Questions tagged [active-directory]
The active-directory tag has no usage guidance.
0
votes
0answers
11 views
Ubuntu 18.04 How do I configure sendmail to intercept incoming SMTP traffic in a virtual private networking?
I need to do to create a test environment.
I have a virtual network with a Windows active domain controller / DNS machine to assign domains that I can use for testing with emails.
I then have a mail ...
0
votes
0answers
4 views
kinit using keytab fails while using password succeeds
I'm facing a strange problem configuring KRB5 on Ubuntu 16.04 using Windows 2012 DCs as KDC. Calling kinit with an service AD account succeeds, if the password is provided to kinit's password prompt, ...
0
votes
0answers
4 views
Register Active Directory users with system
I have connected my system to a Windows (Active Directory) Domain, and everything works for the most part.
Additionally, I have connected a Windows drive using NTFS-3G and its User Mapping feature to ...
0
votes
0answers
18 views
chroot multiple directories in linux using active directory groups
I have integrated a linux server with Active directory. I have multiple Active directory groups created sftpgroup1, sftpgroup2 and sftpgroup3. UserA is part of sftpgroup1 and sftpgroup2. I am trying ...
0
votes
0answers
32 views
Access Windows share via CIFS and Kerberos: “Key has been revoked”
I'm trying to mount a Windows share on a Linux host (Ubuntu 16.04) using Kerberos / Active Directory authentication. The Linux host has been joined to the AD, and I can access shares on it from the ...
1
vote
0answers
35 views
Setting default Linux Shell in RHEL7 using Active Directory
I have a client who has an install script that needs to run under /bin/tcsh as the shell on their Active Directory Domain Joined RHEL7 Virtual Machine.
This install script will be run using a service ...
0
votes
0answers
11 views
Should I run a boot script on nsswitch.conf? (Debian 9)
I have a Debian 9 box that's joined to a Windows AD domain.
The main domain controller runs in a VM on this Debian box alongside another physical backup DC.
As it stands the backup DC is out of ...
1
vote
0answers
35 views
Cannot access samba share using AD managed service account [closed]
I am using Samba version 4.6.16-git.124.aee309c5c183.32.1-SUSE-SLE_12-x86_64, and the server is member of a Windows AD domain.
We have a couple of jobs using shares on the Linux machine and have been ...
0
votes
0answers
48 views
Allow NTLM Authentication after inclusion in Windows Domain
In a user session outside of domain authentication, I had NTLM authentication working for web requests sending Auth headers:
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
But, now I've ...
0
votes
0answers
40 views
SAMBA 4.9 AD: Join of a new ADDC with internal DNS to a 4.2 AD with bind dns?
I've to fix this situation soon and need your advice:
Environment is now:
2 old gentoos with never patched Samba AD's of the old 4.2.x generation. The DC do use the bind service as DNS and the domain ...
1
vote
3answers
101 views
Allow AD group to access samba share
On my Linux I created a samba share like this, it was working fine.
[global]
security = user
passdb backend = tdbsam
map to guest = Bad User
guest account = mcms
[mml-t1]
path = /...
0
votes
2answers
34 views
On Solaris I get good id mapping..on linux not,why?
I use an Active Directory server for authentication,Solaris works fine following this Howto.
All works,and my user "user1" get the right UID assigned
on Windows AD,which is 10000.
On linux I follow ...
1
vote
0answers
73 views
Debian Stretch: Samba Winbind Offline Logon Not working - kerberos keytab not persistent after reboot?
This is being tried onDebian stretch referred to as 9.6 in /etc/debian_version
I'm in a Windows Domain environment with two 2012R2 controllers that have IDMU/Unix Attributes.
Other versions of stuff:...
0
votes
0answers
80 views
How to generate keytab for headless AD user
I was provided a headless Active Directory user account with a randomly generated password we need to use to access some network resources. Since this headless account will need to be run from an ...
0
votes
1answer
69 views
ReadOnly Access for members of Active Directory Group
I have a Linux host that runs on CentOS 7, joined to domain through realm.
My goal is to provide ReadOnly access to one of the AD groups say "LinuxRO-USR", the users of this group should only
be ...
1
vote
0answers
117 views
Changing permissions on CIFS files and folders from a Linux client
I'm using an Ubuntu 18.04 workstation in a corporate enviroment that is mostly windows based. The workstation has joined the Active Directory environment using pbis-open, and several shares are ...
