CONFIGURING UBUNTU LINUX TO AUTHENTICATE WINDOWS AD USERS

Ubuntu 8.04 comes with Likewise open package. If your version of ubuntu does not have Likewise
open, download the package and install. Nis-client also has to be installed and configured.
Follow the following steps:

1) At the prompt type;

sudo apt-get update
2) At the prompt type;
sudo apt-get install likewise-open
3) Configure /etc/nsswitch.conf to use the nis information. Add nis to all sections which should work
with the nis service: At the prompt type;
gksudo gedit /etc/nsswitch.conf

> ---------------------------------------------------------------
># /etc/nsswitch.conf
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference’ and `info’ packages installed, try:
# `info libc “Name Service Switch”‘ for information about this file.

passwd: compat winbind lwidentity

group: compat winbind lwidentity
shadow: compat winbind
hosts: files dns winbind
networks: files
protocols: db files
services: db files
ethers: db files
rpc: db files
netgroup: nis

>
> automount: files nis
> ---------------------------------------------------------------
>

4) Join machine to the domain. At the prompt type;

sudo domainjoin-cli join <fqdn of domain> <Administrator>
5) Add the function to instruct machine to connect to domain at every system startup by typing;
sudo update-rc.d likewise-open defaults
6) To start likewise ,at the prompt type;
sudo /etc/init.d/likewise-open start

END

To Download Likewise without having to download all updates

To download likewise only without having to Download All Updates Use The Following Commands;
wget \http://archives.likewisesoftware.com/\
likewise-open/src/likewise-open-4.0.4.tar.gz
tar zxf likewise-open-4.0.4.tar.gz
cd likewise-open-4.0.4-release
make dpkg

Remove from the windows Domain

The domainjoin-cli utility can also be used to remove from the domain.
sudo domainjoin-cli leave
Allow Active Directory Domain Administrators to Administer Ubuntu

This will allow members of the Domain Admins AD group to issue sudo commands. From a
command prompt
At the prompt type

gksudo gedit /etc/group

Find the admin group and add the active directory user so that it looks something like this:
admin:x:117:olduser,ActiveDirectoryUser

e.g. admin:x:117;olduser,STRATHMORE/mkisienya

Add the user to sudoers file

gksudo gedit /etc/sudoers

domain\\user ALL=(ALL) ALL

e.g. strathmore\\mkisienya ALL=(ALL) ALL