I'm not too sure, nor do I really care all that much, but it seems that it seems that the package is not called Likewise Open anymore, but rather PowerBroker Identity Services, at any rate, these are the instructions needed to join a CentOS 6.x to a Windows 2012 AD Domain.
Firstly, ensure that domain name resolution is working, at a minimum the CentOS box must be able to ping the domain controller by name. Example /etc/resolv.conf file below, where there is a dns server on 192.168.1.65 for domain dev.com:
search dev.com
nameserver 192.168.1.65
- Download the package from here (Although there is no support for CentOS 6.1 or higher it works fine):
- Disable SELinux. This is required by the installer
- Install package:
- Join AD domain:
- Create DNS entry:
- Create SELinux Policy Module (see this link). Alternatively, disable SELinux altogether by editing the /etc/selinux/config file.
http://www.beyondtrust.com/Technical-Support/Downloads/PowerBroker-Identity-Services-Open-Edition/?Pass=True
setenforce 0
sh pbis-open-7.0.4.918.linux.x86_64.rpm.sh
domainjoin-cli join dev.com Administrator
/opt/pbis/bin/update-dns
This, by far, is the easiest walk-through I've seen in getting a *nix box on AD. Thanks very much!
ReplyDeleteVery helpful thnx!
ReplyDeleteI agree, thanks a bunch!
ReplyDeleteERROR_FILE_NOT_FOUND (0x00000002)
ReplyDeletei got this error can any one help
does this happen when installing the package or when joining the domain?
Deletewhile installing the package
Deletenow i am able to add my centos machine into the domain by using above documents thank a lot to share your knowledge .
ReplyDeleteWorks very smoothly
ReplyDeleteOne more update - this is MUCH easier to use to facilitate TACACS+ with AD authentication on Ubuntu / Centos than the old fashioned OpenLDAP way.
ReplyDeletedoes someone know after this guide how to add the samba file server role. I've installed everything but i still get errors
ReplyDeleteI have Used PBIS to join Ubuntu machines in windows AD. For a while only(1 or 2 hours)
ReplyDeleteAfter some time again i tried to login those machines in domain by using the same credentials (which are working well to login)
it shows "Access Denied" in Putty. how to solve this issue
i got an error when adding to domain Error:Undocumented exception [code 0x00009efc]. Plese hep!
ReplyDeleteGreat tutorial! Anyone here configure it with Tacacs+ via PAM? Any tutorial as well?
ReplyDeleteHi friends,
ReplyDeletedose anyone know how to fix below error.
Reason message: Undocumented exception
Reason message (long): An undocumented exception has occurred. Please contact BeyondTrust technical support and use the error code to identify this exception.
Reason code: 0x 9efc
I have the same problem
DeleteNice Blog Post !
ReplyDelete