Questions tagged [active-directory]
Questions that relate to Ubuntu using this directory service created by Microsoft. Compatibility questions include LDAP, Kerberos and DNS-based naming and other network information.
227
questions
0
votes
0
answers
18
views
Administrator option is disabled for domain accounts in Ubuntu 22.04
I am the domain admin. My domain account in my system have administrator option disabled. I have tried adding the user to sudoers. That didn't work. Any other way? When opening the software centre or ...
0
votes
1
answer
180
views
Can't login to Active Directory although Ubuntu 22.04.3 is joined to Active Directory successfully
I have an Active Directory setup on a physical server Windows Server 2022 Datacenter Edition. I'm trying to join an Ubuntu 22.04.3 virtual machine to that AD. I follow the guide at this link (https://...
- 1
0
votes
1
answer
32
views
Anbox and OpenLDAP to Active Directory for SSO
Anbox and OpenLDAP to Active Directory for SSO
We would love to use Anbox with our Active Directory for user authentication.
We have Windows 10 OS Instance using Active Direction for logon, being able ...
1
vote
1
answer
156
views
Logins like [email protected] cause profile files to be owned by root
The users at my school are used to logging in to email, windows etc with a login [email protected] (authenticated with Active Directory via LDAP). Unfortunately this is causing havoc and corrupting ...
- 171
0
votes
0
answers
83
views
Can't login to domain users after enroll successfully Ubuntu 22.04
I'm working on ubuntu 22.04.
I installed all the required packages and enroll successfully to my domain.
my dc is on Windows server 2008 r2.
when I'm trying to login to any domain user after I'm ...
- 1
0
votes
0
answers
107
views
Give access to specific Active Directory Groups and local users
I have a server which is connected to the active directory, everything works fine (at least I guess) and everyone can access the server with their AD credentials, but I wan only specific group to be ...
- 174
2
votes
0
answers
29
views
Sudo access using AD without using FQDN
I've been able to get my server setup where it will allow me to use my AD credentials to login, and sudo works as well, but only if I sign in using myu[email protected].
I changed the /etc/sssd/sssd/...
- 21
0
votes
1
answer
193
views
Some Azure Active Directory users are not able to login to Ubuntu Machines
Some AD Users are not able to access Ubuntu machine in the domain, the error after trying to access the server via ssh I get in /var/log/auth.log:
Jun 14 11:50:36 SR sshd[1467842]: Invalid user ...
- 174
0
votes
0
answers
39
views
How to allow AD group to run elevated commands from the desktop in Ubuntu 22.04
I've seen a number of similar questions, but none that quite cover my situation.
I have an Ubuntu desktop 22.04 system, setup for authentication against a Active Directory. I have a domain group ...
- 111
0
votes
0
answers
181
views
Error: "System error" when joining server to Active Directory with SSSD
I am trying to join an Ubuntu 20.04LTS server to an Active Directory using the instructions found here. Everything goes well until I get to test the login in this section:
Finally, how about we try a ...
- 1
0
votes
0
answers
70
views
Realm join registers additional bridge IP in DNS
I was just joining an Ubuntu Server 22.04 LTS machine with an existing Docker environment to our AD domain, but got a slightly odd result with the DNS registration.
When installing Docker, a bridge ...
0
votes
0
answers
32
views
Samba Kerberos Can Add Computer to AD Network but Getting Login Error After Restart
Hi my samba working fine properly but getting error after an update
Im getting an error of samba_dlz: disallowing update of signer, error=insufficient access
- 111
0
votes
2
answers
647
views
After logging in with my AD credentials, why can I not change any settings?
I've been setting up a new machine with Ubuntu 22.04 Desktop. And since I'm on the IT team, I've been using it as an opportunity to broaden my knowledge of configuring Ubuntu for a work environment, ...
- 11
0
votes
0
answers
321
views
Ubuntu Server Domain Join via realmd/sssd DC Windows Server 2022 Insider/Preview
I want to join an Ubuntu Server via realmd/sssd into a MS Windows Active Directory domain.
The domain controller is a Windows Server 2022 Insider.
All packages are installed and configured as far as I ...
user1654098
0
votes
0
answers
51
views
Unable to RDP Ubuntu 22 server by Active Directory Account
I recent joined my ubuntu 22 server on active directory account, I already enable the remote login but I was unable to remote login to my server using AD account. I already test the local account I ...
1
vote
0
answers
52
views
sssd do not use corporate domain in PTR record when deployed with vSphere
We have a workflow that deploy Ubuntu 20.04.5 LTS in vSphere VM with automatic AD integration using the following commands:
#!/bin/bash
if [ x$1 == x"precustomization" ]; then
rm -v /...
