Re: [lopsa-tech] Ubuntu and AD

2016-08-08 Thread Derek Murawsky
This should get you going in no time. #!/bin/sh cd ~ wget ' http://download.beyondtrust.com/PBISO/8.3/pbis-open-8.3.0.3287.linux.x86_64.deb.sh ' bash 'pbis-open-8.3.0.3287.linux.x86_64.deb.sh' /opt/pbis/bin/domainjoin-cli join [domain] administrator@[domain] # /opt/pbis/bin/config UserDomainPrefi

Re: [lopsa-tech] Ubuntu and AD

2016-08-08 Thread Derek Murawsky
Easy to bypass that by setting the default domain. I'll post a quick setup in a minute. On Aug 8, 2016 8:41 PM, "Morgan Blackthorne" wrote: > So looking at PBIS it looks like the username would be domain\\user over > ssh, is that correct? That seems a little odd, but I'll likely play with > that

Re: [lopsa-tech] Ubuntu and AD

2016-08-08 Thread Morgan Blackthorne
So looking at PBIS it looks like the username would be domain\\user over ssh, is that correct? That seems a little odd, but I'll likely play with that over the next few days. Looks like there's a chef cookbook for that already which should help a bit. On Mon, Aug 8, 2016 at 5:39 PM, Derek Murawsky

Re: [lopsa-tech] Ubuntu and AD

2016-08-08 Thread Derek Murawsky
Don't even try to do it manually. Powerbroker is the way to go. PBIS took a dozen minutes to configure and even gave me keberos auth with ad, no extra work. (No passwords/keys, just kerb ticket). On Aug 8, 2016 7:42 PM, "Ted Cabeen" wrote: > We use Likewise/PBIS, and it works well for us: > http

Re: [lopsa-tech] Ubuntu and AD

2016-08-08 Thread Ted Cabeen
We use Likewise/PBIS, and it works well for us: https://www.powerbrokeropen.org/ --Ted On 2016-08-08 16:33, Morgan Blackthorne wrote: So at $JOB we're running some Ubuntu 14.04 and 16.04 boxes that we'd like to integrate with AD authentication. I've previously done this at $JOB-2 with a mix of

[lopsa-tech] Ubuntu and AD

2016-08-08 Thread Morgan Blackthorne
So at $JOB we're running some Ubuntu 14.04 and 16.04 boxes that we'd like to integrate with AD authentication. I've previously done this at $JOB-2 with a mix of nss-ldap, sssd, and pam_ldap, but we were supporting a lot of different distributions. What do folks find to be the easiest system to con