share, I am getting "Windows Can not access the \\server\share1. You don't have permissions to access \\server\share1"
This server ...
1
vote
0answers
119 views
Univention UCS - AD Takeover - At least one GPO is still missing in SYSVOL
Using Univention Corporate Server (UCS) and trying to takeover an Active Directory on a Windows Server 2008 R2...
Following the guide:
https://docs.software-univention.de/manual-4.2.html#windows:...
0
votes
1answer
61 views
Getting Active Directory parameters for both: Windows Server 2008 and Linux Server
How do I get the values of the following parameters:
DNS domain name
NetBIOS domain name
Kerberos realm
LDAP base DN
For both:
Windows Server 2008 R2 (64-bit) with an Active Directory configured
...
0
votes
1answer
134 views
Univention UCS 4.2 - Failed 'Active Directory Takeover' process - Troubleshooting [closed]
Attention moderators: could any of you show the images and links I reference below on my post?, I was able to put a maximum of 2 images/links because I'm a new user. After that you can remove this ...
0
votes
1answer
361 views
Windows client connecting to UCS / Samba server - The join operation was not successful
Using Univention Corporate Server UCS,
I have the following Linux distribution:
root@ucs:~# cat /etc/*-release
DISTRIB_ID=Univention
DISTRIB_RELEASE="4.2-2 errata159"
DISTRIB_CODENAME=Lesum
...
0
votes
2answers
478 views
sssd caching user credentials even the cache_credentials is set to false
I have setup Redhat host to authenticate AD users for ssh sessions. Everything is working as expected, however, single concern, user credentials are being cached somewhere.
Upon first time login ...
2
votes
1answer
88 views
After joining with AD user, changing [User@domain@host] to [user@host]
My CentOS machine joined a domain with an AD so that I can log in with ssh with the credentials from the AD. Everything works fine, but now the username looks quite ugly with user@domain@host in it.
...
3
votes
2answers
2k views
sudo is not working on my Centos 7.3
I have spent considerable time on my Centos 7 with sudo. I added local user test to /etc/sudoers via visudo as follows:
## Next comes the main part: which users can run what software on
## which ...
1
vote
1answer
124 views
Sudo long wait for Active Directory user
My Fedora 26 (was 25 when installed/joined to AD) has a long timeout when I run sudo for my Active Directory user if I leave it alone for to long.
Timeout is long. 25 seconds.
I used strace (sudo ...
1
vote
1answer
2k views
AD Users Cannot Login Through GDM/LightDM
I've setup Winbind & Kerberos on my CentOS 7 server to allow network users to login. The network users can login fine through SSH, but not through the display manager. I've experienced the same ...