- 11
0
votes
0
answers
107
views
Samba 4 AD user doesn't update with new password
Running Samba 4 Active Directory on AWS EC2 Ubuntu Server 20.04 Instance. I'm able to join the domain with Windows and Ubuntu. However, when changing ad user password, the windows based laptop update ...
0
votes
1
answer
560
views
Samba won't join computers to domain anymore
DISCLAMER:
I'm still trying to fully learn and understand how to properly maintain a samba domain controller.
The Problem:
I had a working samba installation with AD controlle but now, just a month ...
- 11
0
votes
0
answers
903
views
Domains are not found after joining Ubuntu 22.04 to Active Directory using SSSD
Since Ubuntu 20.04 we are using SSSD and realmd to join these server to one of our Active Directory domains. This works (almost) out-of-the-box.
For Ubuntu 22.04, however, we run into issues. And I am ...
1
vote
1
answer
409
views
Ubuntu 22.04 Desktop Installer - Stuck on Active Directory page, doesn't like my domain name value?
So, I'm installing 22.04 desktop and I get to the "Who Are You" page, fill in username/password/etc on there, and I check the "use Active Directory" checkbox at the bottom of that ...
- 11
0
votes
0
answers
73
views
How to truncate domain part from username in pam_mount?
I am currently experimenting with the new Active Directory Features in Ubuntu 22.04. I joined the domain with my client and everything worked fine so far. However I want to mount the users home ...
0
votes
1
answer
2k
views
Stuck joining Ubuntu Studio 22.04.1 to Active Directory
I am trying to join my freshly installed Ubuntu Studio 22.04.1 to an AD domain hosted on my Synology NAS, by following the instructions in this white paper, starting on page 11 ("Joining After ...
- 356
0
votes
0
answers
63
views
Working with windows shared file in ubuntu
We are using windows(8.1 & 10) and ubuntu(20.04) in our network environment. When we open a xls,word file in ubuntu which is already opened in windows it is not prompting as a read only and also ...
0
votes
0
answers
4k
views
Login failure after successfully adding Ubuntu 22.04 machine to the domain
I have successfully added my machine to my company's domain. When I try to login with my domain credentials at the login screen or via su I see a message "Applying machine settings" and the ...
- 131
0
votes
1
answer
357
views
Ldap - access for specific machines
We have LDAP server with 300+ users-10 servers with different group. when we creating the users, every user has access of all the 10 servers. So I want to restrict the user access.
So LDAP user or ...
- 31
0
votes
0
answers
1k
views
su: Permission denied as root
I added my Ubuntu Machine to AD and I can do an ID these user accounts
but when I'm logged in as root I can't su to these accounts
e.g.
su: Permission denied
any reason why?
is there something I miss ...
- 9
2
votes
0
answers
614
views
Automatic Login with AD domain user on Ubuntu 20.04 or 22.04
Does anyone know how to configure Ubuntu LTS 20.04 or 22.04 (Using default Gnome desktop) to perform autologin using a domain user account?
The client has been joined to the domain and it is possible ...
- 21
1
vote
0
answers
678
views
22.04 Samba with AD user - cannot access from Windows
Fresh 22.04 install. Only other configuration is NFS (which is working). Directories are 777. Configuration files:
sssd.conf
[sssd]
domains = home.net
config_file_version = 2
services = nss, pam
[...
- 11
0
votes
1
answer
800
views
Logged out immediately after login using Active Directory on Ubuntu 22.04
I am installing a new Ubuntu 22.04 desktop, following the canonical instructions here for adding the computer to the domain, adding it to the domain during installation. The machine is able to pull ...
0
votes
1
answer
28
views
How to select a different user to authenticate Livepatch with?
I am an IT Admin and recently set up an Ubuntu 18.04 laptop for one of my users. As apart of the process, I create a local admin account to set things up and join the computer to our Active Directory ...
- 13
1
vote
2
answers
7k
views
GUI for joining AD after installation - Ubuntu 22.04
as we know, we can join AD domain in an installation process, but is there GUI to do this after install? like its super easy on Mac and Windows?
If there is no GUI, how can i make a request about it?
- 21
0
votes
0
answers
4k
views
How to Allow Samba Shares for Domain users?
I have a samba server with shares using POSIX ACL.
We installed the Active Directory domain controller by using Turnkey image, I joined Ubuntu Server to the domain following this , Installed ...
- 21
0
votes
2
answers
2k
views
Slow login with Active Directory on Ubuntu 20.04
I am running an Ubuntu 20.04 machine configured to use my organisation's Active Directory (AD) setup.
There is a significant difference in the login time depending on whether I am connected to my ...
- 113
2
votes
0
answers
266
views
Active Directory SSSD - Change Password on GDM login Screen
Looking to see if I can expand the capabilities of the SSSD/AD system with GDM, or SDDM.
We want users to be able to change their Active Directory password through our Ubuntu machines, if their ...
