Linux Winbind Setup - Revision history

Hef: /* Installation */

2015-09-05T21:26:45Z

Installation

2015-09-05T21:26:38Z

Installation

← Older revision		Revision as of 21:26, 5 September 2015
Line 12:		Line 12:
	== Installation ==		== Installation ==

⚫	=== Ubuntu ===

⚫	sudo apt-get install krb5-user ntp samba winbind

	=== Arch Linux ===		=== Arch Linux ===

	sudo pacman -S krb5 samba		sudo pacman -S krb5 samba


			=== Debian ===

			sudo apt-get install krb5-user libnss-winbind libpam-winbind ntp samba winbind

		⚫	=== Ubuntu ===

		⚫	sudo apt-get install krb5-user ntp samba winbind

	* Default Kerberos version 5 realm: AD.PUMPINGSTATIONONE.ORG		* Default Kerberos version 5 realm: AD.PUMPINGSTATIONONE.ORG

2014-03-18T00:15:42Z

Robot: Cosmetic changes

← Older revision		Revision as of 00:15, 18 March 2014
Line 20:		Line 20:
	sudo pacman -S krb5 samba		sudo pacman -S krb5 samba

	* Default Kerberos version 5 realm: AD.PUMPINGSTATIONONE.ORG		* Default Kerberos version 5 realm: AD.PUMPINGSTATIONONE.ORG

	== /etc/nsswitch.conf ==		== /etc/nsswitch.conf ==
Line 65:		Line 65:

	== Join the domain ==		== Join the domain ==
	Use your account, you must be in the Domain Admins group. If you are adding a machine and are not in the Domain Admins group, Join the [[Systems Group]] and ask.		Use your account, you must be in the Domain Admins group. If you are adding a machine and are not in the Domain Admins group, Join the [[Systems Group]] and ask.

	sudo net ads join -U '''administrator'''@AD.PUMPINGSTATIONONE.ORG		sudo net ads join -U '''administrator'''@AD.PUMPINGSTATIONONE.ORG
Line 114:		Line 114:
	== pam_mkhomdir.so ==		== pam_mkhomdir.so ==

	pam_mkhomdir is responsible for creating the home directory of users that don't have one. Without it you get the following message.		pam_mkhomdir is responsible for creating the home directory of users that don't have one. Without it you get the following message.

	Could not chdir to home directory /home/PS1/username: No such file or directory		Could not chdir to home directory /home/PS1/username: No such file or directory

2013-11-03T17:13:47Z

I suspect Domain controllers don't like the use default domain option, so the second line in sudoers handles that situation

← Older revision		Revision as of 17:13, 3 November 2013
Line 105:		Line 105:

	%domain\ admins ALL=(ALL:ALL) ALL		%domain\ admins ALL=(ALL:ALL) ALL
			%PS1\\domain\ admins ALL=(ALL:ALL) ALL


	Then make sure the file has proper permissions:		Then make sure the file has proper permissions:

2013-09-28T21:22:15Z

adding ubuntu mkhomdir

← Older revision		Revision as of 21:22, 28 September 2013
Line 109:		Line 109:

	sudo chmod 0440 /etc/sudoers.d/domain_admins		sudo chmod 0440 /etc/sudoers.d/domain_admins

			== pam_mkhomdir.so ==

			pam_mkhomdir is responsible for creating the home directory of users that don't have one. Without it you get the following message.

			Could not chdir to home directory /home/PS1/username: No such file or directory

			=== ubuntu ===

			Create a file called /usr/share/pam-configs/my_mkhomedir:

			Name: activate mkhomedir
			Default: yes
			Priority: 900
			Session-Type: Additional
			Session:
			required pam_mkhomedir.so umask=0022 skel=/etc/skel

			and then run:
			sudo pam-auth-update


	== /etc/lightdm/lightdm.conf ==		== /etc/lightdm/lightdm.conf ==

2013-09-28T21:02:31Z

Join the domain

← Older revision		Revision as of 21:02, 28 September 2013
Line 67:		Line 67:
	Use your account, you must be in the Domain Admins group. If you are adding a machine and are not in the Domain Admins group, Join the [[Systems Group]] and ask.		Use your account, you must be in the Domain Admins group. If you are adding a machine and are not in the Domain Admins group, Join the [[Systems Group]] and ask.

	sudo ads join -U '''administrator'''@AD.PUMPINGSTATIONONE.ORG		sudo net ads join -U '''administrator'''@AD.PUMPINGSTATIONONE.ORG

	== /etc/pam.d/system-auth ==		== /etc/pam.d/system-auth ==

2013-09-06T17:49:50Z

Join the domain: using new wiki page for systems group

← Older revision		Revision as of 17:49, 6 September 2013
Line 65:		Line 65:

	== Join the domain ==		== Join the domain ==
	Use your account, you must be in the Domain Admins group. If you are adding a machine and are not in the Domain Admins group, ~~It will be pretty easy to convince~~ the ~~systems group to add you. Send an email to~~ [~~mailto:systems-subscribe@lists.pumpingstationone.org~~ ~~systems-subscribe~~] and ~~the present you case~~.		Use your account, you must be in the Domain Admins group. If you are adding a machine and are not in the Domain Admins group, Join the [[Systems Group]] and ask.

	sudo ads join -U '''administrator'''@AD.PUMPINGSTATIONONE.ORG		sudo ads join -U '''administrator'''@AD.PUMPINGSTATIONONE.ORG

2013-09-05T05:04:12Z

adding instrcitons

← Older revision		Revision as of 05:04, 5 September 2013
Line 65:		Line 65:

	== Join the domain ==		== Join the domain ==
	Use your account, you must be in the Domain Admins group. If you are adding a machine and are not in the Domain Admins group, It will be pretty easy to convince the systems group to add you. Send an email to [mailto:systems-subscribe@lists.pumpingstationone.org systems-subscribe]		Use your account, you must be in the Domain Admins group. If you are adding a machine and are not in the Domain Admins group, It will be pretty easy to convince the systems group to add you. Send an email to [mailto:systems-subscribe@lists.pumpingstationone.org systems-subscribe] and the present you case.

	sudo ads join -U '''administrator'''@AD.PUMPINGSTATIONONE.ORG		sudo ads join -U '''administrator'''@AD.PUMPINGSTATIONONE.ORG

2013-09-05T05:03:35Z

Join the domain: added info on the systems group

← Older revision		Revision as of 05:03, 5 September 2013
Line 65:		Line 65:

	== Join the domain ==		== Join the domain ==
			Use your account, you must be in the Domain Admins group. If you are adding a machine and are not in the Domain Admins group, It will be pretty easy to convince the systems group to add you. Send an email to [mailto:systems-subscribe@lists.pumpingstationone.org systems-subscribe]

	sudo ads join -U '''administrator'''@AD.PUMPINGSTATIONONE.ORG		sudo ads join -U '''administrator'''@AD.PUMPINGSTATIONONE.ORG

2013-09-05T04:44:14Z

/etc/sudoers.d/domain_admins

← Older revision		Revision as of 04:44, 5 September 2013
Line 104:		Line 104:

	%domain\ admins ALL=(ALL:ALL) ALL		%domain\ admins ALL=(ALL:ALL) ALL

			Then make sure the file has proper permissions:

	sudo chmod 0440 /etc/sudoers.d/domain_admins		sudo chmod 0440 /etc/sudoers.d/domain_admins