Questions tagged [active-directory]

Questions that relate to Ubuntu using this directory service created by Microsoft. Compatibility questions include LDAP, Kerberos and DNS-based naming and other network information.

Filter by
Sorted by
Tagged with
0 votes
1 answer
23 views

Ldap - access for specific machines

We have LDAP server with 300+ users-10 servers with different group. when we creating the users, every user has access of all the 10 servers. So I want to restrict the user access. So LDAP user or ...
user avatar
0 votes
0 answers
64 views

su: Permission denied as root

I added my Ubuntu Machine to AD and I can do an ID these user accounts but when I'm logged in as root I can't su to these accounts e.g. su: Permission denied any reason why? is there something I miss ...
user avatar
  • 9
0 votes
0 answers
33 views

Unable to login AD users starting with a number - Ubuntu20.04-desktop

I have Ubuntu20.04-desktop installed on my Notebook and am unable to login active directory users starting with numbers (f.e. "1234"). To be specific: I can not login via the default login ...
user avatar
  • 1
0 votes
0 answers
75 views

Automatic Login with AD domain user on Ubuntu 20.04 or 22.04

Does anyone know how to configure Ubuntu LTS 20.04 or 22.04 (Using default Gnome desktop) to perform autologin using a domain user account? The client has been joined to the domain and it is possible ...
user avatar
  • 1
1 vote
0 answers
30 views

22.04 Samba with AD user - cannot access from Windows

Fresh 22.04 install. Only other configuration is NFS (which is working). Directories are 777. Configuration files: sssd.conf [sssd] domains = home.net config_file_version = 2 services = nss, pam [...
user avatar
0 votes
0 answers
63 views

22.04: settting up user accounts via Active Directory

After installing 22.04 (desktop) with a local user account, what are the specific steps to set up user accounts via Active Directory?
user avatar
0 votes
0 answers
123 views

Logged out immediately after login using Active Directory on Ubuntu 22.04

I am installing a new Ubuntu 22.04 desktop, following the canonical instructions here for adding the computer to the domain, adding it to the domain during installation. The machine is able to pull ...
user avatar
0 votes
1 answer
14 views

How to select a different user to authenticate Livepatch with?

I am an IT Admin and recently set up an Ubuntu 18.04 laptop for one of my users. As apart of the process, I create a local admin account to set things up and join the computer to our Active Directory ...
user avatar
  • 3
0 votes
0 answers
101 views

SeDiskOperatorPrivilege fail password ok

I need to share a ubuntu 20.04 server folder using windows ACL The server is set as a AD member, i can see the server in the "users & computer" app on win 10 client. To setup samba i'm ...
user avatar
  • 1
1 vote
1 answer
1k views

GUI for joining AD after installation - Ubuntu 22.04

as we know, we can join AD domain in an installation process, but is there GUI to do this after install? like its super easy on Mac and Windows? If there is no GUI, how can i make a request about it?
user avatar
0 votes
0 answers
43 views

ERROR_SEM_TIMEOUT [code 0x00000079] When Trying to Join Ubuntu to Domain

I'm trying to join ubuntu (20.04) to the domain using PBIS-OPEN but when I run: $ sudo domainjoin-cli join domain.local $ Username: admin.residentes $ Joining to AD Domain: domain.local $ With ...
user avatar
0 votes
0 answers
354 views

How to Allow Samba Shares for Domain users?

I have a samba server with shares using POSIX ACL. We installed the Active Directory domain controller by using Turnkey image, I joined Ubuntu Server to the domain following this , Installed ...
user avatar
0 votes
0 answers
144 views

SSSD service problems / not able to log on to Active Directory

I have created a Zentyal Server with SAMBA emulating ActiveDirectory 2008r2. I have an Ubuntu Desktop server running 20.04.4 I added the server to the AD using Cockpit. The machine account is present. ...
user avatar
0 votes
0 answers
27 views

Add/merge AD user with local user Ubuntu 21.10

I am logged in to my ubuntu machine with an AD user. I have docker up and running. When I run a command from the docker container (e.g. php artisan make:model Article -m) that creates a file the file ...
user avatar
0 votes
0 answers
245 views

Slow login with Active Directory on Ubuntu 20.04

I am running an Ubuntu 20.04 machine configured to use my organisation's Active Directory (AD) setup. There is a significant difference in the login time depending on whether I am connected to my ...
user avatar
  • 113
2 votes
0 answers
98 views

Active Directory SSSD - Change Password on GDM login Screen

Looking to see if I can expand the capabilities of the SSSD/AD system with GDM, or SDDM. We want users to be able to change their Active Directory password through our Ubuntu machines, if their ...
user avatar
0 votes
0 answers
99 views

Ubuntu Desktop 20.04 - Authenticate to multiple Active Directory domains of the same forrest

There is an Active Directory forrest made up of 4 domains, a root domain root.local and 3 child domains called resource (resource.root.local), companyA (companyA.root.local) and companyB (companyB....
user avatar
1 vote
1 answer
452 views

