2:18 p.m.
Hi!
I am trying to authentticate my ubuntu users via Active directory and also autofs
mounting. May be I am doing something wrong or missing some key attributes but I checked
it from last couple of days and decided to write.
I have configured my sssd.conf and using ldaps for communication. After troubleshooting my
issue now I am able to get the result for my output like getent passwd AD-username and id
AD-username
I am logged on to ubuntu machine with local account and running id AD-Username and getent
passwd AD-username and it takes ages to get reply back.
uid=1348(AD-username) gid=100(users) groups=100(users)
when I trun getend group groupname then nothing happens.
I have attached my sssd.conf file.
I am using Ubuntu 18.04
Version: 1.16.1-1ubuntu1.4
Version: 1.16.1-1ubuntu1.4
[sssd]
config_file_version = 2
services = nss, pam, sudo, autofs
domains = mycompany.local
default_domain_suffix = mycompany.local
[nss]
debug_level = 9
filter_groups = root
filter_users = root
reconnection_retries = 3
#If want override the shell for all users uncomment follow line
#override_shell = /bin/bash
[pam]
debug_level = 9
[sudo]
debug_level = 3
[autofs]
[domain/mycompany.local]
debug_level = 9
enumerate = false
case_sensitive = false
cache_credentials = true
min_id = 100
#ldap_id_mapping = True
#ldap_user_primary_group = primaryGroupID
case_sensitive = false
### --- Providers --- ###
id_provider = ldap
auth_provider = ldap
access_provider = simple
chpass_provider = ldap
### --- LDAP GENERAL --- ###
ldap_id_use_start_tls = false
ldap_schema = rfc2307
ldap_tls_cacertdir = /etc/ldap/cacerts
#ldap_tls_cacert = /etc/ssl/dc01.cer
### LDAP user search settings ###
ldap_user_search_base = DC=mycompany,DC=local
# LDAP group search settings
ldap_group_search_base = DC=mycompany,DC=local
# LDAP Class settings
### --- LDAP Class settings --- ####
ldap_user_object_class = user
ldap_user_name = sAMAccountName
ldap_user_gecos = displayName
#ldap_user_principal = userPrincipalName
ldap_user_home_directory = unixHomeDirectory
ldap_user_member_of = memberOf
ldap_group_object_class = group
ldap_group_name = sAMAccountName
ldap_group_member = memberUid
ldap_network_timeout = 3
#ldap_access_filter = (&(objectclass=shadowaccount)(objectclass=posixaccount))
ad_server = dc01.mycompany.local
### --- LDAP connection settings --- ###
ldap_uri = ldaps://dc01.mycompany.local:636
ldap_default_bind_dn = CN=serviceaccount,OU=ServiceAccounts,DC=mycompany,DC=local
ldap_default_authtok_type = password
ldap_default_authtok = mypassword
# Access settings via simple
# simple_allow_groups = lusers
simple_allow_groups = Users
## Temp TEst
ldap_opt_timeout = 20
dns_resolver_timeout = 10
### AutoFS
autofs_provider = ldap
ldap_autofs_entry_key = cn
ldap_autofs_entry_object_class = nisObject
ldap_autofs_entry_value = nisMapEntry
ldap_autofs_map_name = nisMapName
ldap_autofs_map_object_class = nisMap
ldap_autofs_search_base = ou=automount,DC=mycompany,dc=local
Thanks