<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Authenticating Active Directory users on Linux with Likewise Open</title>
	<atom:link href="http://andys.org.uk/bits/2010/01/28/likewise-open-and-linux/feed/" rel="self" type="application/rss+xml" />
	<link>http://andys.org.uk/bits/2010/01/28/likewise-open-and-linux/</link>
	<description>random stuff from the mind of a twenty-something professional geek</description>
	<lastBuildDate>Mon, 26 Mar 2012 03:27:26 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
	<item>
		<title>By: Delicious Bookmarks for December 18th from 02:49 to 10:16 &#171; Lâmôlabs</title>
		<link>http://andys.org.uk/bits/2010/01/28/likewise-open-and-linux/comment-page-1/#comment-15792</link>
		<dc:creator>Delicious Bookmarks for December 18th from 02:49 to 10:16 &#171; Lâmôlabs</dc:creator>
		<pubDate>Sun, 18 Dec 2011 16:02:34 +0000</pubDate>
		<guid isPermaLink="false">http://andys.org.uk/bits/?p=20#comment-15792</guid>
		<description>[...] bits &#124; andy smith&#8217;s blog &#187; Authenticating Active Directory users on Linux with Likewise ... &#8211; December 18th  ( tags: likewise linux activedirectory ad setup howto guide tutorial ) [...]</description>
		<content:encoded><![CDATA[<p>[...] bits | andy smith&#8217;s blog &raquo; Authenticating Active Directory users on Linux with Likewise &#8230; &#8211; December 18th  ( tags: likewise linux activedirectory ad setup howto guide tutorial ) [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Brad</title>
		<link>http://andys.org.uk/bits/2010/01/28/likewise-open-and-linux/comment-page-1/#comment-9911</link>
		<dc:creator>Brad</dc:creator>
		<pubDate>Mon, 09 May 2011 20:02:01 +0000</pubDate>
		<guid isPermaLink="false">http://andys.org.uk/bits/?p=20#comment-9911</guid>
		<description>Just a quick question, setting the user home directories:  is there a way to set the home directory as /GROUP/USER ?  I&#039;m looking into using Likewise, and would like to maintain the current home directory setup.  Can I (instead of using %U) use /$group/$user as the home directory?</description>
		<content:encoded><![CDATA[<p>Just a quick question, setting the user home directories:  is there a way to set the home directory as /GROUP/USER ?  I&#8217;m looking into using Likewise, and would like to maintain the current home directory setup.  Can I (instead of using %U) use /$group/$user as the home directory?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: TekBudda</title>
		<link>http://andys.org.uk/bits/2010/01/28/likewise-open-and-linux/comment-page-1/#comment-3018</link>
		<dc:creator>TekBudda</dc:creator>
		<pubDate>Tue, 12 Oct 2010 04:33:31 +0000</pubDate>
		<guid isPermaLink="false">http://andys.org.uk/bits/?p=20#comment-3018</guid>
		<description>Hi there!

I recently installed Linux Mint 9 on a computer for my wife.  I also installed Likewise Open &amp; it all seems to be working fine as near as I can tell.  I can log in as her using the DOMAIN\username at the login window, but I am wanting to go a step further.

She was previously on a Windows 2000 machine &amp; I have been using roaming profiles with the Profiles &amp; Home drives located on the 2K3 server with an AD domain.  The 2 drives she accesses are her Home Drive &amp; a shared drive between us.  The Windows pathes are below:
* Home: \\SERVER\HOME$\ABC-123
* Shared: \\SERVER\HOME$\shared
* Profiles: \\SERVER\PROFILES$\ABC-123 &amp; \\SERVER\PROFILES$\shared

What I would like to do is her connect to her home drive &amp; the Shared drive.  Eventually I would like her profile on the server with common items between Windows, Mac &amp; Linux (i.e. Thunderbird profiles, Firefox Profiles, etc.)...although this is not core right now.