-1
votes
1answer
59 views
Unable to change home folder setting in Samba/Winbind
I'm using a Debian 8 server at work. Recently, I used Samba and Winbind to join it to the domain. This domain is managed by Active Directory on a Windows Server machine. This all works: domain users ...
5
votes
2answers
416 views
Setting login shell in SSS configuration for users from Active Directory
I'm trying to define different login shells for different users of an AD domain, as described here. The aim is to deny members of a particular group from logging in while allowing them to do SSH ...
1
vote
1answer
200 views
Authenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password
Dears,
I spent much time on this and even successfully verified (Auth)Linux-LDAP-openLDAP ok. But get blocked with AD.I can now switch to user from root account but can not log on with password(...
0
votes
0answers
93 views
How to find with ldapsearch the DN of a particular Active Directory group?
How can we use ldapsearch to find the full DN of a particular Active Directory group?
I've tried to pass it the options -s sub -b "DC=mydomain,DC=com" "(dn=My Group Name)" but it doesn't find it.
...
2
votes
1answer
631 views
sssd and Active Directory user does not exist in CentOS
When I try to do a su user1@ADREALM.COM I get a "user does not exist" message.
user1@ADREALM.COM exists in Active Directory. I can do kinit user1@ADREALM.COM successfully and get a ticket. Here are ...
1
vote
1answer
310 views
What must be added to nsswitch.conf to show AD users and groups?
This is a follow-up to this question.
I have a CentOS 7 machine which has joined a domain FOOBAR. It is possible to successfully get info about users stored in the AD via
id user@FOOBAR.GLOBAL
...
2
votes
1answer
2k views
Assignment of UID and GID from Active Directory
My CentOS 7 machine has successfully joined a domain FOOBAR (as verified by realm list) and here's the information about an user coming from the AD (non-local):
[root@centos7 ~]# id jdoe@FOOBAR....
0
votes
1answer
37 views
Is it possible/practical to use a Linux server to authenticate Windows devices?
I am from a small concern and we are currently looking into getting a server purely for authentication and saving user data's. I do not want to push software to the devices or anything like that. I ...
0
votes
0answers
90 views
Can not restrict domain users access to Ubuntu SFTP server
I have an Ubuntu SFTP server that has joined an AD domain using winbind and sssd. I'd like to restrict user access (Ideally to allow only a domain group to access but for now to only one user).
I ...
0
votes
0answers
10 views
Connect DS389 to W2012R2
Trying to configure DS389 to connect to a Windows ADDS server for a class practical.
I have been following this guide:
https://www.overclockers.com/forums/showthread.php/709625-HowTO-Sync-Active-...
0
votes
2answers
35 views
How do I activate time based admin login to a Linux system using windows active directory?
I have set up a solution where the login to our linux systems is regulated by microsoft active Directory and group memberships. Now i want the access time based so that the ad user will be kicked out ...
0
votes
0answers
24 views
ISC DHCP and Microsoft DNS [duplicate]
I have devices that pull their IP addresses from DHCP which are not on the domain. I however need the devices to provide the DHCP server with a hostname -- make a DNS entry and update it when the IP ...
1
vote
0answers
39 views
About connecting to Active Directory from CentOS7
I've searched several videos on Youtube, articles in other Stack Exchange sites, and some blogs.. but I couldn't make this done yet..
My environment is Windows Server 2012 RC and CentOS7.
1. I ...
0
votes
0answers
52 views
How it possible to use Samba as a Fileserver with AD, but using another LDAP server for SSH-Login?
We have a mixed Linux and Windows environment. There is an active directory server for the Windows side. For the Linux side, we will install an LDAP server.
Now we would like to set up a Samba file ...
0
votes
1answer
154 views
About PAM authentication using sssd
there.
I succeed to join Linux environment to Windows Server domain, using realm join command. (Thanks Roaima) From this Stack ticket.
Now the next step seems to authenticate to Active Directory.
So,...
0
votes
0answers
97 views
On starting sssd
there.
At first, it says the daemon couldn't find the /etc/sssd/sssd.conf. So, I created this and, when executing sssd "systemctl start sssd.service", it shows the following errors.
Jun 25 21:00:48 ...
2
votes
1answer
1k views
Connecting to Active Directory (possibly with winbind)
I'm trying to figure out how to integrate Linux environment authentication system to Windows server 2012, and I found a way using winbind.
I've searched Google and there are several pages that ...
