Setup:
Server: Ubuntu 14.04.3 LTS 64-bit
pbis-open version: 8.3
First of all, install these packages:
- libpam-winbind (available in repository)
- nfs-common (available in repository)
- pbis-open (download latest version from http://download1.beyondtrust.com/Technical-Support/Downloads/PowerBroker-Identity-Services-Open-Edition/?Pass=True)
Now that you have all the necessary packages, you have to start the setup:
- “sudo pam-auth-update” (use –force option in case you have done some local modifications before, but take care that it will reset all your old settings and place them in a .old file)
- “sudo domainjoin-cli join DOMAIN_NAME DOMAIN_USERNAME“
- Enter the password, then you should receive a SUCCESS message
- Reboot the server
Now you have joined the Active Directory!All what’s remaining now is allowing a group to have sudo access if needed:
- Edit the “/etc/sudoers” file
- In the line below “%admin ALL=(ALL) ALL”, add the following: “%DOMAIN_NAME\\DOMAIN_GROUP ALL=(ALL) ALL” (without the quotes)
That’s it! Now your user is a sudoer and you can login to the machine using “ssh DOMAIN_NAME\\DOMAIN_USERNAME@SERVER_NAME”
Optional: If you wish Bash becomes the default shell for the user, just execute the following command “sudo /opt/pbis/bin/config LoginShellTemplate /bin/bash”