Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I am an Active Directory engineer, so not really a Linux savvy person. I basically know enough to break a Linux workstation or server.

We have a team that needs to use Ubuntu workstations with their AD accounts. I have been able to join an Ubuntu VM (the system I am writing this on) to my dev forest using this article: https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto

I have not been able to figure out how to get AD users to log on to the workstation.

Any help would be great.

share|improve this question

1 Answer 1

Did you double check that you have winbind listed in your nsswitch.conf file for users and groups? What happens if you login with a local ID and do a "getent passwd " for one of your AD users? What does klist tell you (you may need to install krb5-utils).

First install winbind for AD logins, samba for domain connectivity and libpam-krb5 for Kerberos

sudo apt-get install winbind samba libpam-krb5

Then backup /etc/samba/smb.conf and create a new one with the following contents:

[global]
workgroup = DOMAIN
security = ADS
realm = AD.DOMAIN.COM

Run "testparm" to make sure your smb.conf file is not messed up and then change to a root interactive shell

  sudo -i

Now add the machine to the domain

   net ads join -U username

Assuming DNS is set up properly & you're on the network with your DC's it should prompt you for username's password and add the PC to the domain. If you get an error about DNS don't worry about it.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.