Questions tagged [active-directory]
Questions that relate to Ubuntu using this directory service created by Microsoft. Compatibility questions include LDAP, Kerberos and DNS-based naming and other network information.
239
questions
0
votes
1
answer
3k
views
can't join ubuntu server 20.04 to active directory with samba-tool as dc
I'm trying to join a ubuntu server 20.04 to a Windows active directory with samba-tool as a domain controller, that way it will act as the backup domain controller in case of failure of the windows ...
- 2,196
0
votes
2
answers
7k
views
AD (PAM) authentication stopped working after security update
I have an Ubuntu 16.04 GIT server with AD authentication configured. Authentication stopped working yesterday while nothing on GIT server or AD has changed. Here's the error message:
pam_winbind(...
- 101
0
votes
1
answer
845
views
Get pwd EXPIRE_DATE
I am trying to get EXPIRE_DATE of pwd for an active directory user in ubuntu.
I can get information about the user with lslogins user but no information about password expire dates that are set in AD.
...
0
votes
1
answer
6k
views
Can't login ("Access Denied") with PBIS without network connection
I'm using PBIS (from pbis-open* packages) to log on my PC using Active Directory account. (I'm on Ubuntu 16.04)
It works fine as long as I have a network connection on the domain.
But when I'm ...
0
votes
1
answer
584
views
Forcing password policies - domain user management like Active Directory
Good topic: user management for 10+ ubuntu machines
The goal: force globally password policies on Ubuntu Desktop machines (force password change, force password complexity).
Would be good but not ...
- 147
0
votes
2
answers
2k
views
How can I use my Active Directory credentials to log in to my Linux machine?
I would like to use the same username/password to log in to my Linux machine as I do for a Windows machine that authenticates against Active Directory.
In particular, what I want is:
When I log in ...
- 3,382
0
votes
1
answer
1k
views
Mounting Network Share Folder using Active Directory Credentials
How do I mount a network share ( can be on startup or fstab ) in the windows server.
My Ubuntu is connected and login using Active Directory account, I need to find a way to let it mount department ...
- 101
0
votes
1
answer
1k
views
How to auto mount Windows mapped drives per user?
I have a deployment which consists of Windows AD with a share folder for each user.
An example for that : the user john has a share folder \IP/Mapped_Drives/john
SO, what I need is to auto mount these ...
0
votes
0
answers
34
views
Active Directory user group not updating
I updated my AD user account with new groups, and my Ubuntu 22.04 and 20.04 systems aren't getting the new groups.
I have to clear the cache and restart SSSD to fix it.
Is there a more permanent ...
- 693
0
votes
0
answers
20
views
Delay displaying Active directory user in GDM
After a lot of struggle, I have finally been able to make my laptop work not too bad with Active Directory/winbind authentication.
Anyway, I have an annoying issue that I can't figure out.
For the ...
0
votes
0
answers
61
views
Unable to join and authenticate ubuntu server with AD domain
We have followed up with the steps in the below ubuntu site to configure and join ubuntu server with windows AD domain.
https://ubuntu.com/server/docs/service-sssd-ad
Post completion of steps we are ...
- 1
0
votes
0
answers
49
views
Slow network traffic with DNS only after migrating Ubuntu Server 22.04.2 LTS to airgapped network
I have two networks in my environment, a main network and an offline/air-gapped network. The standard process for deploying Ubuntu servers to the air-gapped network is to clone a template VM on the ...
0
votes
0
answers
132
views
Can't login with domain user after ADSys installation - fetching policy fails, getting GPT.ini invalid argument error
I've implemented Adsys in a virtual environment containing a an ubuntu 22.04 pro and a regular ubuntu 20.04 and an AD server running windows server 2022.
Before installing the ADSys the computers had ...
- 1
0
votes
0
answers
38
views
Prevent root user to switch user to any Disabled AD user
root user is able to "su" to an user which is Disabled in AD.
As it's a security concern, need to prevent root user to su to any AD users, who is disabled in AD.
It should check the user ...
0
votes
1
answer
87
views
Trouble logging Active Directory from Windows Server 2022 to an Ubuntu Desktop 22.04 LTS
I actually joined the realm, but the problem is when I try to log in with an Active Directory user, I can't. I added the machine to the active directory via installation and everything is ok.
running ...
0
votes
0
answers
224
views
SSSD Configuration to Authenticate a one-way trusted domain user
I have a Microsoft "REDFOREST" Active Directory Deployment. I have my REDFOREST domain with all my user accounts. I have my "RESOURCE" domains that have a one-way trust of the ...
