Questions tagged [active-directory]
Questions that relate to Ubuntu using this directory service created by Microsoft. Compatibility questions include LDAP, Kerberos and DNS-based naming and other network information.
237
questions
0
votes
0
answers
11
views
Delay displaying Active directory user in GDM
After a lot of struggle, I have finally been able to make my laptop work not too bad with Active Directory/winbind authentication.
Anyway, I have an annoying issue that I can't figure out.
For the ...
1
vote
1
answer
4k
views
Can't login to Active Directory although Ubuntu 22.04.3 is joined to Active Directory successfully
I have an Active Directory setup on a physical server Windows Server 2022 Datacenter Edition. I'm trying to join an Ubuntu 22.04.3 virtual machine to that AD. I follow the guide at this link (https://...
4
votes
1
answer
8k
views
How to add Active Directory users as sudoers
I'm following this article. What I've done:
I can connect to Active Directory
I can login to the Active Directory
Now what I'm looking for is a way to make any active directory user a sudoer. I'm ...
1
vote
2
answers
709
views
Ubuntu 22.04 Desktop Installer - Stuck on Active Directory page, doesn't like my domain name value?
So, I'm installing 22.04 desktop and I get to the "Who Are You" page, fill in username/password/etc on there, and I check the "use Active Directory" checkbox at the bottom of that ...
1
vote
2
answers
6k
views
Remove a domain user account from local workstation, not from AD Domain
I have an AD Domain run by Samba4 and have successfully joined Ubuntu workstations to that domain and able to add users and log into the workstation with domain accounts. Now, I am needing to remove ...
1
vote
1
answer
862
views
Updated users/Groups from Active Directory Integration with Ubuntu 18.04 LTS
I set up the AD Integration for my Ubuntu 18.04 LTS workstation through a Virtual Machine using these two links:
https://discourse.ubuntu.com/t/service-sssd/11579
https://docs.microsoft.com/en-us/...
0
votes
2
answers
16k
views
Ubuntu 20.04 fails to join Windows AD domain
I am new with Ubuntu / Linux.
I am attempting to join a Ubuntu 20.04 machine to a Windows domain using the following command:
sudo realm join -v ad1.example.com
This fails with the following error:
...
0
votes
0
answers
45
views
Unable to join and authenticate ubuntu server with AD domain
We have followed up with the steps in the below ubuntu site to configure and join ubuntu server with windows AD domain.
https://ubuntu.com/server/docs/service-sssd-ad
Post completion of steps we are ...
0
votes
0
answers
44
views
Slow network traffic with DNS only after migrating Ubuntu Server 22.04.2 LTS to airgapped network
I have two networks in my environment, a main network and an offline/air-gapped network. The standard process for deploying Ubuntu servers to the air-gapped network is to clone a template VM on the ...
0
votes
0
answers
100
views
Can't login with domain user after ADSys installation - fetching policy fails, getting GPT.ini invalid argument error
I've implemented Adsys in a virtual environment containing a an ubuntu 22.04 pro and a regular ubuntu 20.04 and an AD server running windows server 2022.
Before installing the ADSys the computers had ...
0
votes
0
answers
37
views
Prevent root user to switch user to any Disabled AD user
root user is able to "su" to an user which is Disabled in AD.
As it's a security concern, need to prevent root user to su to any AD users, who is disabled in AD.
It should check the user ...
2
votes
1
answer
163
views
Setup Kerberos authentication with SSH
I have an Ubuntu server acting as the Domain Controller (domain.local) and a Ubuntu VM (ubu1) acting as a workstation. I wanted to ssh into the ubu1 VM with Kerberose using a keytab file.
For this, I ...
0
votes
1
answer
81
views
Trouble logging Active Directory from Windows Server 2022 to an Ubuntu Desktop 22.04 LTS
I actually joined the realm, but the problem is when I try to log in with an Active Directory user, I can't. I added the machine to the active directory via installation and everything is ok.
running ...
0
votes
0
answers
99
views
Ubuntu VM Full disk encryption, storing keys in Azure
We currently have a solution to have our data partition encrypted with the keys stored on the system partition to allow for booting without user interaction, but not our system partition as we have no ...
1
vote
0
answers
537
views
mount with cifs and sec=krb5 fails with "Required key not available"
The problem
First time posting here, and also not the most super experienced ubuntu user, so I hope that I can describe my problem well enough.
I am trying to mount a windows fileshare to our ubuntu ...
0
votes
0
answers
205
views
SSSD Configuration to Authenticate a one-way trusted domain user
I have a Microsoft "REDFOREST" Active Directory Deployment. I have my REDFOREST domain with all my user accounts. I have my "RESOURCE" domains that have a one-way trust of the ...
