==-Automated Process-==
{F1987}
Here is an automated script that will run the commands below for you. Make sure you run `chmod +x pbis.sh` to make it executable, and then `sudo ./pbis.sh` to run it. You will still need to run the `domainjoin-cli` command to join it to the domain, as well as get it moved to the right OU in the Active Directory.
==-Manual Process-==
```
wget -O - http://repo.pbis.beyondtrust.com/apt/RPM-GPG-KEY-pbis|sudo apt-key add -
sudo wget -O /etc/apt/sources.list.d/pbiso.list http://repo.pbis.beyondtrust.com/apt/pbiso.list
sudo apt-get update
sudo apt install pbis-open openssh-server
```
====Join to domain====
```
sudo domainjoin-cli join RD.UNR.EDU $USER@unr.edu
```
====Configure====
```
sudo /opt/pbis/bin/config RequireMembershipOf "UNR\\GG-Engr-ECC-Students" "UNR\\GG-Engr-ECC-Admin" "UNR\\GG-Engr-ECC-Faculty"
sudo /opt/pbis/bin/config HomeDirTemplate "/home/%U"
sudo /opt/pbis/bin/config HomeDirUmask "077"
sudo /opt/pbis/bin/config UserDomainPrefix "UNR"
sudo /opt/pbis/bin/config AssumeDefaultDomain true
sudo /opt/pbis/bin/config LoginShellTemplate /bin/bash
```
====Quick Error====
If you run into a Kerberos Error `LW_ERROR_KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN` run the following command:
`sudo /opt/pbis/bin/lwsm restart lwreg`
If you run into an error where is says access denied when a user tries to login, email Zach and ask him to add that users netid to the ECC AD groups