Friday, August 31, 2012
Adding a linux server to the Domain:
If you have lots of Linux servers, and your company is running on a Windows Active Directory, you might find it binifisial to join your Linux servers to the domain and allow log-ins with you domain administrator accounts. The following tutorial will walk you though the process.
First you have to add the Centrify DirectControl Express repository:
~$sudo -s
~#aptitude install python-software-properties
For Ubuntu server 10.04 LTS
~#add-apt-repository "deb http://archive.canonical.com/ lucid partner"
For Ubuntu server 12.04
~#add-apt-repository "deb http://archive.canonical.com/ precise partner"
~#aptitude update
Now we install Centrifydc:
~#aptitude install centrifydc
~#adjoin -w -u DomainAccount Domain.name
~#adinfo
Now we need to add our domain Admin group to Sudoers
~#nano /etc/sudoers
add: %Domain Admins ALL=(ALL) ALL
Now we need to edit the centrifydc.conf file:
~#nano /etc/centrifydc/centrifydc.conf
Change the following line:
Change the line:
##pam.allow.groups: some:group
to
pam.allow.groups: Domain Admins
If you have a user on your domain that has the same name as the local admin acount on the linux server you need to edit the following:
#pam.ignore.users: some:user
to:
pam.ignore.users: local/domain account
WARNING: If you don't make this change you will lock out the local admin account
Save the file and then:
~#adreload
~#adflush
~#adquery user DomainAccount
Your all done, you should be able to log on the the Linux server with you domain admin accounts.
Awesome!
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment