active directory and linux

numbers1thru9 · 12-13-2006, 01:55 PM

I want to make a group in AD part of the local admins group on my ubuntu station, I have tried sudo net groupmap add ntgroup=Domain\ Admins unixgroup=admin rid=2000 type=d ive also tried type=l and type =b but that doesnt work. I have the sudo command working great but Id like for any domain admin to be able to change settings via the GUI, like the local users

eendoe · 12-15-2006, 12:58 AM

Wow, you are missing a few steps here;
-configure kerberos
-join your machine to the domain
-etc

Try the following guide;

http://samba.org/samba/docs/man/Samb...in-member.html

particulary the section titled Samba ADS domain membership.

NOTE: Some distros (centos) run a version of samba that can cause you greif doing this. I found fc5 happy to work with this configuration.

After the linux box is joined to your domain

do a groupmap

that should achieve what you want,

further editing of /etc/pam.d can let you do a bit more with smb authentication

Good Luck