0
votes
1answer
313 views
Cannot login to Linux with AD account and /bin/bash
I have configured everything necessary to log in with an AD account into Linux (Kerberos v5, SSSD, Samba and NTP), but when I connect with Putty to the server, the default shell that starts is /bin/sh....
2
votes
1answer
2k views
How do I clear a user's cached Active Directory password on CentOS 7?
I built a CentOS 7 install on my company laptop and configured it to authenticate to the company AD servers like so:
Install packages:
yum install sssd realmd oddjob oddjob-mkhomedir adcli samba-...
0
votes
1answer
185 views
How nsswitch call sssd for credential?
I'm stuck with Kerberos - sssd - AD. I've tried a lot of things, with lot of googling, in LinuxMint, Ubuntu 16.04 and Debian 9. I have always the same result :
kinit username works fine
msktutil -u --...
0
votes
0answers
52 views
Why isn't my principal found in the Kerberos database?
I am trying to join multiple Linux machines to my institution's Active Directory domain so that they can participate in domain authentication, not only for logins but also for access to domain ...
0
votes
0answers
16 views
Remove default_realm from krb5.conf file CentOS 7
I have a CentOS 7 server that was joined to Windows Active Directory. After an update it can't connect anymore.
While checking the settings in krb5 file I realised that two of the default realms are ...
0
votes
0answers
291 views
getent passwd suddenly doesn't return UID from /etc/passwd?
My Linux CentOS server is connected to an active directory.
In recent days, a user's UID has changed when he logs in with telnet.
the getent passwd command returns an UID that is not that in the /etc/...
2
votes
1answer
2k views
Mapping AD groups to Linux groups - sssd and Windows server 2016
I have a setup with RHEL 7.4 machines that connect to Active Directory (AD) running on a Windows Server 2016 Datacenter Edition. The Linux machines are in direct integration with the AD.
Since ...
2
votes
1answer
768 views
Authentication mechanism to connect to Windows AD in Linux?
My company has asked me to look into connecting our CentOS 7 instance's to our Active Directory to make it easier for user management.
I have so far looked at:
Kerberos, doing it via command line - ...
3
votes
0answers
561 views
auto groups in CentOS 7 in Active Directory domain?
I am having an issue that might be mostly cosmetic but I've gotta keep the user complaints down. :)
I have a set of servers running CentOS 7.4 and have the requirement to join the servers to an ...
0
votes
0answers
43 views
Permission issue for folder with AD user
I have a folder on a linux machine to which a cisco(ISE) device sends the backup through SFTP. The files are coming to the folder successfully but unable to view the files from the device. CISCO TAC ...
1
vote
0answers
299 views
Samba Active Directory Domain Controller not working
I have installed the current samba (via apt-get) on Debian (Debian 4.9.30-2+deb9u5) and am configuring it to be an Active Directory Domain Controller (AD-DC).
I've also got it configured to use LDAP ...
0
votes
1answer
1k views
How to export a full list of users in Samba Active Directory?
I have an Active Directory running on Samba 4.6.3, on a server with Debian Jessie. On a Windows 7 PC (AD client) I installed the RSAT and from there I manage the server using an administrator account, ...
0
votes
0answers
53 views
It's necessary “demote” an old PDC?
Hello: in my work there is an Active Directory mounted in Samba 4.1.7 (Debian Wheezy), I did not know much about the topic so I started studying and recently added a secondary Domain Controller, which ...
0
votes
1answer
99 views
Only bind user can connect to Postfix server using LDAP
I have a functioning Active Directory server, but whenever I try to authenticate against the Postfix server that uses it (with saslauthd) I notice that only the bind user can connect. Whenever I try ...
1
vote
1answer
660 views
SSSD delete users
It is my first question on the forum, so please, don't be mad if I miss important information about my issue.
I use Debian 8 and I joined an Active Directory domain (Windows server 2012) with SSSD ...
0
votes
1answer
215 views
Univention - Samba - ERROR - exceptions.TypeError - No such file or directory
I'm configuring Univention UCS 4.2
I did a normal installation, installing the following UCS applications:
Active Directory Connection
Active Directory Takeover
Active Directory-compatible Domain ...
2
votes
0answers
1k views
samba share inaccessible / you don't have permissions
I have setup a samba share folder, however, when I try to access the share, I am getting "Windows Can not access the \\server\share1. You don't have permissions to access \\server\share1"
This server ...
