Labels

Showing posts with label Active Directory. Show all posts
Showing posts with label Active Directory. Show all posts

Friday, April 25, 2014

PowerBroker Identity Services (formerly Likewise Open) on Ubuntu server

*Likewise Open is no longer available.  It has been taken over by BeyondTrust and is called PowerBroker® Identity Services, Open Edition
Here are the steps I took to get PowerBroker Identity Services, Open Edition onto Ubuntu Server.
Versions:
  • Ubuntu Server 14.04 64-bit
  • PBIS Open 8.0.0.2016 - Stable Release
  1. Log-in to server with sudo privileges
  2. Be sure ssh server is installed
  3. Download PowerBroker® Identity Services, Open Edition 
  4. Make script executable
      $chmod +x pbis-open-8.0.0.2016.linux.x86_64.deb.sh
  5. Execute install script and follow istructions 
      $sudo ./pbis-open-8.0.0.2016.linux.x86_64.deb.sh
  6. Join the domain
      $sudo domainjoin-cli join <domain name> <domain admin user>
  7. Change default shell for domain users to bash
      $sudo /opt/pbis/bin/config LoginShellTemplate /bin/bash
  8. If you would like, set the domain as default (not require <domain>\ to precede username for domain logins)
      $sudo /opt/pbis/bin/config AssumeDefaultDomain true
  9. Add domain users to necessary groups in /etc/group (sudo for the admin users)
  10. Clear cache
      $sudo /opt/pbis/bin/ad-cache --delete-all
  11. Apply fix: Edit /etc/pam.d/common-session and change "session sufficient" line to
      session [success=ok default=ignore] pam_lsass.so
  12. Reboot and login with domain user