Configuration Guide on How To Join Ubuntu to Windows AD
- Update Ubuntu
sudo apt update
Sudo apt dist-upgrade -y
2. Install NTP Server
sudo apt-get install ntp ntpdate
3. Edit NTP config
nano /etc/ntp.conf
server 192.168.254.5 prefer iburst
4. Restart NTP
sudo service ntp restart
5. Edit avahi config
If you don’t do this you will get conflicts later when installing PBIS
sudo nano /etc/avahi/avahi-daemon.conf
Replace : #domain-name=local
With : domain-name=arcanys
6. Install SSH
sudo apt install ssh
7. Download PBIS
sudo wget http://download.beyondtrust.com/PBISO/8.0.1/linux.deb.x64/pbis-open-8.0.1.2029.linux.x86_64.deb.sh
Updated : https://github.com/BeyondTrust/pbis-open/releases/download/8.5.4/pbis-open-8.5.4.334.linux.x86_64.deb.sh
8. Make install file executable
sudo chmod +x pbis-open-8.0.1.2029.linux.x86_64.deb.sh
9. Execute install file
sudo ./pbis-open-8.0.1.2029.linux.x86_64.deb.sh
Install package for legacy links? → No
Would you like to install now? → Yes
After install you might get a GUI tool asking you to join the domain. I prefer to close it and to continue via the terminal.
10. Restart avahi service
sudo service avahi-daemon restart
11. Join PC to domain
sudo domainjoin-cli join ARCANYS.COM rrebusa@arcanys.com
You will be prompted for the Domain Administrator password and then should see
"SUCCESS".
12. Restart ssh service
sudo service ssh restart
13. Set AD login settings
sudo /opt/pbis/bin/config UserDomainPrefix arcanys.com
sudo /opt/pbis/bin/config AssumeDefaultDomain true
sudo /opt/pbis/bin/config LoginShellTemplate /bin/bash
sudo /opt/pbis/bin/config HomeDirTemplate %H/%U
sudo /opt/pbis/bin/config RequireMembershipOf arcanys\\domain^users
15. Edit lightdm (login screen settings)
sudo nano /usr/share/lightdm/lightdm.conf.d/50-unity-greeter.conf
- Insert the following >
allow-guest=false
greeter-show-manual-login=true
greeter-hide-users=true
16. Edit the pamd.d common-session file
From a terminal:
sudo nano /etc/pam.d/common-session
Find the line that states the following:
session sufficient pam_lsass.so
Replace it with:
session [success=ok default=ignore] pam_lsass.so
17. Edit sudoers file
sudo visudo
Insert the following
# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL
%arcanys\\domain^users ALL=(ALL) ALL
Changing Linuxmint logon to using MDM (default)
- Edit mdm conf
sudo nano /etc/mdm/mdm.conf
[daemon]
SelectLastLogin=false
[greetera
IncludeAll=false
Reference : https://community.spiceworks.com/how_to/80336-join-ubuntu-14-04lts-to-a-windows-domain-using-pbis-open
http://igeeksys.blogspot.com/2016/12/ubuntu-desktop-join-to-windows-ad.html
---end---
Walang komento:
Mag-post ng isang Komento