Skip to main content

Questions tagged [active-directory]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

Ubuntu and active directory / group policies - login scripts possible?

In my own home LAN I have setup a windows server with active directory. I have a bunch of computers, either running ubuntu or running dual boot ubuntu and windows. For the windows PCs, I have some ...
bas's user avatar
  • 101
0 votes
1 answer
35 views

Enabling Java JNDI LDAP connection to Active Directory using SSH through remote SSH tunnelling

Firstly, I would like to validate my idea for the PoC, specifically I would like to understand whether this can be possible or not and furthermore some pointers with regards to how it can be done ...
theimpatientcoder's user avatar
0 votes
1 answer
94 views

How to join the Ubuntu 22.04 Server to the Window Active Directory

I have new server running on the ubuntu and I want to join that server to our existing AD which is resolve as "ad.xyz.edu" and under that AD our department (OU) "med.abc.edu" is ...
Aditya vakharia's user avatar
0 votes
1 answer
197 views

Samba AD not able to login domain user on linux client

I am experimenting with Samba as active directory controller in my home network for the last two weeks. I installed samba on ubuntu server 22.04 following a couple of guides and videos, but this page ...
bas's user avatar
  • 101
0 votes
0 answers
32 views

How to get a Linux VM to pass MSAL SSO authentication?

I have a React app that uses the Microsoft Authentication Library (MSAL) to identify users. It works just fine on my Windows machine; however, for a variety of reasons, I'm trying to get a Linux VM ...
EJoshuaS - Stand with Ukraine's user avatar
0 votes
0 answers
154 views

Ubuntu, failed to join an AD over TLS/SSL with realmd

actualy I tried to establish a connection between a Ubuntu-Host and an Active Directory, with the goal to authentification my Linux-Host over the AD. For this, I use SSSD and Realmd, but not ADSys. We ...
Alphabeit's user avatar
1 vote
1 answer
53 views

Suse VM Full disk encryption, storing keys in Azure

We currently have a solution to have our data partition encrypted with the keys stored on the system partition to allow for booting without user interaction, but not our system partition as we have no ...
Fabby's user avatar
  • 5,404
0 votes
0 answers
50 views

why does the domain name get delete during setup using a Cloudinit script?

I am using a Cloud-Init script to setup up my Ubuntu 22.04 server. but when i check the logs to join an active directory it delete the subdomain name why? i can only remote connect through IP address ...
AzReaL's user avatar
  • 1
5 votes
0 answers
527 views

SSH with Kerberos from Windows client

I have an Ubuntu 22.04 LTS machine which I've joined to my Active Directory with SSSD. Everything works great, I can login with my AD-users to the Linux-server the user gets a kerberos ticket etc. ...
PatricF's user avatar
  • 151
0 votes
1 answer
784 views

SSSD and sudo-rules in Active Directory

Note While making this post I managed to find the problem myself so I thought I might as well post in case it may help someone else later on. The problem was that I had a typo in /etc/nsswitch.conf, I ...
PatricF's user avatar
  • 151
0 votes
0 answers
62 views

Active directory server default gateway resolution issues

I am using a Raspberry Pi 2 running Ubuntu Server acting as an active directory domain controller with samba and kerberos etc as detailed in this video. I have three Windows 11 Professional clients ...
Oliver Ricketts's user avatar
0 votes
1 answer
397 views

Active directory server set up DNS resolution failure or VERY SLOW, can I route external DNS requests the traditional way, before the server existed?

I'm very new to the world of active directory, windows server etc., so I apologise if some of the questions I ask are a bit stupid, but I'll try and explain exactly what I want to do below, and my ...
Oliver Ricketts's user avatar
0 votes
0 answers
24 views

IWA authentication alternative on linux

Im having a windows server configured with an adfs, which is used as Idp with saml in keycloak for my application, then I'm using adfs Device authentication, so I can login to my apps using my session ...
Ayoub Beltarchi's user avatar
0 votes
0 answers
141 views

FREEIPA Identity Provider server: Azure Active Directory

I am trying to add AAD as the identity server provider in Freeipa and configured it as shown in the below screenshot. There isn't much available in the documentation. Can anyone help with what else ...
Muhammad Naeem Akhtar's user avatar
0 votes
0 answers
366 views

Cannot authenticating with AD user to RHEL 8 through xRDP

In order to authenticate to an existing ADFS environement connected to keycloak using DeviceAuthentication, I configured my RHEL 8 workstation and I'm able to authenticate with AD user with command ...
Ayoub Beltarchi's user avatar
0 votes
1 answer
278 views

Red Hat Directory Server and LDAP

So as the title suggests I have a Red Hat Directory Server with OpenLDAP installed. I also have Windows Active Directory (mixed network). I want to script creating new users on the Red Hat Side. Now ...
Neo Trin's user avatar
0 votes
0 answers
270 views

pam_unix error when attempting to setup rdxp with AD integration

Issue: Installed Realm, SSSD and SSH works with all users, but trying to remote desktop using xrdp fails with the following errors Aug 30 00:00:00 PC-NAME xrdp-sesman[220997]: pam_unix(xrdp-sesman:...
themantimeforgot's user avatar
0 votes
0 answers
23 views