1
vote
2
answers
307
views
customize user profile with ubuntu 22.04 in ad domain with sssd
I have joined an ubuntu 22.04 workstation in an AD domain with SSSD.
But I cannot customize the desktop or the screen resolution for domain users.
I tried to put in /etc/skel but it didn't work as if ...
0
votes
0
answers
96
views
Cannot make Active Directory offline connection persistent
After several weeks of tries and failure, I finally need to ask for help.
For starters, I use Ubuntu 22.04 LTS, that I have setup with winbind, PAM, Kerberos.
Overall, I am trying to make a ...
0
votes
1
answer
131
views
How to truncate domain part from username in pam_mount?
I am currently experimenting with the new Active Directory Features in Ubuntu 22.04. I joined the domain with my client and everything worked fine so far. However I want to mount the users home ...
0
votes
0
answers
122
views
Active Directory Group Membership (refenced in the sudoers file) is Intermittent via SSH
ENVIRONMENT
We are operating several Ubuntu 22.04 systems. The systems are added to a Windows Active Directory Domain via the GUI as part of the initial configuration. We have an Active Directory ...
0
votes
0
answers
600
views
connecting 22.04 LTS to Active Directory: GSSAPI Error [...] (Server not found in Kerberos database)
I am trying to connect the Ubuntu computers of my department to our active directory which worked well for quiet some of them by now. However, currently I stuck with a computer that has recently been ...
0
votes
0
answers
83
views
How to use nslcd to bind windows AD
I try to use nslcd to auth by LDAP server, if openldap, works fine, but try to WindowsAD, always fail
but the similar config on CentOS is ok, I config the /etc/nslcd, /etc/nsswitch.conf, /etc/pam.d/...
0
votes
0
answers
271
views
ADsys Group Policy Objects - User Policies not Caching or Processing
I've got a 22.04 system joined to Active Directory, ADsys installed, a few group policies created. User authentication works fine, machine/computer policies are applying successfully. However, user ...
0
votes
0
answers
114
views
Administrator option is disabled for domain accounts in Ubuntu 22.04
I am the domain admin. My domain account in my system have administrator option disabled. I have tried adding the user to sudoers. That didn't work. Any other way? When opening the software centre or ...
0
votes
1
answer
50
views
Anbox and OpenLDAP to Active Directory for SSO
Anbox and OpenLDAP to Active Directory for SSO
We would love to use Anbox with our Active Directory for user authentication.
We have Windows 10 OS Instance using Active Direction for logon, being able ...
1
vote
1
answer
258
views
Logins like [email protected] cause profile files to be owned by root
The users at my school are used to logging in to email, windows etc with a login [email protected] (authenticated with Active Directory via LDAP). Unfortunately this is causing havoc and corrupting ...
2
votes
1
answer
5k
views
How to add an AD group members to a local group
I already have the AD integration working via sssd where a user logging in is a member of one of two AD groups. They are able to ssh into the server and if it's their first login they're granted ...
0
votes
0
answers
194
views
Can't login to domain users after enroll successfully Ubuntu 22.04
I'm working on ubuntu 22.04.
I installed all the required packages and enroll successfully to my domain.
my dc is on Windows server 2008 r2.
when I'm trying to login to any domain user after I'm ...
0
votes
0
answers
990
views
Give access to specific Active Directory Groups and local users
I have a server which is connected to the active directory, everything works fine (at least I guess) and everyone can access the server with their AD credentials, but I wan only specific group to be ...
2
votes
0
answers
50
views
Sudo access using AD without using FQDN
I've been able to get my server setup where it will allow me to use my AD credentials to login, and sudo works as well, but only if I sign in using [email protected].
I changed the /etc/sssd/sssd/...
0
votes
1
answer
633
views
Some Azure Active Directory users are not able to login to Ubuntu Machines
Some AD Users are not able to access Ubuntu machine in the domain, the error after trying to access the server via ssh I get in /var/log/auth.log:
Jun 14 11:50:36 SR sshd[1467842]: Invalid user ...
0
votes
0
answers
128
views
How to allow AD group to run elevated commands from the desktop in Ubuntu 22.04
I've seen a number of similar questions, but none that quite cover my situation.
I have an Ubuntu desktop 22.04 system, setup for authentication against a Active Directory. I have a domain group ...
6
votes
5
answers
34k
views
Edit Sudoers file to allow sudo rights to a AD domain group
I recently managed to get my Ubuntu Server 18.04 machine connected to my companies Windows AD. I am able to login with my AD credentials however I want to take it a step further...
This is the ...