My questions are:
* How do I successfully map those drives for her so they will appear on login (preferably with names like Home &amp; Shared? (Similar to the function served by a Windows batch file at login)
* How do I make it so she will not need the DOMAIN\ before her username?
* She has a netbook as well &amp; I wonder if there is a way that she can:
     - Connect it to the domain as well?
     - Same login scheme as the desktop?
     - Profile does not need to be copied
     - Sync data on server Home to local home on netbook for access when traveling &amp; sync back upon login back to domain.

I have scoured some sources on teh net &amp; asked some other Linux folk, but I have either not explained it right or they misunderstood, because the answer has not been clear enough.

Any help anyone can offer would be excellent!</description>
		<content:encoded><![CDATA[<p>Hi there!</p>
<p>I recently installed Linux Mint 9 on a computer for my wife.  I also installed Likewise Open &amp; it all seems to be working fine as near as I can tell.  I can log in as her using the DOMAIN\username at the login window, but I am wanting to go a step further.</p>
<p>She was previously on a Windows 2000 machine &amp; I have been using roaming profiles with the Profiles &amp; Home drives located on the 2K3 server with an AD domain.  The 2 drives she accesses are her Home Drive &amp; a shared drive between us.  The Windows pathes are below:<br />
* Home: \\SERVER\HOME$\ABC-123<br />
* Shared: \\SERVER\HOME$\shared<br />
* Profiles: \\SERVER\PROFILES$\ABC-123 &amp; \\SERVER\PROFILES$\shared</p>
<p>What I would like to do is her connect to her home drive &amp; the Shared drive.  Eventually I would like her profile on the server with common items between Windows, Mac &amp; Linux (i.e. Thunderbird profiles, Firefox Profiles, etc.)&#8230;although this is not core right now.</p>
<p>My questions are:<br />
* How do I successfully map those drives for her so they will appear on login (preferably with names like Home &amp; Shared? (Similar to the function served by a Windows batch file at login)<br />
* How do I make it so she will not need the DOMAIN\ before her username?<br />
* She has a netbook as well &amp; I wonder if there is a way that she can:<br />
     &#8211; Connect it to the domain as well?<br />
     &#8211; Same login scheme as the desktop?<br />
     &#8211; Profile does not need to be copied<br />
     &#8211; Sync data on server Home to local home on netbook for access when traveling &amp; sync back upon login back to domain.</p>
<p>I have scoured some sources on teh net &amp; asked some other Linux folk, but I have either not explained it right or they misunderstood, because the answer has not been clear enough.</p>
<p>Any help anyone can offer would be excellent!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: andrewe</title>
		<link>http://andys.org.uk/bits/2010/01/28/likewise-open-and-linux/comment-page-1/#comment-943</link>
		<dc:creator>andrewe</dc:creator>
		<pubDate>Mon, 12 Jul 2010 01:59:11 +0000</pubDate>
		<guid isPermaLink="false">http://andys.org.uk/bits/?p=20#comment-943</guid>
		<description>Hi.

thanks for this. Worked like a treat in joining to the domain but now I can&#039;t access as root, I can only access as my domain account which has no authority to do anything on the box. If I try accessing as my original user account I get an authentication failure. I can&#039;t sudo under my domain account and obviously can&#039;t modify sudoers.

Any advice?

I&#039;m running Likewise 6 and Linux Mint 9.</description>
		<content:encoded><![CDATA[<p>Hi.</p>
<p>thanks for this. Worked like a treat in joining to the domain but now I can&#8217;t access as root, I can only access as my domain account which has no authority to do anything on the box. If I try accessing as my original user account I get an authentication failure. I can&#8217;t sudo under my domain account and obviously can&#8217;t modify sudoers.</p>
<p>Any advice?</p>
<p>I&#8217;m running Likewise 6 and Linux Mint 9.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: andys</title>
		<link>http://andys.org.uk/bits/2010/01/28/likewise-open-and-linux/comment-page-1/#comment-35</link>
		<dc:creator>andys</dc:creator>
		<pubDate>Mon, 22 Feb 2010 14:57:54 +0000</pubDate>
		<guid isPermaLink="false">http://andys.org.uk/bits/?p=20#comment-35</guid>
		<description>Hi Yvo,

Thanks for that - I&#039;ve updated the post with a link to your hint.

