#winbind

[sevennet-blog]

Solution: Linux authentication via ADS -- allowing only specific groups in PAM #development #computers #it

Solution: Linux authentication via ADS — allowing only specific groups in PAM #development #computers #it

Linux authentication via ADS allowing only specific groups in PAM

I’m taking the samba / winbind / PAM route to authenticate users on our linux servers from our Active Directory domain.

Everything works, but I want to limit what AD groups are allowed to authenticate. Winbind / PAM currently allows any enabled user account in the active directory, and pam_winbind.so doesn’t seem to heed the requi…

View On WordPress

[goodanswerbiz]

Resolved: Linux + Active directory authentication + only letting certain groups login #dev #solution #it

Resolved: Linux + Active directory authentication + only letting certain groups login #dev #solution #it

Linux + Active directory authentication + only letting certain groups login

I have some linux boxes that use Windows Active Directory authentication, that works just fine (Samba + Winbind).

What I would like to do now though is only allow certain people or certain groups to login using Active Directory credentials. Currently anyone with a valid AD account can login. I want to limit this to only…

View On WordPress

[sevennet-blog]

How to: Linux + Active directory authentication + only letting certain groups login #it #computers #answer

How to: Linux + Active directory authentication + only letting certain groups login #it #computers #answer

Linux + Active directory authentication + only letting certain groups login

I have some linux boxes that use Windows Active Directory authentication, that works just fine (Samba + Winbind).

What I would like to do now though is only allow certain people or certain groups to login using Active Directory credentials. Currently anyone with a valid AD account can login. I want to limit this to only…

View On WordPress

[vertigoray]

Salt Stack - salt-osx-dsconfigad

During my adventures with Salt Stack, I wanted a more robust way to configure and maintain the AD Bind configuration on my Apple computers.

Keep reading

[legoooooolas]

Winbind + AD + different distros and samba versions == madness

As an attempt to integrate Linux machines into a mostly-AD environment, Winbind looks like it might be a great solution.

However, using the same config on different Linux distros which contain samba packages of various vintages, including Debian testing (wheezy), Ubuntu 12.04 LTS and Scientific Linux 6.2) I get:

Sometimes getent passwd and getent group enumerate and sometimes they don’t get any users/groups from AD (obviously winbind enum users = yes and likewise for groups are set as appropriate). This seems to be pretty arbitrary even during one session on one distro.

Some versions show more groups than others with group or id.

Not all of our AD groups have gidNumber values set, so the GIDs for these groups vary between machines. Ugh.

I might be missing required config, but I’ve spent enough time on this for now, and I’d much rather use distro-supplied packages so sorry winbind, but you’re not for me right now.