Powerbroker
Powerbroker
-Automated Process-
Here is an automated script that will run the commands below for you. Make sure you run chmod +x pbis.sh to make it executable, and then sudo ./pbis.sh to run it. You will still need to run the domainjoin-cli command to join it to the domain, as well as get it moved to the right OU in the Active Directory.
-Manual Process-
wget -O - http://repo.pbis.beyondtrust.com/apt/RPM-GPG-KEY-pbis|sudo apt-key add - sudo wget -O /etc/apt/sources.list.d/pbiso.list http://repo.pbis.beyondtrust.com/apt/pbiso.list sudo apt-get update sudo apt install pbis-open openssh-server
Join to domain
sudo domainjoin-cli join RD.UNR.EDU $USER@unr.edu
Configure
#sudo /opt/pbis/bin/config RequireMembershipOf "UNR\\GG-Engr-ECC-Students" "UNR\\GG-Engr-ECC-Admin" "UNR\\GG-Engr-ECC-Faculty" sudo /opt/pbis/bin/config HomeDirTemplate "/home/%U" sudo /opt/pbis/bin/config HomeDirUmask "077" sudo /opt/pbis/bin/config UserDomainPrefix "UNR" sudo /opt/pbis/bin/config AssumeDefaultDomain true sudo /opt/pbis/bin/config LoginShellTemplate /bin/bash
Quick Error
If you run into a Kerberos Error LW_ERROR_KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN run the following command:
sudo /opt/pbis/bin/lwsm restart lwreg
If you run into an error where is says access denied when a user tries to login, email Zach and ask him to add that users netid to the ECC AD groups
Tags
None
Subscribers
None
- Last Author
- claytonf
- Last Edited
- Mar 4 2020, 11:18 AM