Cheers!</description>
		<content:encoded><![CDATA[<p>Hi Yvo,</p>
<p>Thanks for that &#8211; I&#8217;ve updated the post with a link to your hint.</p>
<p>Cheers!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Yvo van Doorn</title>
		<link>http://andys.org.uk/bits/2010/01/28/likewise-open-and-linux/comment-page-1/#comment-30</link>
		<dc:creator>Yvo van Doorn</dc:creator>
		<pubDate>Mon, 22 Feb 2010 01:02:30 +0000</pubDate>
		<guid isPermaLink="false">http://andys.org.uk/bits/?p=20#comment-30</guid>
		<description>If you want to get rid of the DOMAIN\ part…
edit the following file:
“vi /etc/likewise/lsassd.conf”
Find the line that says “assume-default-domain”
and set it to true or uncomment depending on the version of likewise.
It’s best to reboot after this just to deal with the change.
PS. This only works when your user account and computer account are part of the same domain</description>
		<content:encoded><![CDATA[<p>If you want to get rid of the DOMAIN\ part…<br />
edit the following file:<br />
“vi /etc/likewise/lsassd.conf”<br />
Find the line that says “assume-default-domain”<br />
and set it to true or uncomment depending on the version of likewise.<br />
It’s best to reboot after this just to deal with the change.<br />
PS. This only works when your user account and computer account are part of the same domain</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: andys</title>
		<link>http://andys.org.uk/bits/2010/01/28/likewise-open-and-linux/comment-page-1/#comment-18</link>
		<dc:creator>andys</dc:creator>
		<pubDate>Tue, 02 Feb 2010 17:20:19 +0000</pubDate>
		<guid isPermaLink="false">http://andys.org.uk/bits/?p=20#comment-18</guid>
		<description>Ooh... I wonder if it&#039;s baulking at the backslashes.

You can specify usernames in the form &lt;code&gt;user@domain&lt;/code&gt; (so &lt;code&gt;tso940@domain&lt;/code&gt; in your example) - that might work?

Failing that, try just specifying the UID (again, in your case 1115247694).</description>
		<content:encoded><![CDATA[<p>Ooh&#8230; I wonder if it&#8217;s baulking at the backslashes.</p>
<p>You can specify usernames in the form <code>user@domain</code> (so <code>tso940@domain</code> in your example) &#8211; that might work?</p>
<p>Failing that, try just specifying the UID (again, in your case 1115247694).</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jon</title>
		<link>http://andys.org.uk/bits/2010/01/28/likewise-open-and-linux/comment-page-1/#comment-17</link>
		<dc:creator>Jon</dc:creator>
		<pubDate>Tue, 02 Feb 2010 16:55:54 +0000</pubDate>
		<guid isPermaLink="false">http://andys.org.uk/bits/?p=20#comment-17</guid>
		<description>Thanks for the pointer.

We don&#039;t usually configure users with more than 8 characters for application compatibility but I&#039;ve changed my AIX 5.3 system to accept a 20 character user and although this works ok:

root@utajona2:/ # id domain\\tso940
uid=1115247694(domain\tso940) gid=1115161089(domain\domain^users) groups=1115243261(domain\cs-gpounrestricteduser),1115317722(domain\jlbrallowedrodcpasswordreplicationgroup),1115294180(domain\wrbrallowedrodcpasswordreplicationgroup),1115161766(domain\g_gpo-s-u^unres)

when I run the command to add my domain user to the local ldap group again, I get another (different) error:

root@utajona2:/ # usermod -G domain\\domain^users,domain\\cs-gpounrestricteduser,domain\\jlbrallowedrodcpasswordreplicationgroup,domain\\wrbrallowedrodcpasswordreplicationgroup,domain\\g_gpo-s-u^unres,ldap domain\\tso940

3004-687 User &quot;domaintso940&quot; does not exist.

Something malformed there...