Ubuntu 20.04 LTS - Unattended Samba upgrade broke our setup

We are using Ubuntu 20.04 LTS on some servers, including a Samba Active Directory DC and a Samba File Server using winbind authentication. On Nov 12th, an unattended upgrade (related to USN-5142-1) ...
user avatar
0 votes
1 answer
617 views

Authentication fails AD

Good day to all. Raised Ubuntu 20.04, entered it into the domain. However, it turned out that the user, after a reboot, cannot log in to the system under a domain account. BUT, if you cut off from the ...
user avatar
0 votes
0 answers
240 views

Can't login with AD account

I can't login with an AD user account with freshly installed Ubuntu 21.10 (also tried 20.04). id <AD user> works like expected. When I try to login ubuntu keeps saying "can`t login with ...
user avatar
0 votes
0 answers
68 views

Ubuntu 18.04 bound to AD using PowerBroker Identity Services Open (PBISO) not using same AD UID

I'm encountering the issue stated on an Ubuntu 18.04 test VM. Previously, AD UIDs are the same on the user when logging in on Ubuntu but somehow it's not doing that recently. Configuration guide being ...
user avatar
0 votes
0 answers
151 views

Ubuntu Denies Active Directory Logon for Single User

I have an atypical conflict occurring with Ubuntu 18.04 or 20.04 resolving Windows domain credentials. The issue is limited to a single user, but their account works without issue from Windows devices....
user avatar
0 votes
0 answers
45 views

Intermitent issues entering AD password when using VPN on Ubuntu 20.04

I log into my ubuntu20.04 laptop using my companies AD credentials, it's connected to the kerberos AD realm and this works fine in general. We also have a VPN which I connect to through a modified ...
user avatar
  • 143
0 votes
0 answers
315 views

Ubuntu 20.04 SSSD-KRB5 authentication with expired password problem

I need some help to troubleshoot sssd/krb5 error. Now i have Ubuntu 16.04 clients and want to upgrade it to 20.04. /etc/sssd/sssd.conf and /etc/krb5.conf are the same on both clients. All things work ...
user avatar
0 votes
0 answers
118 views

Openldap upgrade from 2.4 to 2.5

we are using Openldap version Version: 2.4.45+dfsg-1ubuntu1.10 how can I upgrade or migrate to 2.5? Thanks
user avatar
1 vote
0 answers
967 views

Ubuntu 20.04 LTS sssd update from 2.2.3-3ubuntu0.4 to 2.2.3-3ubuntu0.6 broke AD logins

I have a number of servers running Ubuntu 20.04 LTS joined to Windows Active Directory via this procedure - https://www.server-world.info/en/note?os=Ubuntu_20.04&p=realmd Over this weekend, I ran ...
user avatar
0 votes
1 answer
346 views

How to specify domain controller with realm command for joining active directory?

While joining Ubuntu 20.04 machine to AD domain using realm command, I want to specify the local domain controller, is this possible? realm -v join ad-domain.com -u administrator -dc dc1.ad-domain.com ...
user avatar
0 votes
1 answer
556 views

LDAP binding error

I have a secure LDAP configured on a Active Directory. I am trying to query it using the ldapsearch command on Ubuntu. Following are dummy details: Domain Name: dc=qwerty,dc=com LDAP Server: ...
user avatar
0 votes
0 answers
63 views

Anyone happen to know if with 21.04 AD integration, tighter integration with Certificate Services is being considered?

As an admin in a mixed environment, the biggest bane of my existence it trying to issue internal certs. Right now the only option is using NDES/SCEP, but Microsoft apparently has no interest in ...
user avatar
0 votes
1 answer
330 views

21.04: Use Active Directory option grayed out

I am trying to set up Ubuntu 21.04 to use Active Directory. I have the VM installed on a ESXi host connected to AD. AD is 2016 schema, on-site, not Azure. The VM does get a correct IP address (I ...
user avatar
  • 1
0 votes
1 answer
533 views

How to use fingerprint reader with Ubuntu 20.04 and sssd (active directory)

I've been trying to get fingerprint login working for a new Lenovo ThinkPad P15v, and had seen the information here and other places suggesting that fingerprint login was available in default 20.04 in ...
user avatar
  • 1,273
0 votes
1 answer
589 views

Ubuntu 21.04 | Join Office365 Active Directory when installing

Having read that Ubuntu 21.04 supports joining active directory when installing I quickly downloaded the newest version and gave it a spin. Sadly it doesn't really work and just freezes the ...
user avatar
1 vote
1 answer
2k views

Mount.cifs with krb5 fails on 20.04 LTS

I have a Synology NAS and multiple Ubuntu Clients in my network. I setup Active Directory integration on the clients following the instructions here https://ubuntu.com/server/docs/service-sssd. ...
user avatar
  • 31
1 vote
1 answer
174 views

Domain AD users aren't get discovered after adding Ubuntu under AD domain control

I've Joined a my ad domain with my Ubuntu 20.04.2 LTS VM (I followed this doc) and I'veJoined the AD domain with Ubuntu as sudo realm join -U Administrator win2016.local realm list show below output ...
user avatar
0 votes
1 answer
1k views

Samba Domain Member Not Pulling AD Group/User info

We're upgrading from an old NT4 domain, and I've just got Samba AD setup on a new Ubuntu 20.04 server. Current Samba version is 4.11.6-Ubuntu on both the DC and the Domain Member Server which is also ...
user avatar
1 vote
0 answers
1k views

SSSD with AD: How can I ensure AD groups not missing when ldap_id_mapping = False?