- 1
0
votes
0
answers
107
views
Ubuntu VM Full disk encryption, storing keys in Azure
We currently have a solution to have our data partition encrypted with the keys stored on the system partition to allow for booting without user interaction, but not our system partition as we have no ...
- 34.3k
0
votes
0
answers
102
views
Cannot make Active Directory offline connection persistent
After several weeks of tries and failure, I finally need to ask for help.
For starters, I use Ubuntu 22.04 LTS, that I have setup with winbind, PAM, Kerberos.
Overall, I am trying to make a ...
0
votes
0
answers
124
views
Active Directory Group Membership (refenced in the sudoers file) is Intermittent via SSH
ENVIRONMENT
We are operating several Ubuntu 22.04 systems. The systems are added to a Windows Active Directory Domain via the GUI as part of the initial configuration. We have an Active Directory ...
0
votes
0
answers
728
views
connecting 22.04 LTS to Active Directory: GSSAPI Error [...] (Server not found in Kerberos database)
I am trying to connect the Ubuntu computers of my department to our active directory which worked well for quiet some of them by now. However, currently I stuck with a computer that has recently been ...
- 1
0
votes
0
answers
90
views
How to use nslcd to bind windows AD
I try to use nslcd to auth by LDAP server, if openldap, works fine, but try to WindowsAD, always fail
but the similar config on CentOS is ok, I config the /etc/nslcd, /etc/nsswitch.conf, /etc/pam.d/...
0
votes
0
answers
293
views
ADsys Group Policy Objects - User Policies not Caching or Processing
I've got a 22.04 system joined to Active Directory, ADsys installed, a few group policies created. User authentication works fine, machine/computer policies are applying successfully. However, user ...
- 1
0
votes
0
answers
122
views
Administrator option is disabled for domain accounts in Ubuntu 22.04
I am the domain admin. My domain account in my system have administrator option disabled. I have tried adding the user to sudoers. That didn't work. Any other way? When opening the software centre or ...
0
votes
1
answer
50
views
Anbox and OpenLDAP to Active Directory for SSO
Anbox and OpenLDAP to Active Directory for SSO
We would love to use Anbox with our Active Directory for user authentication.
We have Windows 10 OS Instance using Active Direction for logon, being able ...
0
votes
0
answers
198
views
Can't login to domain users after enroll successfully Ubuntu 22.04
I'm working on ubuntu 22.04.
I installed all the required packages and enroll successfully to my domain.
my dc is on Windows server 2008 r2.
when I'm trying to login to any domain user after I'm ...
- 1
0
votes
0
answers
1k
views
Give access to specific Active Directory Groups and local users
I have a server which is connected to the active directory, everything works fine (at least I guess) and everyone can access the server with their AD credentials, but I wan only specific group to be ...
- 184
0
votes
1
answer
660
views
Some Azure Active Directory users are not able to login to Ubuntu Machines
Some AD Users are not able to access Ubuntu machine in the domain, the error after trying to access the server via ssh I get in /var/log/auth.log:
Jun 14 11:50:36 SR sshd[1467842]: Invalid user ...
- 184
0
votes
0
answers
139
views
How to allow AD group to run elevated commands from the desktop in Ubuntu 22.04
I've seen a number of similar questions, but none that quite cover my situation.
I have an Ubuntu desktop 22.04 system, setup for authentication against a Active Directory. I have a domain group ...
- 111
0
votes
2
answers
1k
views
After logging in with my AD credentials, why can I not change any settings?
I've been setting up a new machine with Ubuntu 22.04 Desktop. And since I'm on the IT team, I've been using it as an opportunity to broaden my knowledge of configuring Ubuntu for a work environment, ...
- 11
0
votes
1
answer
658
views
Samba won't join computers to domain anymore
DISCLAMER:
I'm still trying to fully learn and understand how to properly maintain a samba domain controller.
The Problem:
I had a working samba installation with AD controlle but now, just a month ...
- 11
0
votes
0
answers
1k
views
Domains are not found after joining Ubuntu 22.04 to Active Directory using SSSD
Since Ubuntu 20.04 we are using SSSD and realmd to join these server to one of our Active Directory domains. This works (almost) out-of-the-box.
For Ubuntu 22.04, however, we run into issues. And I am ...
0
votes
1
answer
143
views
How to truncate domain part from username in pam_mount?
I am currently experimenting with the new Active Directory Features in Ubuntu 22.04. I joined the domain with my client and everything worked fine so far. However I want to mount the users home ...
0
votes
1
answer
3k
views
Stuck joining Ubuntu Studio 22.04.1 to Active Directory
I am trying to join my freshly installed Ubuntu Studio 22.04.1 to an AD domain hosted on my Synology NAS, by following the instructions in this white paper, starting on page 11 ("Joining After ...