Jon</description>
		<content:encoded><![CDATA[<p>Thanks for the pointer.</p>
<p>We don&#8217;t usually configure users with more than 8 characters for application compatibility but I&#8217;ve changed my AIX 5.3 system to accept a 20 character user and although this works ok:</p>
<p>root@utajona2:/ # id domain\\tso940<br />
uid=1115247694(domain\tso940) gid=1115161089(domain\domain^users) groups=1115243261(domain\cs-gpounrestricteduser),1115317722(domain\jlbrallowedrodcpasswordreplicationgroup),1115294180(domain\wrbrallowedrodcpasswordreplicationgroup),1115161766(domain\g_gpo-s-u^unres)</p>
<p>when I run the command to add my domain user to the local ldap group again, I get another (different) error:</p>
<p>root@utajona2:/ # usermod -G domain\\domain^users,domain\\cs-gpounrestricteduser,domain\\jlbrallowedrodcpasswordreplicationgroup,domain\\wrbrallowedrodcpasswordreplicationgroup,domain\\g_gpo-s-u^unres,ldap domain\\tso940</p>
<p>3004-687 User &#8220;domaintso940&#8243; does not exist.</p>
<p>Something malformed there&#8230;</p>
<p>Jon</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: andys</title>
		<link>http://andys.org.uk/bits/2010/01/28/likewise-open-and-linux/comment-page-1/#comment-16</link>
		<dc:creator>andys</dc:creator>
		<pubDate>Tue, 02 Feb 2010 14:50:34 +0000</pubDate>
		<guid isPermaLink="false">http://andys.org.uk/bits/?p=20#comment-16</guid>
		<description>Ah - I think that is the problem :-/

I&#039;m not sure on the limit these days under Linux - a quick Google suggests at least 32 characters is fine.

&lt;a href=&quot;http://www.unix.com/aix/56417-username-more-than-8-characters.html&quot; rel=&quot;nofollow&quot;&gt;This page&lt;/a&gt; seems to suggest that the limit in AIX was 8 character up until one of the 5.x releases, but it&#039;s now 255 characters...</description>
		<content:encoded><![CDATA[<p>Ah &#8211; I think that is the problem :-/</p>
<p>I&#8217;m not sure on the limit these days under Linux &#8211; a quick Google suggests at least 32 characters is fine.</p>
<p><a href="http://www.unix.com/aix/56417-username-more-than-8-characters.html" rel="nofollow">This page</a> seems to suggest that the limit in AIX was 8 character up until one of the 5.x releases, but it&#8217;s now 255 characters&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jon</title>
		<link>http://andys.org.uk/bits/2010/01/28/likewise-open-and-linux/comment-page-1/#comment-15</link>
		<dc:creator>Jon</dc:creator>
		<pubDate>Tue, 02 Feb 2010 14:35:26 +0000</pubDate>
		<guid isPermaLink="false">http://andys.org.uk/bits/?p=20#comment-15</guid>
		<description>Thanks

that&#039;s pretty clearly working for you...my problem (and it could well be AIX) is that when I try to run this:-

root@utajona2:/ # usermod -G domain\\domain^users,domain\\cs-gpounrestricteduser,domain\\jlbrallowedrodcpasswordreplicationgroup,ldap domain\\username

I get the error:

3004-691 Error changing &quot;domainusername&quot; : Name is too long.

What&#039;s the max username length in the version of Linux you were using above?  In AIX it&#039;s 8 so that could be the limit I&#039;m hitting with this.

Cheers

Jon</description>
		<content:encoded><![CDATA[<p>Thanks</p>
<p>that&#8217;s pretty clearly working for you&#8230;my problem (and it could well be AIX) is that when I try to run this:-</p>
<p>root@utajona2:/ # usermod -G domain\\domain^users,domain\\cs-gpounrestricteduser,domain\\jlbrallowedrodcpasswordreplicationgroup,ldap domain\\username</p>
<p>I get the error:</p>
<p>3004-691 Error changing &#8220;domainusername&#8221; : Name is too long.</p>
<p>What&#8217;s the max username length in the version of Linux you were using above?  In AIX it&#8217;s 8 so that could be the limit I&#8217;m hitting with this.</p>
<p>Cheers</p>
<p>Jon</p>
]]></content:encoded>
	</item>
</channel>
</rss>