1
vote
1
answer
612
views
Ubuntu 20.04 LTS - Unattended Samba upgrade broke our setup
We are using Ubuntu 20.04 LTS on some servers, including a Samba Active Directory DC and a Samba File Server using winbind authentication.
On Nov 12th, an unattended upgrade (related to USN-5142-1) ...
- 11
0
votes
1
answer
2k
views
Authentication fails AD
Good day to all. Raised Ubuntu 20.04, entered it into the domain. However, it turned out that the user, after a reboot, cannot log in to the system under a domain account. BUT, if you cut off from the ...
- 1
0
votes
0
answers
425
views
Can't login with AD account
I can't login with an AD user account with freshly installed Ubuntu 21.10 (also tried 20.04). id <AD user> works like expected. When I try to login ubuntu keeps saying "can`t login with ...
0
votes
1
answer
324
views
Active directory users based on numeric values not able to login
Active directory based on numeric(01012578) not able to login
but wit the same DC we are able to login using name username Eg. syed
client o.s 20.0.4 desktop version
AD script
#!/bin/sh
#Linux
...
0
votes
1
answer
399
views
Openldap upgrade from 2.4 to 2.5
we are using Openldap version Version: 2.4.45+dfsg-1ubuntu1.10
how can I upgrade or migrate to 2.5?
Thanks
- 31
1
vote
0
answers
2k
views
Ubuntu 20.04 LTS sssd update from 2.2.3-3ubuntu0.4 to 2.2.3-3ubuntu0.6 broke AD logins
I have a number of servers running Ubuntu 20.04 LTS joined to Windows Active Directory via this procedure - https://www.server-world.info/en/note?os=Ubuntu_20.04&p=realmd
Over this weekend, I ran ...
- 11
1
vote
1
answer
2k
views
How to specify domain controller with realm command for joining active directory?
While joining Ubuntu 20.04 machine to AD domain using realm command, I want to specify the local domain controller, is this possible?
realm -v join ad-domain.com -u administrator -dc dc1.ad-domain.com
...
- 11
0
votes
1
answer
1k
views
LDAP binding error
I have a secure LDAP configured on a Active Directory.
I am trying to query it using the ldapsearch command on Ubuntu.
Following are dummy details:
Domain Name: dc=qwerty,dc=com
LDAP Server: ...
- 101
0
votes
0
answers
88
views
Anyone happen to know if with 21.04 AD integration, tighter integration with Certificate Services is being considered?
As an admin in a mixed environment, the biggest bane of my existence it trying to issue internal certs. Right now the only option is using NDES/SCEP, but Microsoft apparently has no interest in ...
- 121
2
votes
1
answer
677
views
21.04: Use Active Directory option grayed out
I am trying to set up Ubuntu 21.04 to use Active Directory.
I have the VM installed on a ESXi host connected to AD. AD is 2016 schema, on-site, not Azure. The VM does get a correct IP address (I ...
- 21
0
votes
1
answer
973
views
How to use fingerprint reader with Ubuntu 20.04 and sssd (active directory)
I've been trying to get fingerprint login working for a new Lenovo ThinkPad P15v, and had seen the information here and other places suggesting that fingerprint login was available in default 20.04 in ...
- 1,383
1
vote
1
answer
686
views
Ubuntu 21.04 | Join Office365 Active Directory when installing
Having read that Ubuntu 21.04 supports joining active directory when installing I quickly downloaded the newest version and gave it a spin.
Sadly it doesn't really work and just freezes the ...
- 11
2
votes
1
answer
5k
views
Mount.cifs with krb5 fails on 20.04 LTS
I have a Synology NAS and multiple Ubuntu Clients in my network. I setup Active Directory integration on the clients following the instructions here https://ubuntu.com/server/docs/service-sssd.
...
- 161
1
vote
1
answer
877
views
Domain AD users aren't get discovered after adding Ubuntu under AD domain control
I've Joined a my ad domain with my Ubuntu 20.04.2 LTS VM (I followed this doc) and I'veJoined the AD domain with Ubuntu as
sudo realm join -U Administrator win2016.local
realm list show below output
...
- 111
0
votes
1
answer
3k
views
Samba Domain Member Not Pulling AD Group/User info
We're upgrading from an old NT4 domain, and I've just got Samba AD setup on a new Ubuntu 20.04 server. Current Samba version is 4.11.6-Ubuntu on both the DC and the Domain Member Server which is also ...
- 98
1
vote
0
answers
2k
views
SSSD with AD: How can I ensure AD groups not missing when ldap_id_mapping = False?
Why does altering ldap_id_mapping present different group memberships on the same AD user?
I was hoping to have my UID/GID be the same as AD with IDMU: SSSD with AD: use UID/GID specified on domain ...
- 1,216