Re: Help for newbie
Hello, From what I understand, Ubuntu doesn't support nested group membership. However, after joining the system to AD, all you should really need to do is reference an AD group in your sudoers file...
View ArticleRe: Keychain issues
Hi Juan, If you're having problems with Centrify and the keychain, please open a new thread or if you're a paying customer, please contact support. Please note that if users do not change their...
View ArticleRe: CentOS 6 Kickstart
Hello, Please review the following forum article that discusses this topic and let us know if you have any questions. Regards,
View ArticleRe: adclient:1216 blocked for more than 120 seconds
Hi , Thank you for reaching out! I am a technical support engineer with our Server Suite team and will be able to assist you with this observed behavior. I have created a support case to work with you...
View ArticleRe: Ubuntu 16.04 LTS and Centrify 5.3.1-389 | EXIT CODE: 26
In what fileto do it? Whereit needs to be changed?
View ArticleRe: Ubuntu 16.04 LTS and Centrify 5.3.1-389 | EXIT CODE: 26
During the join process, if using install.sh, when it asks you for the container you can enter "CN=Computers" or leave it blank and the CN=Computers container will be default. If joining usin the...
View ArticleRe: Centrify Mac Application updates
Hi JuanRestrepo, Sorry for the delay in response. If you have the internet access, you could use Centrify CIS for the deployment of .pkg files to the mac. Besides deploying the softwares, you could...
View Articlehow do i control sudo from my AD users
I'm using centrify express and I'm wondering how to totally control my AD users from being able to invoke sudo? TIA,--Sid
View ArticleRe: how do i control sudo from my AD users
Hello Sid, You can simply use there Unix Name into the Sudoers definition, as you are using Express their Unix Name will be equal to their SamAccountName from AD. For example if you have two AD Users...
View ArticleRe: how do i control sudo from my AD users
Hi Fabrice, Thanks for the info's. I guess what i really like to accomplish is to totally not allow AD users to do su or sudo at my X server (total lockdown if you may). My AD users are given a...
View ArticleRe: how do i control sudo from my AD users
Your question is not necessarily related to Centrify but rather who can execute a particular set of binaries on a UNIX system which is controlled by the UNIX file permissions of the binaries. By...
View ArticleRe: how do i control sudo from my AD users
Hi Sid, To be honnest I am not sure to understand clearly want you want to achieve here. If by "lockdown" you mean that no AD Users should be allowed to run privileges commands using sudo or switch to...
View ArticleRe: Centrify enabled samba on multiple hostnamed servers
I know this is an old thread and looks stale but did a resolution ever come of this?? ThanksCF
View ArticleRe: Centrify enabled samba on multiple hostnamed servers
This thread is from 2012. Please open a new one.
View ArticleRe: SMB file sharing not working: CentOS 6.7 + CentrifyDC-adbindproxy 5.3.0 +...
I finally figured out the details of how to replace a Centrify Samba 3.6.x package with CentrifyDC-adbindproxy v5.3 and CentOS 6.x supplied Samba4 packages: Backup your smb.conf file:cp -p...
View Articlecustom config file for mixed domain
hello, I am trying to join linux hosts to an AD domain where I also have a local MIT Kerberos KDC and cross domain trust configured. I am settingadjoin.krb5.conf.file: /home/ec2-user/krb5.confin...
View ArticleRe: custom config file for mixed domain
, Welcome to the Centrify Community. Can you clarify if your Kerberos realm trusts AD? What kind of trust?What version of CentrifyDC? (adinfo -v) You must be at 5.3.1 if you want to take advantage...
View ArticleRe: custom config file for mixed domain
hi Robertson, thanks for the info. Yes there is a one way domain trust in place (netdom trust) run from the AD server.Currently running: adinfo (CentrifyDC 5.3.0-220) so from the article I understand...
View ArticleRe: custom config file for mixed domain
So from the article I understand i can set the adclient.krb5.autoedit to false and manage this file myself - i.e. copy from the local MIT KDC - is that correct?Yes you are correct. Note that at that...
View ArticleRe: Ubuntu 16.04 LTS and Centrify 5.3.1-389 | EXIT CODE: 26
I had the same error on Ubuntu 15.10. I don't believe that it has anything to do with theComputers container. Instead, it appears to me that the Centrify installer is creating a mangled...
View Article