Questions tagged [active-directory]

Questions that relate to Ubuntu using this directory service created by Microsoft. Compatibility questions include LDAP, Kerberos and DNS-based naming and other network information.

Filter by
Sorted by
Tagged with
0
votes
1answer
9 views

LDAP binding error

I have a secure LDAP configured on a Active Directory. I am trying to query it using the ldapsearch command on Ubuntu. Following are dummy details: Domain Name: dc=qwerty,dc=com LDAP Server: ...
0
votes
0answers
39 views

Active Directory User Can't Authenticate in ubuntu machine

******root@winlinubcl2:~# sudo realm join -U Administrator localhost.com realm: Already joined to this domain root@winlinubcl2:~# id administrator@localhost.com id: ‘administrator@localhost.com’: no ...
0
votes
0answers
16 views

Anyone happen to know if with 21.04 AD integration, tighter integration with Certificate Services is being considered?

As an admin in a mixed environment, the biggest bane of my existence it trying to issue internal certs. Right now the only option is using NDES/SCEP, but Microsoft apparently has no interest in ...
0
votes
0answers
33 views

21.04: Use Active Directory option grayed out

I am trying to set up Ubuntu 21.04 to use Active Directory. I have the VM installed on a ESXi host connected to AD. AD is 2016 schema, on-site, not Azure. The VM does get a correct IP address (I ...
0
votes
1answer
46 views

How to use fingerprint reader with Ubuntu 20.04 and sssd (active directory)

I've been trying to get fingerprint login working for a new Lenovo ThinkPad P15v, and had seen the information here and other places suggesting that fingerprint login was available in default 20.04 in ...
0
votes
0answers
60 views

Ubuntu 21.04 can not join to domain with user name.surname

During the installation Ubuntu 21.04 in menu "Configure Active Directory" can not use Domain administrator username like name.surname Error: May only contain lower-case letters, digits, ...
1
vote
1answer
205 views

Mount.cifs with krb5 fails on 20.04 LTS

I have a Synology NAS and multiple Ubuntu Clients in my network. I setup Active Directory integration on the clients following the instructions here https://ubuntu.com/server/docs/service-sssd. ...
0
votes
1answer
464 views

How can AD users on Ubuntu client seamlessly access files and folders on Synology DC?

I have joined a PC running Ubuntu Studio 18.04 to an AD domain managed by Synology Directory Server. I can now log into the Ubuntu PC with the credentials of a domain user, but there are still two ...
0
votes
0answers
20 views

Active Directory with Jetson Nano

I am trying to get my Jetson Nano 4gb to authenticate users via a trusted Active Directory. The network has two domains: the local domain (local.example.com), which the Jetson Nano is directly ...
0
votes
0answers
136 views

Ubuntu 21.04 - AD Integrated From Installer - Cannot use graphical login for AD user

I have a Samba4 AD running on my network (let's call it myhome.net) I have a user named aduser configured. I joined my domain from the installer, but when I first logged into the system with my local ...
1
vote
1answer
86 views

Domain AD users aren't get discovered after adding Ubuntu under AD domain control

I've Joined a my ad domain with my Ubuntu 20.04.2 LTS VM (I followed this doc) and I'veJoined the AD domain with Ubuntu as sudo realm join -U Administrator win2016.local realm list show below output ...
0
votes
1answer
398 views

Ubuntu 21.04 | Join Office365 Active Directory when installing

Having read that Ubuntu 21.04 supports joining active directory when installing I quickly downloaded the newest version and gave it a spin. Sadly it doesn't really work and just freezes the ...
0
votes
1answer
3k views

Is there any modern Active Directory management programs for Linux

My boss has told me that I would be allowed to run Linux (instead of Windows7) on my work PC if I can still manage MS Active Directory within it - not using an RDP. I searched and see suggestions ...
0
votes
1answer
4k views

Remove a domain user account from local workstation, not from AD Domain

I have an AD Domain run by Samba4 and have successfully joined Ubuntu workstations to that domain and able to add users and log into the workstation with domain accounts. Now, I am needing to remove ...
0
votes
0answers
40 views

polkit, can not choose admin user (ad integrated)

I have an AD integrated Ubuntu Desktop 20.04. When I open a program (like Firewall) it asks for a password. However, I only want "Domain Admins" to have admin rights. "Domain Admins&...
1
vote
1answer
3k views

Enrolled in AD realm, but can´t resolve AD users with getent passwd

Situation: Windows SBS Server (AD controller, DNS server), Proxmox 4.1 server hosting a Ubuntu 14.04 lxc container. What I want to achieve: Integrate the Ubuntu container into the AD, so that I´m ...
0
votes
0answers
366 views

Ubuntu 18.04 and 20.04 SSSD with LDAPS not working

Due ADV 190023 I need to reconfigure my current working AD integrated Ubuntu servers (SSSD, Kerberos, LDAP) to use port 686 (LDAPS). Network team will be blocking port 389 in the near future. https://...
0
votes
0answers
18 views

Computers can only reach the internet if added to the Active Directory domain, why?

