Active Directory (AD) Bridge

Monthly Buzz - November - Active Directory Bridge

AD Bridge Supported Versions Lifecycle Information BeyondTrust provides support for any major versions of our products for two (2) years from the generally available (GA) release date. We recommend reviewing the product lifecycle at least once a year and not being more than two versions behind as it may make it more complex to upgrade. For details on the supported platforms for each version, refer to KB0019169.MR - Maintenance Release, these have the same end of support as the GA release AD Bridge Version Release Date End of Support

20 days ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Dec 9 - Dec 16)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023148 - Computers can't self-assign licenses.

2 days ago

mcencienzoRising Star

asked in General

AD Bridge Cached Credential in Linux Servers

Hi Everyone, Has everyone encountered any impact regarding the cached credential on Linux servers with AD Bridge installed? Particularly if the cached credential is managed by Password Safe and is being rotated regularly? Thanks!

171

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Nov 10 - Nov 17)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022197 - Default Packages in RHEL 9 and derivatives don't include perl modules - error when installing FindBin

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Oct 27 - Nov 3)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021709 - After a new AD Bridge install - gpupdate and gporefresh hangs or does not complete KB0022869 - Collector Status error - Can not contact the database server

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - October - Active Directory Bridge

Creating a Computer Account Object in Active Directory using adtool Command Computer account objects can be created in Active Directory, without switching over to a Windows management host, ahead of joining the computer to the domain. On the Unix or Linux client use the /opt/pbis/bin/adtool, with the new-computer action. This is useful for administrators who want to create named computer objects as one user, but run domain join operations as a different user with different privileges. Command /opt/pbis/bin/adtool -a new-computer <ARGUMENTS> Acceptable arguments ([X] - required): --dn=STRING DN/RDN of the parent container/OU containing the computer. (use '-' for stdin input)--name=STRING

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Oct 20 - Oct 27)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022993 - Error when changing AD user's password on Debian 13 machine "Passwd: Provided user name is not a valid name"

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Oct 13 - Oct 20)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021668 - Server login error - /usr/bin/id: cannot find name for user or group KB0021721 - The adtool command fails to return all ACLs and computer objects when host name is greater than 15 characters KB0022959 - GPO update is failing with error: "lsass: [lsass] Cache could not be emptied

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Oct 6 - Oct 13)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021632 - How to enable or disable a computer object using adtool

2 months ago

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - September - Active Directory Bridge

Updating DNS Records on Linux/Unix with AD Bridge Agent On a Linux or UNIX machine, an administrator can run the following command:/opt/pbis/bin/update-dns This command securely registers the machine’s IP addresses and corresponding PTR records in DNS using dynamic DNS updates. By default, it registers all interface addresses with the default FQDN, which is determined by either: the machine password store, or the canonical hostname returned by gethostbyname(gethostname()) if --nocreds is used. Note: The update-dns command does not run automatically. Each time it is executed, it updates the timestamp on the DNS record. If DNS scavenging is enabled, administrators can configure a cron job (for example, daily) to refresh the record’s date and prevent its removal. The update-dns comman

2 months ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Sep 15 - Sep 22)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022869 - Collector Status error - Can not contact the database server

2 months ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Sep 1 - Sep 8)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022611 - Domain join or setkey-cli fail with local LDAP error KB0022792 - Warning: A resumable error occurred while processing a module KB0022866 - KRB5 cache files are not deleted at logout

3 months ago

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - August - Active Directory Bridge

How to Collect a Support Package for AD Bridge There are multiple ways to collect a Support Package for the Active Directory Bridge (AD Bridge) support team. Listed below are the most common ones, and their respective uses Prerequisite The commands in this KB require root or sudo permissions Before running the command, ensure tcpdump and Perl are installed on the host.If Perl is not installed an error message will be displayed similar to the one below:/usr/bin/perl: bad interpreter: No such file or directoryThis can be tested by checking for the Perl version using the following command:perl -v If Perl is installed, this command will display the version information. If it's not installed, Perl will need to be installed in order to execute the

3 months ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Aug 18 - Aug 25)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022792 - Warning: A resumable error occurred while processing a module

3 months ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Aug 11 - Aug 18)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022441 - Cannot install AD Bridge from BIUL. Error "No installers available for this product" KB0022753 - Domain groups in PAM rules do not work

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - July - Active Directory Bridge

AD Bridge (ADB) Supported Platforms Below is a list of the supported platforms for AD Bridge (Unix, Linux and Windows). For additional information on each platform, refer to the respective versions Supported Platforms guide. AD Bridge no longer supports macOS or HP-UX 11i v3 (B.11.31) ITANIUM – the support was dropped as of version 10.1 Unix Platforms MR - Maintenance Release, these have the same end of support as the GA release ADB version Release Date End of Support I

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Jul 28 - Aug 4)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022743 - How do users request a new license? KB0022744 - Where can the AD Bridge installers be found? KB0022746 - Can the AD Bridge console be upgraded over an existing console?

210

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Jul 21 - Jul 28)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022616 - Adtool add user to cell fails with ERROR: 400042: Failed to get object's GUID KB0022697 - Unable to login on some production hosts. Error "LW_ERROR_STRING_CONV_FAILED" KB0022708 - Some users are not showing when running enum-users

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Jul 14 - Jul 21)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022678 - If the primary AD server stops and the Kerberos ticket expires, will the ticket be automatically re-acquired from the secondary KDC? KB0022679 - Can PBIS-Open be upgraded to PBIS-Enterprise (AD Bridge)? KB0022680 - How often does the AD Bridge Agent check for a valid license?

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Jul 7 - Jul 14)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022611 - Domain join error LW_ERROR_LDAP_LOCAL_ERROR [code 0x00009d5f] - configuration of 'krb5' did not fully complete KB0022633 - On AIX id command for AD users results in Segmentation fault coredump

100

5 months ago

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - June - Active Directory Bridge

How to Check the Health of AD Bridge AgentAfter an upgrade, it's important to perform key checks to verify that everything is functioning as expected. Check if the Active Directory is onlineRun the following command with root privileges: /opt/pbis/get-status Example successful output: [Authentication provider: lsa-activedirectory-provider] Status: Online Mode: Un-provisioned Domain: example.com Forest: example.com Site: Default-First-Site-Name If the result is unknown, then from the console, you will need to leave the domain, go to Active Directory, and delete the computer object. Wait approximately 15 minutes, or however long it takes for replication to complete, then join. For more information, refer to

170

5 months ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Jun 9 - Jun 16)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022480 - Hostname update and domain join fails "ERROR_FILE_NOT_FOUND"

190

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Jun 2 - Jun 9)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022441 - Cannot install AD Bridge from BIUL. Error "No installers available for this product"

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - May - Active Directory Bridge

AD Bridge supported versions lifecycle information BeyondTrust provides support for any major versions of our products for two (2) years from the generally available (GA) release date. We recommend reviewing the product lifecycle at least once a year and not being more than two versions behind as it may make it more complex to upgrade. For details on the supported platforms for each version, refer to KB0019169. AD Bridge Version Release Date End of Support Release Notes

370

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (May 19 - May 26)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022411 - Error - sudo: fatal error, unable to load plugins