Authenticating an Ubuntu PC to Active Directory
Saturday, March 22nd, 2008Likewise Open is a piece of software designed to make it easier to integrate Linux PC’s into an Microsoft Windows Active Directory (AD) domain. Now you can log onto your Ubuntu PC using your Windows network username and password, and access your shared files and resources whilst logging on only once.
You can find the ‘likewise-open’ and ‘likewise-open-gui’ packages in the Ubuntu Hardy universe repository. Go to System > Administration > Synaptic Package Manager, ensure the universe repository is enabled, and search for ‘likewise’.
After installation, you can find the Likewise Open GUI in Applications > Internet > Likewise. Joining the domain is simple enough. Specify the FQDN of your domain and click on ‘join domain’. After giving details of an account with permission to add computers to the domain, you should be connected.
Restart the PC, and at the GDM login screen try an Active Directory login. For instance:
DOMAIN\username
Hopefully all should be well, if not try the following.
—-
Login as a normal (non-AD) user and run the following command.
lwiinfo -n “DOMAIN\username”
You might get an error complaining ‘could not obtain winbind separator!’
It looks like the likewise-open script is not set to start with the system. To see if this is the case, try running ‘sudo likewise-winbindd -start‘ and try the command again. If it works this time (you should see a string of numbers and letters) you need to set likewise-open to start with the system.
To do this run ‘sudo sysv-rc-conf‘ from the command line, and turn the likewise-open service on for runlevels 2,3,4,5. Hopefully this should be sorted soon, I’ve filed a bug report.’
—-
At this moment in time you are likely to come across other issues. Sound, USB, sudoers etc will not work under the AD user. I’m sure that there are workarounds for this which involve mapping AD user groups to local groups. Hopefully in time for release we’ll see some firm instructions for this appear.
If you’re interested, watch this space.
