setgid to AD group
Clash Royale CLAN TAG#URR8PPP up vote
0
down vote
favorite
I have an ?Ubuntu 17.10 server that has been joined to an Azure AD domain using these instructions
Whenever a user's home folder is created I would like to set the group ID to that of a specifc AD group.
My objective: Any AD user can authenticate and have a home directory created. Any user that's part of the AD group "supervisors" can authenticate and see the data in everyone's /home directory.
setgid looks like the right way to go, but I can't find out how to reference AD groups. Searches all show solutions using SAMBA but I'm not using SAMBA shares.
-- Edit --
Further noodling shows that when a user's home directory is created by PAM it sets the group to "domain users". This a step in the right direction.
Anyone know how to change the default group that PAM users when the home directory is created?
Would my best bet be to run a cron job that periodically changes the GID?
permissions active-directory kerberos
asked Feb 10 at 5:54
Gavin Hill
12
add a comment |Â
up vote
0
down vote
favorite
I have an ?Ubuntu 17.10 server that has been joined to an Azure AD domain using these instructions
Whenever a user's home folder is created I would like to set the group ID to that of a specifc AD group.
My objective: Any AD user can authenticate and have a home directory created. Any user that's part of the AD group "supervisors" can authenticate and see the data in everyone's /home directory.
setgid looks like the right way to go, but I can't find out how to reference AD groups. Searches all show solutions using SAMBA but I'm not using SAMBA shares.
-- Edit --
Further noodling shows that when a user's home directory is created by PAM it sets the group to "domain users". This a step in the right direction.
Anyone know how to change the default group that PAM users when the home directory is created?
Would my best bet be to run a cron job that periodically changes the GID?
permissions active-directory kerberos
asked Feb 10 at 5:54
Gavin Hill
12
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I have an ?Ubuntu 17.10 server that has been joined to an Azure AD domain using these instructions
Whenever a user's home folder is created I would like to set the group ID to that of a specifc AD group.
My objective: Any AD user can authenticate and have a home directory created. Any user that's part of the AD group "supervisors" can authenticate and see the data in everyone's /home directory.
setgid looks like the right way to go, but I can't find out how to reference AD groups. Searches all show solutions using SAMBA but I'm not using SAMBA shares.
-- Edit --
Further noodling shows that when a user's home directory is created by PAM it sets the group to "domain users". This a step in the right direction.
Anyone know how to change the default group that PAM users when the home directory is created?
Would my best bet be to run a cron job that periodically changes the GID?
permissions active-directory kerberos
asked Feb 10 at 5:54
Gavin Hill
12
I have an ?Ubuntu 17.10 server that has been joined to an Azure AD domain using these instructions
Whenever a user's home folder is created I would like to set the group ID to that of a specifc AD group.
My objective: Any AD user can authenticate and have a home directory created. Any user that's part of the AD group "supervisors" can authenticate and see the data in everyone's /home directory.
setgid looks like the right way to go, but I can't find out how to reference AD groups. Searches all show solutions using SAMBA but I'm not using SAMBA shares.
-- Edit --
Further noodling shows that when a user's home directory is created by PAM it sets the group to "domain users". This a step in the right direction.
Anyone know how to change the default group that PAM users when the home directory is created?
Would my best bet be to run a cron job that periodically changes the GID?
permissions active-directory kerberos
permissions active-directory kerberos
asked Feb 10 at 5:54
Gavin Hill
12
asked Feb 10 at 5:54
Gavin Hill
12
edited Feb 10 at 7:10
asked Feb 10 at 5:54
Gavin Hill
12
asked Feb 10 at 5:54
Gavin Hill
12
asked Feb 10 at 5:54
Gavin Hill
12
12
add a comment |Â
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1004762%2fsetgid-to-ad-group%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password