10 Join Ubuntu 14.04LTS to a Windows Domain using PBIS Open
Autor: Francisco Giovanildo Teixeira de Souza | Publicado: 2015-03-09T17:22:00-03:00






                  

  
  
      


  




    
      

    
      
Fonte = http://community.spiceworks.com/how_to/80336-join-ubuntu-14-04lts-to-a-windows-domain-using-pbis-open


Join Ubuntu 14.04LTS to a Windows Domain using PBIS Open
&nbsp;









Introduction
The following instructions will guide you through the process 
of joining an Ubuntu 14.04 client to a Windows Domain using Power Broker
 Identity Services Open Edition version 8.0.1.2029 64bit.  
(This process should also work for Lubuntu 14.04)
Environment:Windows Server 2012 Standard Domain ControllerUbuntu 14.04 LTS and Lubuntu 14.04 Client PCs

    

      
        Steps
        
          (9 total)
        
      

          
            
1

Download the most current stable version of Power Broker Identity Services Open Edition


              
              Go to the following address and download the most current version of PBIS:  


http://download1.beyondtrust.com/Technical-Support/Downloads/PowerBroker-Identity-Services-Open-Edition/?Pass=True


Or, from a terminal type the following commands:


 cd ~
 sudo wget http://download.beyondtrust.com/PBISO/8.0.1/linux.deb.x64/pbis-open-8.0.1.2029.linux.x86_64.deb.sh



              

            


          
            
2

Make the pbis installation script executable


              
              In the terminal navigate to the directory where 
pbis-open-8.0.1.2029.linux.x86_64.deb.sh is located and execute the 
following command:


sudo chmod +x pbis-open-8.0.1.2029.linux.x86_64.deb.sh


              

            


          
            
3

Run the pbis installation script


              
              From the terminal type the following command to install pbis open:


sudo ./pbis-open-8.0.1.2029.linux.x86_64.deb.sh


              

            


          
            
4

Use PBIS Open to join your PC to the Windows Domain


              
              From the terminal:


cd /opt/pbis/bin/
sudo domainjoin-cli join --disable ssh $domainname $domainaccount


*where domainname = the name of your domain and domainaccount = user@domainname.###


EXAMPLE:  sudo domainjoin-cli --disable ssh frijoles.com fadmin@frijoles.com


When prompted for a password supply the appropriate credentials and you should receive a "SUCCESS" prompt when finished.


              

            


          
            
5

Set-up default configuration for domain users 


              
              Use PBIS to pre-configure the user environment for all domain users that log into the newly added system.


From the terminal:


sudo /opt/pbis/bin/config UserDomainPrefix $domain
sudo /opt/pbis/bin/config AssumeDefaultDomain true
sudo /opt/pbis/bin/config LoginShellTemplate /bin/bash
sudo /opt/pbis/bin/config HomeDirTemplate %H/%U
sudo /opt/pbis/bin/config RequireMembershipOf "$domain\\$securitygroup"



              

            


          
            
6

Edit the pamd.d common-session file


              
              From a terminal:
sudo vi /etc/pam.d/common-session


Find the line that states the following:
session sufficient pam_lsass.so


Replace it with:
session [success=ok default=ignore] pam_lsass.so


              

            


          
            
7

Edit the lightdm configuration file


              
              Edit the lightdm configuration file and append the following lines:


sudo vi /usr/share/lightdm/lightdm.conf.d/50-unity-greeter.conf


allow-guest=false
greeter-show-manual-login=true


*If you are using Lubuntu 14.04 your lightdm configuration file will be:  60-lightdm-gtk-greeter.conf  


              

            


          
            
8

Give sudo access to users/groups


              
              Add any necessary administrative users and/or groups from your domain to the sudoers file to give them sudo privileges.


From a terminal:


sudo vi /etc/sudoers


*using the file's configuration examples add users/groups appropriately.


EXAMPLE:


fadmin  ALL=(ALL:ALL) ALL


              

            


          
            
9

Reboot and Log-in


              
              Reboot your PC and log-in using an appropriate domain user account.


              

            



      
Conclusion
These instructions have only been tested on Lubuntu 14.04 and 
Ubuntu 14.04 LTS Distributions.  With minimal tweaking these steps 
should also work for other distributions.  Older and now deprecated 
versions of Likewise-Open should work in a similar fashion as PBIS-Open,
 and may be required on older distributions.

    

      
References

 PBIS Open Installation and Administration Guide 
 AskUbuntu 
 Kiloroot 
 NotesOnIT