I am new to my company and need to set up some Ubuntu servers. Unfortunately the AD system was set up by someone no longer here. DHCP and DNS are both managed by Windows services. When I connect an ...
0
votes
0answers
71 views

Ubuntu 20.04 joined to AD, how to edit login permissions from the Windows DC

I joined an Ubuntu 20.04 server VM to a windows Server 2008 R2 domain according to this guide. In Step 6 it limits the user base locally. I did that as well, but I was wondering if changing who can ...
0
votes
0answers
406 views

SSSD with AD: How can I ensure AD groups not missing when ldap_id_mapping = False?

Why does altering ldap_id_mapping present different group memberships on the same AD user? I was hoping to have my UID/GID be the same as AD with IDMU: SSSD with AD: use UID/GID specified on domain ...
0
votes
0answers
68 views

freeipa server installtion error

Done configuring kadmin. Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes [1/28]: configuring certificate server instance ipaserver.install.dogtaginstance: CRITICAL Failed to ...
2
votes
1answer
5k views

How to add Active Directory users as sudoers

I'm following this article. What I've done: I can connect to Active Directory I can login to the Active Directory Now what I'm looking for is a way to make any active directory user a sudoer. I'm ...
12
votes
8answers
93k views

Add AD Domain user to sudoers from the command line

I'm setting up an Ubuntu 11.04 server VM for use as a database server. It would make everyone's lives easier if we could have folks login using windows credentials and perhaps even make the machine ...
0
votes
1answer
388 views

Samba Domain Member Not Pulling AD Group/User info

We're upgrading from an old NT4 domain, and I've just got Samba AD setup on a new Ubuntu 20.04 server. Current Samba version is 4.11.6-Ubuntu on both the DC and the Domain Member Server which is also ...
0
votes
0answers
517 views

How to update Samba 4.3.11 (Ubuntu 16.04) to 4.7.6 (Ubuntu 18.04) and further to 4.11.6 (Ubuntu 20.04)?

There is a Ubuntu server 16.04 as an Active Directory controller. I need to update it or install a new AD controller and transfer domain and user data to it from the old server. After a simple ...
3
votes
4answers
11k views

Edit Sudoers file to allow sudo rights to a AD domain group

I recently managed to get my Ubuntu Server 18.04 machine connected to my companies Windows AD. I am able to login with my AD credentials however I want to take it a step further... This is the ...
0
votes
0answers
130 views

Using SSSD and realmd to join domain on Ubuntu 18.04 desktop, but after idle period users IDs not recognized

Running Ubuntu 18.04, I can join a machine to the domain successfully, and if I log in to the machine immediately via the GUI with an AD account it will work and I will be able to run id <username&...
2
votes
2answers
6k views

Active Directory users unable to change passwords [SSSD]

I've set up an Ubuntu 16.04 system to join a AD domain following the instruction set here. I can login with AD users and everything is working correctly there, however AD users are unable to change ...
0
votes
0answers
44 views

Active Directory sudoers Gnome Apps

I'm using ubuntu 20.04.1 in my Active Directory environment. It's joined to the domain with "realm join example.com". Admins groups are added to sudoers. Home dirs are ok. I can login into ...
0
votes
0answers
29 views

SSSD with AD: Totally confused why realmd keeps overwriting my sssd.conf

I've been struggling with this for a while now. I'm trying to make sure my AD IDs are consistent across all my machines. I managed to get sssd to use AD UID/GID earlier by setting ldap_id_mapping = ...
1
vote
0answers
236 views

Active Directory Ubuntu 20.04 [closed]

I'm adding my ubuntu 20.04 to my company's Active Directory I set everything up correctly, all the testicles work, he even pulls the name user, when logging in but it appears as invalid password, I ...
1
vote
1answer
511 views

SSSD with AD: use UID/GID specified on domain server instead of something random?

