Difference between revisions of "Ubuntu Active Directory"

From UVOO Tech Wiki
Jump to navigation Jump to search
Line 1: Line 1:
# Joining Domain
+
 
- https://wiki.ubuntu.com/Enterprise/Authentication/sssd
+
 
 +
# Join Domain
 
- https://ubuntu.com/server/docs/service-sssd
 
- https://ubuntu.com/server/docs/service-sssd
- sudo apt-get install sssd libpam-sss libnss-sss sssd-tools
+
```
- sudo apt install sssd-ad sssd-tools realmd adcli
+
sudo apt install -y sssd-ad sssd-tools realmd adcli
 +
sudo realm join -U ${myuser} -v ${mydomain}
 +
```
  
 
- sudo apt install sssd-ad sssd-tools realmd adcli
 
- sudo apt install sssd-ad sssd-tools realmd adcli
Line 31: Line 34:
 
```
 
```
 
sudo systemctl restart sssd
 
sudo systemctl restart sssd
 +
 +
 +
 +
# Other
 +
- https://wiki.ubuntu.com/Enterprise/Authentication/sssd
 +
- https://ubuntu.com/server/docs/service-sssd
 +
- sudo apt-get install sssd libpam-sss libnss-sss sssd-tools

Revision as of 13:07, 12 August 2020

Join Domain

sudo apt install -y sssd-ad sssd-tools realmd adcli
sudo realm join -U ${myuser} -v ${mydomain}
  • sudo apt install sssd-ad sssd-tools realmd adcli

20.04

ssh-copy-id -i .ssh/id_ed25519 'busk@exampel.org'@10.x.x.x
ssh 'busk@extendhealth.com'@10.x.x.x
realm permit busk@example.org
realm permit -x jebusk@example.org
realm permit -g 'Domain Users@example.org'

ssh 10.250.6.180
# or for all
# echo "ad_gpo_access_control = permissive" >> /etc/sssd/sssd.conf
# sudo systemctl restart sssd

/etc/sssd/sssd.conf needs the following entry.

[domain/your.domain]
ad_gpo_access_control = permissive

sudo systemctl restart sssd

Other