Unable to add ubuntu to windows domains? using centrify












1















I'm using this guide to add my linux (10.04 lucid) ubuntu machine to domain.



First I tried using likewise, but couldn't do this apparently due to some compatibility issues with 10.04 kernel. I had downloaded the 25 Mb size centrify agent. I run the command using this command: ./install-express.sh Everything works fine. As i stumble on these sets of input



Active Directory domain to join  : example.com
Active Directory authorized user : administrator
computer name : dev
container DN : Computers
domain controller name : domain-controller.example.com


In container DN name i have found a vbscript on the internet which allows me to retrieve given user name DN. E.G.: DN: CN=George Jetson, OU=Vehicles, OU=Engineering, DC=YOURDOAMIN,DC=COM



I enter Vehicles since this is the most specific of the OU definition. I'm doing this fine? Or i need to add like Vehicles.Engineering. ? Do i have to goto node level or just parent-node or sub-parent node.



However, as I enter the domain user/password and I accept Y at the end. It goes through couple of checks it says (PASS) to all of them until i'm echohed with the error. Its related to krb5 or some kind of authentication. This error is also seen in var/log/centrify.log with error code 26. This is not an authentication error because I have tried it with giving wrong credentials and the output given then is of incorrect user/password.



I want to know if I need to add some other packages of kerberos. Since I'm using backtrack 5 its not what you call a standard/Off the shelf ubuntu installation. Its most customized and built for security products integration.










share|improve this question





























    1















    I'm using this guide to add my linux (10.04 lucid) ubuntu machine to domain.



    First I tried using likewise, but couldn't do this apparently due to some compatibility issues with 10.04 kernel. I had downloaded the 25 Mb size centrify agent. I run the command using this command: ./install-express.sh Everything works fine. As i stumble on these sets of input



    Active Directory domain to join  : example.com
    Active Directory authorized user : administrator
    computer name : dev
    container DN : Computers
    domain controller name : domain-controller.example.com


    In container DN name i have found a vbscript on the internet which allows me to retrieve given user name DN. E.G.: DN: CN=George Jetson, OU=Vehicles, OU=Engineering, DC=YOURDOAMIN,DC=COM



    I enter Vehicles since this is the most specific of the OU definition. I'm doing this fine? Or i need to add like Vehicles.Engineering. ? Do i have to goto node level or just parent-node or sub-parent node.



    However, as I enter the domain user/password and I accept Y at the end. It goes through couple of checks it says (PASS) to all of them until i'm echohed with the error. Its related to krb5 or some kind of authentication. This error is also seen in var/log/centrify.log with error code 26. This is not an authentication error because I have tried it with giving wrong credentials and the output given then is of incorrect user/password.



    I want to know if I need to add some other packages of kerberos. Since I'm using backtrack 5 its not what you call a standard/Off the shelf ubuntu installation. Its most customized and built for security products integration.










    share|improve this question



























      1












      1








      1








      I'm using this guide to add my linux (10.04 lucid) ubuntu machine to domain.



      First I tried using likewise, but couldn't do this apparently due to some compatibility issues with 10.04 kernel. I had downloaded the 25 Mb size centrify agent. I run the command using this command: ./install-express.sh Everything works fine. As i stumble on these sets of input



      Active Directory domain to join  : example.com
      Active Directory authorized user : administrator
      computer name : dev
      container DN : Computers
      domain controller name : domain-controller.example.com


      In container DN name i have found a vbscript on the internet which allows me to retrieve given user name DN. E.G.: DN: CN=George Jetson, OU=Vehicles, OU=Engineering, DC=YOURDOAMIN,DC=COM



      I enter Vehicles since this is the most specific of the OU definition. I'm doing this fine? Or i need to add like Vehicles.Engineering. ? Do i have to goto node level or just parent-node or sub-parent node.



      However, as I enter the domain user/password and I accept Y at the end. It goes through couple of checks it says (PASS) to all of them until i'm echohed with the error. Its related to krb5 or some kind of authentication. This error is also seen in var/log/centrify.log with error code 26. This is not an authentication error because I have tried it with giving wrong credentials and the output given then is of incorrect user/password.



      I want to know if I need to add some other packages of kerberos. Since I'm using backtrack 5 its not what you call a standard/Off the shelf ubuntu installation. Its most customized and built for security products integration.










      share|improve this question
















      I'm using this guide to add my linux (10.04 lucid) ubuntu machine to domain.



      First I tried using likewise, but couldn't do this apparently due to some compatibility issues with 10.04 kernel. I had downloaded the 25 Mb size centrify agent. I run the command using this command: ./install-express.sh Everything works fine. As i stumble on these sets of input



      Active Directory domain to join  : example.com
      Active Directory authorized user : administrator
      computer name : dev
      container DN : Computers
      domain controller name : domain-controller.example.com


      In container DN name i have found a vbscript on the internet which allows me to retrieve given user name DN. E.G.: DN: CN=George Jetson, OU=Vehicles, OU=Engineering, DC=YOURDOAMIN,DC=COM



      I enter Vehicles since this is the most specific of the OU definition. I'm doing this fine? Or i need to add like Vehicles.Engineering. ? Do i have to goto node level or just parent-node or sub-parent node.



      However, as I enter the domain user/password and I accept Y at the end. It goes through couple of checks it says (PASS) to all of them until i'm echohed with the error. Its related to krb5 or some kind of authentication. This error is also seen in var/log/centrify.log with error code 26. This is not an authentication error because I have tried it with giving wrong credentials and the output given then is of incorrect user/password.



      I want to know if I need to add some other packages of kerberos. Since I'm using backtrack 5 its not what you call a standard/Off the shelf ubuntu installation. Its most customized and built for security products integration.







      windows active-directory






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited 10 hours ago









      Rui F Ribeiro

      41.3k1481140




      41.3k1481140










      asked Oct 16 '12 at 14:01









      asadzasadz

      16819




      16819






















          0






          active

          oldest

          votes











          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "106"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: false,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: null,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f51994%2funable-to-add-ubuntu-to-windows-domains-using-centrify%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Unix & Linux Stack Exchange!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f51994%2funable-to-add-ubuntu-to-windows-domains-using-centrify%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Histoire des bourses de valeurs

          Why is there Russian traffic in my log files?

          Rename multiple files to decrement number in file name?