Skip to main content

Active Directory (AD) Bridge

Achieve streamlined identity management and access control by extending Microsoft AD authentication, SSO capabilities, and Group Policy configuration management to Unix and Linux systems.

49 Topics
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in General
Monthly Buzz - March - ADB
Monthly Buzz - March - ADB

New Features in AD Bridge 25.2 Improved Linux workstation experience with Entra ID We’ve enhanced the Linux workstation login experience by integrating Microsoft Entra ID, making identity management simpler and more secure. This improvement supports the growing adoption of Entra ID bridging on Linux desktops, enabling organizations to unify access across platforms and strengthen compliance Tenantjoin: Endpoint key renewal A new configuration option allows administrators to define the lifespan of an app secret, enabling automated renewal workflows. When the secret approaches expiration, a renewal process is triggered by a script, which can be customized by administrators to align with their preferred tooling or operational practices. More information can be found in the new config option MachineSecretLifespan. 

120
B
Community Manager
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in General
mcencienzo
mcencienzoTrailblazer
asked in General
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in General
Monthly Buzz - October - Active Directory Bridge
Monthly Buzz - October - Active Directory Bridge

Creating a Computer Account Object in Active Directory using adtool Command Computer account objects can be created in Active Directory, without switching over to a Windows management host, ahead of joining the computer to the domain.  On the Unix or Linux client use the /opt/pbis/bin/adtool, with the new-computer action. This is useful for administrators who want to create named computer objects as one user, but run domain join operations as a different user with different privileges. Command /opt/pbis/bin/adtool -a new-computer <ARGUMENTS> Acceptable arguments ([X] - required): --dn=STRING                                    DN/RDN of the parent container/OU containing the computer. (use '-' for stdin input)--name=STRING         

230
B
Community Manager
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in General
Monthly Buzz - September - Active Directory Bridge
Monthly Buzz - September - Active Directory Bridge

Updating DNS Records on Linux/Unix with AD Bridge Agent On a Linux or UNIX machine, an administrator can run the following command:/opt/pbis/bin/update-dns This command securely registers the machine’s IP addresses and corresponding PTR records in DNS using dynamic DNS updates. By default, it registers all interface addresses with the default FQDN, which is determined by either: the machine password store, or the canonical hostname returned by gethostbyname(gethostname()) if --nocreds is used.  Note: The update-dns command does not run automatically. Each time it is executed, it updates the timestamp on the DNS record. If DNS scavenging is enabled, administrators can configure a cron job (for example, daily) to refresh the record’s date and prevent its removal. The  update-dns comman

100
B
Community Manager
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in General
Monthly Buzz - August - Active Directory Bridge
Monthly Buzz - August - Active Directory Bridge

How to Collect a Support Package for AD Bridge There are multiple ways to collect a Support Package for the Active Directory Bridge (AD Bridge) support team. Listed below are the most common ones, and their respective uses Prerequisite The commands in this KB require root or sudo permissions Before running the command, ensure tcpdump and Perl are installed on the host.If Perl is not installed an error message will be displayed similar to the one below:/usr/bin/perl: bad interpreter: No such file or directoryThis can be tested by checking for the Perl version using the following command:perl -v If Perl is installed, this command will display the version information. If it's not installed, Perl will need to be installed in order to execute the

120
B
Community Manager
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in General
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General

Badge Earners

Show all badges
Terms & ConditionsCookie settingsAccessibility statement