Joining mininet hosts to Active DIrectory VM

I am trying to add mininet hosts to domain in a test environment. I have a host OS (WIn 10) with 2 VMs. One mininet VM and the other WIndows Server 2012 VM which is domain controller. I want the ...
Shoaib's user avatar
  • 1
2 votes
1 answer
1k views

Cannot logon to Ubuntu server using trusted domain AD credentials

I've got an AD domain joined Ubuntu 22.04 server. I need to be able to logon to it using credentials from a trusted domain that is attached to the AD domain that the server is a member of. Logon is ...
Redeye's user avatar
  • 23
0 votes
1 answer
191 views

Samba AD DC - Directory entry for a shared folder

Suppose that you have: a Linux machine (A) running a Samba AD DC, a Windows machine (B), with a shared folder \\B\shared_folder. I would like to know if there is an entry in the directory for this ...
Léa Massiot's user avatar
0 votes
0 answers
974 views

How to execute a script after login with active directory for every user

My script is called configproxy.sh and use gsettings command. I'm on ubuntu 22.04. I put my script in /etc/profile.d/ and it seems to work only with local users. When I log myself with an active ...
Xetolone's user avatar
  • 101
0 votes
1 answer
1k views

In RHEL, can you associate the GID of an AD group with the GID of a local group?

I have a Windows Active Directory system and the GID of group X is 1745005454. The RHEL machines are AD joined using realm and SSSD authenticated, and when you do an id username it will show that that ...
bpartin2009's user avatar
1 vote
0 answers
698 views

Linux server - AD Login enabled - how to add AD group to local group

My RHEL servers are enabled with Active Directory authentication configured in sssd.conf I have allowed few AD groups in sssd.conf to login to the Linux server. the issue is I need to know how do I ...
judi's user avatar
  • 71
0 votes
1 answer
207 views

Active Directory & firewall-cmd

I'm using a RHEL based VM as a router and I'm trying to get AD running on the network but I'm not being successful at it. When I set up the interfaces on the LAN side to the trusted zone everything ...
DefaultVLAN's user avatar
1 vote
0 answers
1k views

Domains are not found after joining Ubuntu 22.04 to Active Directory using SSSD

Since Ubuntu 20.04 we are using SSSD and realmd to join these server to one of our Active Directory domains. This works (almost) out-of-the-box. For Ubuntu 22.04, however, we run into issues. And I am ...
Smithers91's user avatar
0 votes
1 answer
452 views

bash script for activeDirectory join; facing issues using expect to bypass password entry

Will preface here stating that this is poor practice but I have been requested anyway to store the svc-account credential within the script which will live in vRA for VM template.. not my choice, but ...
onceIHadASoul94's user avatar
1 vote
1 answer
969 views

Linux - Local account, password from AD

I have users defined in AD but because of some overrides, I have to add those accounts in my local /etc/passwd. Precisely, I want to assign a user a different GID then it is defined in AD. I want to ...
Miki's user avatar
  • 31
1 vote
0 answers
482 views

Check account status as a Samba domain member

I have a Rocky Linux 8.5 machine running as an Active Directory domain member. I've added it to the domain with net ads join command and I can run several commands to list domain objects as expected. ...
Daichi42's user avatar
4 votes
1 answer
12k views

How to troubleshoot a LDAP error 53 (WILL_NOT_PERFORM)?

I am trying to make a CentOS 7 server join an AD, but it results in an error: AD LDAP ERROR: 53 (Server is unwilling to perform): 0000216D: SvcErr: DSID-031A1241, problem 5003 (WILL_NOT_PERFORM), ...
dr_'s user avatar
  • 30.1k
1 vote
0 answers
75 views

Specific domain computer login when integrating with Windows domain

I'm trying to let a user named "linuxuser" can only login to a specific domain computer. My test environment description: Windows Server 2016 with Active Directory Service Ubuntu Server 20....
YukijiEri's user avatar
2 votes
0 answers
206 views

Is pam_krb5 affected by Active Directory kerberos changes due to CVE-2021-42287?

I use pam_krb5 to authenticate Linux users against a Microsoft Active Directory. Due to CVE-2021-42287, Microsoft is pushing out updates that will change the way kerberos works in AD. Microsoft's ...
Bryan Wright's user avatar
1 vote
0 answers
456 views

Joined linux host to AD server using realmd. Unable to change ad user passwords from the command line

Have a fairly simple setup of one AD server with various linux hosts. We attached the linux hosts to our domain by using: realm discover domain.example.com realm join domain.example.com -U user.adm ...
IT_User's user avatar
  • 362
2 votes
0 answers
343 views

Sync LDAP groups and UIDs with Active Directory

Currently, our organization has a working OpenLDAP server that we use to login to our Linux environments. However, due to the increase in Windows devices, the higher-ups have decided to migrate to an ...
Qiangong2's user avatar
  • 121
1 vote
1 answer
947 views

Linux in Active Directory: Persistent users

I was able to successfully join my Ubuntu 18.04 machine into AD. For this I'm using SSSD and Kerberos. I can ssh into in using AD domain credentials. Everything is fine except that those domain users ...
Anton  Merzliakov's user avatar
0 votes
1 answer
2k views

How can I get the current time as an LDAP timestamp in Unix?