Why does altering ldap_id_mapping present different group memberships on the same AD user? I was hoping to have my UID/GID be the same as AD with IDMU: SSSD with AD: use UID/GID specified on domain ...
user avatar
  • 1,047
1 vote
1 answer
3k views

SSSD with AD: use UID/GID specified on domain server instead of something random?

I have an AD environment with IDMU and specified UID/GID for my domain users. SSSD-connected domain user does not share the same UID/GID on Ubuntu as AD. Here's the default unedited sssd.conf in ...
user avatar
  • 1,047
0 votes
0 answers
683 views

Ubuntu vsftpd hide other folder and disable possibility to browse them

I'm relatively new to Linux. I am creating an SFTP server using vsftpd on ubuntu 20. I'm authenticating users with Active directory. The problem I have, is that even though the user land in their home ...
user avatar
0 votes
0 answers
1k views

Samba AD DC no longer accepts login using domain accounts

I've been trying to setup Samba AD DC on Ubuntu 20.04 for a good while now and with some success. I use the server which runs this Samba instance as my primary workstation, so I need to be able to log ...
user avatar
  • 49
0 votes
2 answers
6k views

Ubuntu 20.04 fails to join Windows AD domain

I am new with Ubuntu / Linux. I am attempting to join a Ubuntu 20.04 machine to a Windows domain using the following command: sudo realm join -v ad1.example.com This fails with the following error: ...
user avatar
  • 1
0 votes
0 answers
288 views

Sysvolcheck returns error on backup DC upon each replication

I have two DCs in my Samba AD with sysvol replication via rsync set up to run every 5 minutes. On the PDC, samba-tool ntacl sysvolcheck returns no errors. On the BDC, samba-tool ntacl sysvolcheck ...
user avatar
0 votes
1 answer
113 views

How to get Active Directory domain name from windows 10 client

I install OpenLDAP as an Active Directory on ubuntu 18.04 and I connect my windows client by pGina. Its work fine but when ping my server ip address it reply but if I ping my host name nad.nassa.lan ...
user avatar
0 votes
1 answer
261 views

On Samba DCs running on Ubuntu Server 20.04, is DNS resolution handled by by the netplan config or by resolv.conf?

Apologies if this might be a silly question. I'm reading that best practice when having two DCs in a domain is to point their DNS addresses at each other and also at themselves. So: DC1 nameservers = ...
user avatar
0 votes
0 answers
143 views

Can I configure a Samba AD with RFC2307 and join another Samba domain member with idmap RID backend?

I have a Samba AD DC that I provisioned with --rfc2307. I also have a separate Samba file server that is joined to this domain, and its smb.conf is configured with idmap_rid. So far everything works ...
user avatar
1 vote
1 answer
1k views

How to solve "not found:(NXDOMAIN)

I install Samba in ubuntu 18.04 showing. After install samba, I test the installation by #samba-tool domain level show:(it give me the result) Domain and forest function level for domain 'DC=nassa, DC=...
user avatar
0 votes
1 answer
850 views

Ubuntu 20 on Active Directory -- wrong user and group IDs assigned

I'm trying to join my Ubuntu 20 virtual machine to our Active Directory setup. Everything seems to be working, except the user IDs shown for users do not match what is in Active Directory. This means ...
user avatar
1 vote
1 answer
3k views

SFTP with Active Directory authentication (RealmD and SSSD)

What it should look like: My Ubuntu VM is connected through SSSD to my Active Directory Server. I want an SFTP Server that jails incomming Users that have a specific AD Group (USR-SFTP@domain) ...
user avatar
0 votes
1 answer
1k views

How can AD users on Ubuntu client seamlessly access files and folders on Synology DC?

I have joined a PC running Ubuntu Studio 18.04 to an AD domain managed by Synology Directory Server. I can now log into the Ubuntu PC with the credentials of a domain user, but there are still two ...
user avatar
  • 186
1 vote
0 answers
295 views

SSSD Active Directory Integration with VSFTPD

My goal is to setup VSFTPD with AD authentication via SSSD. I ran through the article on Ubuntu's website here https://ubuntu.com/server/docs/service-sssd. I was able to join my domain, however ...
user avatar
  • 111
0 votes
0 answers
904 views

[sssd[krb5_child[22140]: No credentials cache found (filename: /tmp/

All of a sudden, new users cannot ssh into our ubuntu servers. When attempting, the connection will just close. I tried doing an su with my test user who has never logged into the server before and I ...
user avatar

1
2 3 4 5