I have an AD environment with IDMU and specified UID/GID for my domain users. SSSD-connected domain user does not share the same UID/GID on Ubuntu as AD. Here's the default unedited sssd.conf in ...
0
votes
0answers
69 views

AD user cannot log in after password change

I have an ubuntu server joined to my domain. After a user changed his AD password, he cannot SSH into ubuntu. Just gives access denied. I have used pam_tally2 to unlock the account, but it does not ...
0
votes
0answers
212 views

vsftpd Authenticating FTP server against Windows AD server not working

I'm new to Linux, and I'm trying to authenticate vsftpd server against my Active directory server. I have joined the domain successfully following this article: https://nerdonthestreet.com/wiki?find=...
0
votes
0answers
150 views

Ubuntu vsftpd hide other folder and disable possibility to browse them

I'm relatively new to Linux. I am creating an SFTP server using vsftpd on ubuntu 20. I'm authenticating users with Active directory. The problem I have, is that even though the user land in their home ...
0
votes
0answers
639 views

Samba AD DC no longer accepts login using domain accounts

I've been trying to setup Samba AD DC on Ubuntu 20.04 for a good while now and with some success. I use the server which runs this Samba instance as my primary workstation, so I need to be able to log ...
0
votes
0answers
183 views

how does one configure folder redirection on ubuntu clients?

I am wondering how one configures folder redirection on Ubuntu(or any linux) clients. Not looking to use fstab. using fstab as mentioned here causes issues with PAM, and doesn't create home ...
2
votes
0answers
2k views

I have a problem with domain trust between Samba and AD

I configured Samba PDC and AD Domain. Here is my Topology. And I saw that Samba PDC loading AD users. With getent passwd command and wbinfo -ug command. Here is my getent passwd result. root@Lin-srv:~#...
0
votes
1answer
3k views

Ubuntu 20.04 fails to join Windows AD domain

I am new with Ubuntu / Linux. I am attempting to join a Ubuntu 20.04 machine to a Windows domain using the following command: sudo realm join -v ad1.example.com This fails with the following error: ...
0
votes
0answers
211 views

Sysvolcheck returns error on backup DC upon each replication

I have two DCs in my Samba AD with sysvol replication via rsync set up to run every 5 minutes. On the PDC, samba-tool ntacl sysvolcheck returns no errors. On the BDC, samba-tool ntacl sysvolcheck ...
0
votes
1answer
150 views

On Samba DCs running on Ubuntu Server 20.04, is DNS resolution handled by by the netplan config or by resolv.conf?

Apologies if this might be a silly question. I'm reading that best practice when having two DCs in a domain is to point their DNS addresses at each other and also at themselves. So: DC1 nameservers = ...
0
votes
1answer
21 views

How to get Active Directory domain name from windows 10 client

I install OpenLDAP as an Active Directory on ubuntu 18.04 and I connect my windows client by pGina. Its work fine but when ping my server ip address it reply but if I ping my host name nad.nassa.lan ...
0
votes
0answers
82 views

Can I configure a Samba AD with RFC2307 and join another Samba domain member with idmap RID backend?

I have a Samba AD DC that I provisioned with --rfc2307. I also have a separate Samba file server that is joined to this domain, and its smb.conf is configured with idmap_rid. So far everything works ...
1
vote
1answer
523 views

How to solve "not found:(NXDOMAIN)

I install Samba in ubuntu 18.04 showing. After install samba, I test the installation by #samba-tool domain level show:(it give me the result) Domain and forest function level for domain 'DC=nassa, DC=...
0
votes
1answer
390 views

Ubuntu 20 on Active Directory — wrong user and group IDs assigned

I'm trying to join my Ubuntu 20 virtual machine to our Active Directory setup. Everything seems to be working, except the user IDs shown for users do not match what is in Active Directory. This means ...
0
votes
1answer
1k views

pam / ad issue with lightdm

im having issues logging in the desktop via AD with my current setup with sssd, kerberos, samba, and AD. heres the output of the auth.log file. it seems that pam and lightdm aren't working well with ...
0
votes
0answers
35 views

Winbind users are asked local admin user's password

I have several Ubuntu and Linux Mint machines authenticated with AD using winbind. I have a line in my /etc/sudoers file which gives the domain users the ability to use sudo and this works fine, ...
1
vote
1answer
1k views

SFTP with Active Directory authentication (RealmD and SSSD)

What it should look like: My Ubuntu VM is connected through SSSD to my Active Directory Server. I want an SFTP Server that jails incomming Users that have a specific AD Group (USR-SFTP@domain) ...
0
votes
0answers
36 views

ldap agent and active directory

I have a question regarding LDAP client configuration on a Ubuntu server. Is it necessary to install a LDAP server, for LDAP clients to communicati to? Or can LDAP clients communicate directly to the ...
0
votes
0answers
106 views

Unable to access Ubuntu based SMB share on Windows 10 and phone

I cannot access Ubuntu SMB share on Windows 10, running on vm on proxmox. { # Samba Server Configration # With Active Directory Authtication [global] workgroup = MANJOT password server =...

1
2 3 4 5