Version 1 vs 7
Version 1 vs 7
Content Changes
Content Changes
==-Automated Process-==
{F2071}
Here is an automated script that will run the commands below for you. Make sure you run `chmod +x pbis.sh` to make it executable, and then `sudo ./pbis.sh` to run it. You will still need to run the `domainjoin-cli` command to join it to the domain, as well as get it moved to the right OU in the Active Directory.
==-Manual Process-==
```
wget -O - http://repo.pbis.beyondtrust.com/yum/RPM-GPG-KEY-pbis|sudo apt-key add -
sudo wget -O /etc/apt/sources.list.d/pbiso.list http://repo.pbis.beyondtrust.com/apt/pbiso.list
sudo apt-get update
sudo apt install pbis-open openssh-server
```
====Join to domain====
```
sudo domainjoin-cli join RD.UNR.EDU $USER@unr.edu
```
====Configure====
`#sudo /opt/pbis/bin/config RequireMembershipOf "UNR\\GG-Engr-ECC-Students" "UNR\\GG-Engr-ECC-Admin" "UNR\\GG-Engr-ECC-Faculty"`
`sudo /opt/pbis/bin/config HomeDirTemplate "/home/%U"`
`sudo /opt/pbis/bin/config HomeDirUmask "077"`
`sudo /opt/pbis/bin/config UserDomainPrefix "UNR"`
`sudo /opt/pbis/bin/config AssumeDefaultDomain true`
`sudo /opt/pbis/bin/config LoginShellTemplate /bin/bash`
==-Automated Process-==
{F1987}
Here is an automated script that will run the commands below for you. Make sure you run `chmod +x pbis.sh` to make it executable, and then `sudo ./pbis.sh` to run it. You will still need to run the `domainjoin-cli` command to join it to the domain, as well as get it moved to the right OU in the Active Directory.
==-Manual Process-==
```
wget -O - http://repo.pbis.beyondtrust.com/apt/RPM-GPG-KEY-pbis|sudo apt-key add -
sudo wget -O /etc/apt/sources.list.d/pbiso.list http://repo.pbis.beyondtrust.com/apt/pbiso.list
sudo apt-get update
sudo apt install pbis-open openssh-server
```
====Join to domain====
```
sudo domainjoin-cli join RD.UNR.EDU $USER@unr.edu
```
====Configure====
```
#sudo /opt/pbis/bin/config RequireMembershipOf "UNR\\GG-Engr-ECC-Students" "UNR\\GG-Engr-ECC-Admin" "UNR\\GG-Engr-ECC-Faculty"
sudo /opt/pbis/bin/config HomeDirTemplate "/home/%U"
sudo /opt/pbis/bin/config HomeDirUmask "077"
sudo /opt/pbis/bin/config UserDomainPrefix "UNR"
sudo /opt/pbis/bin/config AssumeDefaultDomain true
sudo /opt/pbis/bin/config LoginShellTemplate /bin/bash
```
====Quick Error====
If you run into a Kerberos Error `LW_ERROR_KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN` run the following command:
`sudo /opt/pbis/bin/lwsm restart lwreg`
If you run into an error where is says access denied when a user tries to login, email Zach and ask him to add that users netid to the ECC AD groups
==-Automated Process-==
{F2071}{F1987}
Here is an automated script that will run the commands below for you. Make sure you run `chmod +x pbis.sh` to make it executable, and then `sudo ./pbis.sh` to run it. You will still need to run the `domainjoin-cli` command to join it to the domain, as well as get it moved to the right OU in the Active Directory.
==-Manual Process-==
```
wget -O - http://repo.pbis.beyondtrust.com/yumapt/RPM-GPG-KEY-pbis|sudo apt-key add -
sudo wget -O /etc/apt/sources.list.d/pbiso.list http://repo.pbis.beyondtrust.com/apt/pbiso.list
sudo apt-get update
sudo apt install pbis-open openssh-server
```
====Join to domain====
```
sudo domainjoin-cli join RD.UNR.EDU $USER@unr.edu
```
====Configure====
```
#sudo /opt/pbis/bin/config RequireMembershipOf "UNR\\GG-Engr-ECC-Students" "UNR\\GG-Engr-ECC-Admin" "UNR\\GG-Engr-ECC-Faculty"`
sudo /opt/pbis/bin/config HomeDirTemplate "/home/%U"
sudo /opt/pbis/bin/config HomeDirUmask "077"
`sudo /opt/pbis/bin/config HomeDirTemplate "/home/%U"`UserDomainPrefix "UNR"
`sudo /opt/pbis/bin/config HomeDirUmask "077"`sudo /opt/pbis/bin/config AssumeDefaultDomain true
sudo /opt/pbis/bin/config LoginShellTemplate /bin/bash
```
====Quick Error====
`sudo /opt/pbis/bin/config UserDomainPrefix "UNR"`If you run into a Kerberos Error `LW_ERROR_KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN` run the following command:
`sudo /opt/pbis/bin/config AssumeDefaultDomain true`lwsm restart lwreg`
`sudo /opt/pbis/bin/config LoginShellTemplate /bin/bash`If you run into an error where is says access denied when a user tries to login, email Zach and ask him to add that users netid to the ECC AD groups