Granting Active Directory group privilge to logon to linux server

November 28, 2011
By

Likewise similar to Winbind is an open source software used to integrate linux server with Microsoft Active Directory authentication.

This article assume that you already have Likewise installed and configured on the Linux server. The steps below is simply to grant a new AD group the privilege to logon to a Linux server.

To find out what version of Likewise is installed.
# cat /opt/likewise/data/VERSION
VERSION=5.1.0
BUILD=5261
REVISION=34052
[root@cube data]#

Alternatively you can also use.
# /opt/likewise/bin/lw-get-status

# rpm -qa | grep likewise
likewise-sqlite-5.1.0-1.34052.5261
likewise-lsass-5.1.0-1.34052.5261
likewise-base-5.1.0-1.34052.5261
likewise-domainjoin-5.1.0-1.34052.5261
likewise-krb5-5.1.0-1.34052.5261
likewise-mod-auth-kerb-5.1.0-1.34052.5261
likewise-rpc-5.1.0-1.34052.5261
likewise-openldap-5.1.0-1.34052.5261
likewise-passwd-5.1.0-1.34052.5261
likewise-eventlog-5.1.0-1.34052.5261
likewise-libxml2-5.1.0-1.34052.5261
likewise-pstore-5.1.0-1.34052.5261
likewise-netlogon-5.1.0-1.34052.5261

List the services associated with Likewise.
# ps -ef | grep like
root 2749 1 0 Nov12 ? 00:00:00 /opt/likewise/sbin/dcerpcd
root 2777 1 0 Nov12 ? 00:00:00 /opt/likewise/sbin/eventlogd –start-as-daemon
root 2796 1 0 Nov12 ? 00:00:01 /opt/likewise/sbin/netlogond –start-as-daemon
root 2823 1 0 Nov12 ? 00:00:06 /opt/likewise/sbin/lsassd –start-as-daemon
root 2841 1 0 Nov12 ? 00:00:00 /opt/likewise/sbin/lwrdrd –start-as-daemon
root 12990 12945 0 11:04 pts/1 00:00:00 grep like

Restart the services.
# service lsassd restart
Stopping lsassd: [ OK ]
Starting lsassd: [ OK ]

# service lwrdrd restart
Stopping lwrdrd: [ OK ]
Starting lwrdrd: [ OK ]

# service netlogond restart
Stopping netlogond: [ OK ]
Starting netlogond: [ OK ]

# service eventlogd restart
Stopping eventlogd: [ OK ]
Starting eventlogd: [ OK ]

Grant the groups domain admins and backup-operators permission to logon to this server.
# Vi /etc/likewise/lsassd.conf
require-membership-of = andrewlin-domain\domain admins, andrelin-domain\backup-operators

Be Sociable, Share!

Tags: , , ,

Leave a Reply