Can you Add Ubuntu Desktop to a Windows Domain?

[Andrew Roybal]

Can you add Ubuntu Desktop to a Windows Domain environment? If there is any Documentation please lead the way.

Thanks

BlueScreen.

[sontek]

Yes you can.

Heres something to get you started:

http://developer.novell.com/wiki/index.php/HOWTO:_Configure_Ubuntu_for_Active_Directory_Authe ntication

But you just need to look into Kerberos, Samba, and OpenLDAP to get everything running

[Andrew Roybal]

Hey thanks a million Sontek... this is awesome. we we.

:).

[snowpalmer]

They really need to work on making this process less involved. I added several machines at work to our domain and there is way to much that has to be done to get it going.

[mrtrick]

I agree. It would be cool to have a tool as a part of automatix or something that lets you enter the pertinent information and have it do all the back end work for you.

Makes me think... could be a fun project. I just want to make sure that I'm not re-inventing the wheel if someone else has done this already and we just don't know about it.

[MWPatterson]

Has any body found or got a tool to do this yet? We are looking at rolling out about 400 machines on our AD Domain and this is the kicker. Our people that set up the machines know windows and it will take some time to get all of them to understand and use Ubuntu. This is a big deciding factor for us, if we have to go through alot of manual editing it will be a no go for Ubuntu for mainstream and only a few play boxes then.

[Kemotaha]

It actually isn't that bad. Apart from the config where you need to make some changes you can do pretty much everything you need to from a script. The join command is "net rpc join domainname" I believe. I would have to look a little further to see if there is already a script.

Nathan

[peanut butter]

It actually isn't that bad. Apart from the config where you need to make some changes you can do pretty much everything you need to from a script. The join command is "net rpc join domainname" I believe. I would have to look a little further to see if there is already a script.

Nathan

dont you need to edit some pam config files too?

[Kemotaha]

Yeah, you have to add winbind to them. You also have to add it to the nsswitch file as well. Winbind is the daemon that does the AD authentication. Of course it uses the smb.conf like smb and nmb.

[peanut butter]

how do i add winbind to these files?

[Kemotaha]

how do i add winbind to these files?

Here is a good link on Winbind: http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/winbind.html

I won't quote it all because it is fairly long, but the bottom part of the document has a whole setup to get winbind to authenticate with PAM.

[steve_d]

Stumbled across this thread in my searches, thought I'd update it:

Likewise open

Check out this link:

http://www.ubuntugeek.com/how-to-add-ubuntu-804-to-win-server-2003-active-directory-domain.html

Steve

[GinnyBhullar]

I am already using Likewise-open for Domain Integration. But the problem is it supports only one domain at a time to join. What if I want to make my machine to join 2 domains. What is required to be done ?

[atworkwithjf]

Why would you put yourself through this when you can just use likewise-open to join your machine to AD?

Likewise-Open is in the ubuntu-main repository so all you have to do is install it with apt-get or the synaptic package manager and then join the domain.