0
votes
0
answers
285
views
Error: "System error" when joining server to Active Directory with SSSD
I am trying to join an Ubuntu 20.04LTS server to an Active Directory using the instructions found here. Everything goes well until I get to test the login in this section:
Finally, how about we try a ...
0
votes
2
answers
1k
views
After logging in with my AD credentials, why can I not change any settings?
I've been setting up a new machine with Ubuntu 22.04 Desktop. And since I'm on the IT team, I've been using it as an opportunity to broaden my knowledge of configuring Ubuntu for a work environment, ...
0
votes
0
answers
5k
views
Login failure after successfully adding Ubuntu 22.04 machine to the domain
I have successfully added my machine to my company's domain. When I try to login with my domain credentials at the login screen or via su I see a message "Applying machine settings" and the ...
0
votes
2
answers
3k
views
Slow login with Active Directory on Ubuntu 20.04
I am running an Ubuntu 20.04 machine configured to use my organisation's Active Directory (AD) setup.
There is a significant difference in the login time depending on whether I am connected to my ...
0
votes
2
answers
2k
views
How can I use my Active Directory credentials to log in to my Linux machine?
I would like to use the same username/password to log in to my Linux machine as I do for a Windows machine that authenticates against Active Directory.
In particular, what I want is:
When I log in ...
0
votes
1
answer
680
views
Openldap upgrade from 2.4 to 2.5
we are using Openldap version Version: 2.4.45+dfsg-1ubuntu1.10
how can I upgrade or migrate to 2.5?
Thanks
1
vote
2
answers
9k
views
GUI for joining AD after installation - Ubuntu 22.04
as we know, we can join AD domain in an installation process, but is there GUI to do this after install? like its super easy on Mac and Windows?
If there is no GUI, how can i make a request about it?
2
votes
0
answers
759
views
Automatic Login with AD domain user on Ubuntu 20.04 or 22.04
Does anyone know how to configure Ubuntu LTS 20.04 or 22.04 (Using default Gnome desktop) to perform autologin using a domain user account?
The client has been joined to the domain and it is possible ...
1
vote
0
answers
74
views
sssd do not use corporate domain in PTR record when deployed with vSphere
We have a workflow that deploy Ubuntu 20.04.5 LTS in vSphere VM with automatic AD integration using the following commands:
#!/bin/bash
if [ x$1 == x"precustomization" ]; then
rm -v /...
0
votes
2
answers
7k
views
AD (PAM) authentication stopped working after security update
I have an Ubuntu 16.04 GIT server with AD authentication configured. Authentication stopped working yesterday while nothing on GIT server or AD has changed. Here's the error message:
pam_winbind(...
0
votes
1
answer
651
views
Samba won't join computers to domain anymore
DISCLAMER:
I'm still trying to fully learn and understand how to properly maintain a samba domain controller.
The Problem:
I had a working samba installation with AD controlle but now, just a month ...
0
votes
0
answers
1k
views
Domains are not found after joining Ubuntu 22.04 to Active Directory using SSSD
Since Ubuntu 20.04 we are using SSSD and realmd to join these server to one of our Active Directory domains. This works (almost) out-of-the-box.
For Ubuntu 22.04, however, we run into issues. And I am ...
0
votes
1
answer
3k
views
Stuck joining Ubuntu Studio 22.04.1 to Active Directory
I am trying to join my freshly installed Ubuntu Studio 22.04.1 to an AD domain hosted on my Synology NAS, by following the instructions in this white paper, starting on page 11 ("Joining After ...
2
votes
1
answer
4k
views
Enrolled in AD realm, but can´t resolve AD users with getent passwd
Situation:
Windows SBS Server (AD controller, DNS server), Proxmox 4.1 server hosting a Ubuntu 14.04 lxc container.
What I want to achieve:
Integrate the Ubuntu container into the AD, so that I´m ...
0
votes
0
answers
69
views
Working with windows shared file in ubuntu
We are using windows(8.1 & 10) and ubuntu(20.04) in our network environment. When we open a xls,word file in ubuntu which is already opened in windows it is not prompting as a read only and also ...
0
votes
1
answer
1k
views
Logged out immediately after login using Active Directory on Ubuntu 22.04
I am installing a new Ubuntu 22.04 desktop, following the canonical instructions here for adding the computer to the domain, adding it to the domain during installation. The machine is able to pull ...
0
votes
1
answer
402
views
Active directory users based on numeric values not able to login
Active directory based on numeric(01012578) not able to login
but wit the same DC we are able to login using name username Eg. syed
client o.s 20.0.4 desktop version
AD script
#!/bin/sh
#Linux
...