Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #231220 > unrolled thread

Joining Bullseye to Zentyal AD

Back to article view | Back to linux.debian.user

Contents

  Joining Bullseye to Zentyal AD Lucio Crusca <lucio@sulweb.org> - 2021-01-28 00:40 +0100
    Re: Joining Bullseye to Zentyal AD Tibz Loufok <thiboyz@gmail.com> - 2021-01-28 01:30 +0100
      Re: Joining Bullseye to Zentyal AD [SOLVED] Lucio Crusca <lucio@sulweb.org> - 2021-01-31 09:00 +0100

#231220 — Joining Bullseye to Zentyal AD

I'm trying to join a Debian Bullseye instance to Active Directory domain 
powered by Zentyal Community Edition.

I'm not sure if I'm doing it wrong on the client or on the server side, 
but the server is just a default Zentyal 6.2 CE setup with enabled AD 
services.

I've tried following a few guides, but they are for Debian 10 Buster. 
Maybe they still hold valid in Bullseye, but I don't know.

https://community.spiceworks.com/how_to/144319-join-debian-to-ad

https://computingforgeeks.com/join-ubuntu-debian-to-active-directory-ad-domain/

They basically boil down to:

# realm join -u Administrator myad.lan
# realm list

Now if I look for my Debian computer name in Zentyal, I can find it and 
the "realm list" output shows the system is joined to the domain.

However:

# id Administrator@myad.lan
id: Administrator@myad.lan: no such user

(regardless of use_fully_qualified_names being True or False in 
/etc/sssd/sssd.conf)

And I don't know how to troubleshoot this problem... can you help me please?

[toc] | [next] | [standalone]

#231221

[Multipart message — attachments visible in raw view] — view raw

Hi,
I don't know zentyal AD. But I was able  to join Debian 8 to 10 and centos
7 to Active directory following red hat guide.

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/introduction

I used realmd and sssd.
Based on this experience.
Check for dns resolution, firewall issue,put sssd in debug mode.

Regards


Le jeu. 28 janv. 2021 à 00:36, Lucio Crusca <lucio@sulweb.org> a écrit :

> I'm trying to join a Debian Bullseye instance to Active Directory domain
> powered by Zentyal Community Edition.
>
> I'm not sure if I'm doing it wrong on the client or on the server side,
> but the server is just a default Zentyal 6.2 CE setup with enabled AD
> services.
>
> I've tried following a few guides, but they are for Debian 10 Buster.
> Maybe they still hold valid in Bullseye, but I don't know.
>
> https://community.spiceworks.com/how_to/144319-join-debian-to-ad
>
>
> https://computingforgeeks.com/join-ubuntu-debian-to-active-directory-ad-domain/
>
> They basically boil down to:
>
> # realm join -u Administrator myad.lan
> # realm list
>
> Now if I look for my Debian computer name in Zentyal, I can find it and
> the "realm list" output shows the system is joined to the domain.
>
> However:
>
> # id Administrator@myad.lan
> id: Administrator@myad.lan: no such user
>
> (regardless of use_fully_qualified_names being True or False in
> /etc/sssd/sssd.conf)
>
> And I don't know how to troubleshoot this problem... can you help me
> please?
>
>

[toc] | [prev] | [next] | [standalone]

#231297 — Re: Joining Bullseye to Zentyal AD [SOLVED]

Il 28/01/21 01:26, Tibz Loufok ha scritto:
> red hat guide.
> 
> https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/introduction 
> 
> I used realmd and sssd.
> 
> put sssd in debug mode.
> 

Putting sssd in debug mode was the key. My system was missing a 
/etc/krb5.conf file and then a few other things (needed to mount the 
shared folders, but that's another story).

I wonder why /etc/krb5.conf is not mentioned in the guides I followed 
and how could those guides work for the respective authors without it... 
maybe sssd was supposed to do something that replaced krb5.conf, but in 
recent releases (I'm using Debian sid) it doesn't do that something anymore?

I don't know, but I'm wondering just out of curiosity, because it's 
working now and that's all I needed.

Thank you very much indeed.

> 
> 
> Le jeu. 28 janv. 2021 à 00:36, Lucio Crusca <lucio@sulweb.org 
> <mailto:lucio@sulweb.org>> a écrit :
>  [...]
> 
>     I've tried following a few guides
> 
>     https://community.spiceworks.com/how_to/144319-join-debian-to-ad
> 
>     https://computingforgeeks.com/join-ubuntu-debian-to-active-directory-ad-domain/
> 
>     However:
> 
>     # id Administrator@myad.lan
>     id: Administrator@myad.lan: no such user
>

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web