Likewise Open is a utility that simplifies the necessary configuration needed to authenticate a Linux machine to Active Directory. Created by Likewise Software with the aim of making Linux and Unix first class citizens on a Windows network the likewise-open package can authenticate both Ubuntu Desktop Edition and Ubuntu Server Edition machines.
There are two ways to use Likwise Open. likewise-open the command line utility, and likewise-open-gui the graphical utility. Currently the packages are available in the Universe repository, but they may be moved into Main during a future release. For instructions on installing software and using repositories see the InstallingSoftware page.
Joining a Domain CLI
Once you've installed the likewise-open package the main executable file is
/usr/bin/domainjoin-cli used to join your computer to the domain. Before you join a domain you will need to have make sure:
- You have access to an Active Directory user with appropriate access.
- The Fully Qualified Domain Name of the domain you want to join.
- DNS for the domain is setup appropriately.
To join a domain from a terminal prompt enter:
sudo domainjoin-cli join example.local Administrator
You will then be prompted for the user's password. Administrator in the example above. If all goes well a SUCCESS message should be printed to the console. After joining the domain, you need to run the following to reinstall the start-up scripts for likewise-open:
sudo update-rc.d likewise-open defaults
Once you have successfully joined a Ubuntu machine to an Active Directory domain you can login using any valid AD user. To login you will need to enter the user name as 'domain\username'. For example to ssh to a server joined to the domain enter:
ssh 'example\steve'@hostname or ssh -l 'example\steve' hostname
If configuring a Desktop the username will need to be prefixed with domain\ in gdm as well.
The likewise-open package comes with a few other utilities that may be useful for gather information about Active Directory domains. Likewise Open is based on the Samba winbindd code and these utilities are the same as those available in the samba-common and winbind packages. These utilities are used to join the machine to the domain:
- lwinet -- Returns information about the network and the domain.
- lwimsg -- Allows interaction with the likewise-winbindd daemon.
- lwiinfo -- Displays information about various parts of the Domain.
Note: please refer to the utility's man page specific for details.