I want to be able to generate an ActiveDirectory LDAP timestamp in Unix for some tests I need to run. Active Directory stores date/time values as the number of 100-nanosecond intervals that have ...
BennyMcBenBen's user avatar
0 votes
0 answers
32 views

p99 spikes in springboot api which communicates with MS AD

dont know if this question belongs to unix.stackechange/stackoverflow/devops.stackexchange. I open it here because i think it could be somehow unix/linux related. We have a custom java/springboot api, ...
Elytscha Smith's user avatar
2 votes
1 answer
3k views

Is it possible to have a local user with the same name as a domain user

I have a linux box set up with a local user that I've been using. If I join this computer to a domain using realm, will there be a conflict if the AD user I will be logging into has the same username ...
john doe's user avatar
  • 866
1 vote
1 answer
2k views

CentOS: Can AD id users in domain but AD users can't SSH in

I can join machines to a realm with Ubuntu no problem. So using the exact same steps for CentOS 7.7, I am able to join the domain and id users... but I can't ssh in! Steps I use only differ with ...
bluesquare's user avatar
2 votes
0 answers
2k views

SMB mount with Kerberos

I have set up a server with Fedora 33 and joined it to an Active Directory. This worked successful and users can authenticate themselves with their Active Directory user names. I can also see my Linux ...
T. Pluess's user avatar
  • 552
3 votes
1 answer
22k views

Samba file server + AD + SSSD without Winbind

Currently have a CentOS8 server AD integrated using SSSD + automatic SID->UID mapping/generation. I would like to setup some file shares to make use of AD groups, but am struggling to get it set up....
Storage4852's user avatar
1 vote
2 answers
731 views

SUDO successful for Active Directory admin group member using wrong password

Environment: OS: FreeBSD 12.1-Release-p10 Sudo: 1.9.5p2 Samba: 4.13.1_1 We've recently migrated to an Active Directory backend for DNS, DHCP, and in-house SSO support. I have SSH logins ...
alzee's user avatar
  • 240
1 vote
0 answers
1k views

Authenticate samba users using AD

So I have an ubuntu 20.04 machine that I want to use as the storage server for my domain using samba. The server is not a DC, but it is joined to the domain as any other computer using realmd and sssd ...
DemosJarco's user avatar
1 vote
1 answer
6k views

Allowing Active Directory groups to sudo on Ubuntu 20.04

I've joined the domain and set up group login successfully, but can't get sudo to work for members of that group. %DOMAIN\\domain-group ALL=(ALL) ALL in /etc/sudoers doesn't work---users are not ...
ardelbrax's user avatar
1 vote
0 answers
875 views

How do I see which user accounts are available to systemd for launching services on system startup?

I have a systemd service that fails to launch on system startup with error code status=217/USER (see below), which means D001615 (AD user) does not exist according to this answer. However, if I ...
Shuzheng's user avatar
  • 4,601
1 vote
0 answers
378 views

How is folder redirection configured on Linux Clients?

I'm wanting to configure home directories on my Linux clients to be redirected to my samba AD-DC homes share. I tried using fstab to mount the user's home directory in /home, that creates issues for ...
Kaiden's user avatar
  • 11
0 votes
0 answers
417 views

Join MINT 20 System to Windows Server 2003 AD fails with "failed to lookup DC: Device Timeout

I've been following the instructions provided in https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member to try and get a Mint Linux 20 machine added to my Windows Server 2003 domain. At ...
tsc_chazz's user avatar
  • 203
1 vote
0 answers
1k views

FreeBSD + SSSD + Samba + Windos Server 2019 AD: Unable to set permissions or create files

I'm using: FreeBSD 12.1 release p10 amb64 Samba 4.10.17 sssd 1.11.7 I'm about to upgrade Active Directory from Windows 2012R2 to Windows 2019. In my existing setup, I have the unix attributes added ...
Steve K Jackson's user avatar
1 vote
0 answers
3k views

SUSE 15 SP2 AD Authentication: Server not found in Kerberos database

I am trying to configure configure Active Directory authentication on a SLE 15 SP2 host. The AD-domain exists of multiple DCs/AD-servers. I followed these guides: https://www.suse.com/c/the-sssd-...
Diskoteket's user avatar
1 vote
0 answers
304 views

CIFS mount locks active directory user

I am configuring a Windows Distributed File share with this fstab entry //company.local/DFSdata/Office/office_data /mnt/y cifs credentials=/home/user/.smbcredentials,file_mode=0666,dir_mode=...
ckoidl's user avatar
  • 111
0 votes
1 answer
697 views

Samba domain has multiple ips associated with it

I have been setting up a samba DC but the same machine has a couple of docker containers running and it picked up the network interfaces as active, now the domain has 5 different ips that aren't what ...
Mathias Hillmann's user avatar

1
2 3 4 5