วันพุธ, สิงหาคม 15, 2555

Join the Ubuntu desktop into the LDAP (Active Directory)

HOWTO join Ubuntu desktop into Domain server, LDAP

Scenerio: 

  • LDAP server is Microsoft Active Directory
  • Ubuntu desktop, Ubuntu 12.04 Precise


1. Check the /etc/resolv.conf
i.e.
$cat /etc/resolv.conf

  search test.org
  nameserver 127.0.0.1


If your result like mine,above. We should modify it, to point it to your real nameserver.
i.e.

  search test.org
  nameserver 172.16.0.6


2. Install likewiseopen, the openldap software
i.e.
  $sudo apt-get install likewise-open5

** Note that there's likewise-open5 and likewise-open; must install the one that have 5, otherwise it will not work, cannot join the domain. Anyway the likewise-open is the dependency of likewise-open5, it will installed along with the 5 one.

3. a command to join a domain
i.e.
 $sudo domainjoin-cli join test.org Administrator

* The Administrator should be changed to your account instead.

4. Modification needed to make domain user can invoke the sudo command
Edit the /etc/sudoers. you can add this line at the last line or below the existing one.
i.e
 $sudo vi /etc/sudoers

...
%test.org\\domain^users ALL=(ALL) ALL
...
* The test.org should be changed to your AD, domain name instead.
** (see Adding sudo)

5. Enable the (lightdm) login for a new LDAP account. Otherwise there's noway to login as an LDAP user on this machine.
i.e.

Make a backup of original file.
  $sudo cp -p /etc/lightdm/lightdm.conf /etc/lightdm/lightdm.conf.orig

  $sudo /usr/lib/lightdm/lightdm-set-defaults -m true

  $sudo /etc/init.d/lightdm restart

Reboot the machine OR logout to login as an LDAP user.

Now, next time you can select Other, on login screen to login as an LDAP user.


Reference:
  1. https://help.ubuntu.com/community/LikewiseOpen 
  2. http://www.tejasbarot.com/2012/04/30/howto-other-login-option-on-login-screen-ubuntu-12-04-lts-precise-pangolin/ 
  3. http://manyrootsofallevilrants.blogspot.co.uk/2012/05/ssh-single-sign-on-sso-for-ubuntu-1204.html