- 316
0
votes
0
answers
69
views
Working with windows shared file in ubuntu
We are using windows(8.1 & 10) and ubuntu(20.04) in our network environment. When we open a xls,word file in ubuntu which is already opened in windows it is not prompting as a read only and also ...
0
votes
0
answers
5k
views
Login failure after successfully adding Ubuntu 22.04 machine to the domain
I have successfully added my machine to my company's domain. When I try to login with my domain credentials at the login screen or via su I see a message "Applying machine settings" and the ...
- 131
0
votes
1
answer
526
views
Ldap - access for specific machines
We have LDAP server with 300+ users-10 servers with different group. when we creating the users, every user has access of all the 10 servers. So I want to restrict the user access.
So LDAP user or ...
- 31
0
votes
0
answers
2k
views
su: Permission denied as root
I added my Ubuntu Machine to AD and I can do an ID these user accounts
but when I'm logged in as root I can't su to these accounts
e.g.
su: Permission denied
any reason why?
is there something I miss ...
- 9
0
votes
1
answer
1k
views
Logged out immediately after login using Active Directory on Ubuntu 22.04
I am installing a new Ubuntu 22.04 desktop, following the canonical instructions here for adding the computer to the domain, adding it to the domain during installation. The machine is able to pull ...
0
votes
1
answer
31
views
How to select a different user to authenticate Livepatch with?
I am an IT Admin and recently set up an Ubuntu 18.04 laptop for one of my users. As apart of the process, I create a local admin account to set things up and join the computer to our Active Directory ...
- 13
0
votes
0
answers
6k
views
How to Allow Samba Shares for Domain users?
I have a samba server with shares using POSIX ACL.
We installed the Active Directory domain controller by using Turnkey image, I joined Ubuntu Server to the domain following this , Installed ...
- 21
0
votes
1
answer
3k
views
Authentication fails AD
Good day to all. Raised Ubuntu 20.04, entered it into the domain. However, it turned out that the user, after a reboot, cannot log in to the system under a domain account. BUT, if you cut off from the ...
- 1
0
votes
0
answers
529
views
Can't login with AD account
I can't login with an AD user account with freshly installed Ubuntu 21.10 (also tried 20.04). id <AD user> works like expected. When I try to login ubuntu keeps saying "can`t login with ...
0
votes
1
answer
405
views
Active directory users based on numeric values not able to login
Active directory based on numeric(01012578) not able to login
but wit the same DC we are able to login using name username Eg. syed
client o.s 20.0.4 desktop version
AD script
#!/bin/sh
#Linux
...
0
votes
1
answer
1k
views
LDAP binding error
I have a secure LDAP configured on a Active Directory.
I am trying to query it using the ldapsearch command on Ubuntu.
Following are dummy details:
Domain Name: dc=qwerty,dc=com
LDAP Server: ...
- 101
0
votes
0
answers
105
views
Anyone happen to know if with 21.04 AD integration, tighter integration with Certificate Services is being considered?
As an admin in a mixed environment, the biggest bane of my existence it trying to issue internal certs. Right now the only option is using NDES/SCEP, but Microsoft apparently has no interest in ...
- 121
0
votes
1
answer
1k
views
How to use fingerprint reader with Ubuntu 20.04 and sssd (active directory)
I've been trying to get fingerprint login working for a new Lenovo ThinkPad P15v, and had seen the information here and other places suggesting that fingerprint login was available in default 20.04 in ...
- 1,413
0
votes
1
answer
3k
views
Samba Domain Member Not Pulling AD Group/User info
We're upgrading from an old NT4 domain, and I've just got Samba AD setup on a new Ubuntu 20.04 server. Current Samba version is 4.11.6-Ubuntu on both the DC and the Domain Member Server which is also ...
- 108
0
votes
0
answers
2k
views
Ubuntu vsftpd hide other folder and disable possibility to browse them
I'm relatively new to Linux. I am creating an SFTP server using vsftpd on ubuntu 20. I'm authenticating users with Active directory.
The problem I have, is that even though the user land in their home ...
0
votes
0
answers
2k
views
Samba AD DC no longer accepts login using domain accounts
I've been trying to setup Samba AD DC on Ubuntu 20.04 for a good while now and with some success. I use the server which runs this Samba instance as my primary workstation, so I need to be able to log ...
- 49
0
votes
2
answers
16k
views
Ubuntu 20.04 fails to join Windows AD domain
I am new with Ubuntu / Linux.
I am attempting to join a Ubuntu 20.04 machine to a Windows domain using the following command:
sudo realm join -v ad1.example.com
This fails with the following error:
...
- 1