General

Monthly Buzz - April - ADB

AD Bridge 26.1.0 Machine Account Password EncryptionTo improve credential protection, as of ADBridge 26.1, machine account passwords are encrypted by default when stored in the machine-level secrets stored (registry) on Linux systems. This reduces exposure in the event of system compromise and better aligns with common security control requirements for authenticator protection. The registry setting on the Linux system added by Active Directory Bridge controls the machine account password encryption behavior:HKEY_THIS_MACHINE\Services\lsass\Parameters\Providers\ActiveDirectory\PstoreCompatLevelPstoreCompatLevel settings: 1 - The machine account password is encrypted when stored 0 - The machine account password is not encrypted when stored When upgrading from a previous AD Bridge release to 26.1, the plain

160

9 days ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Apr 27 - May 4)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022694 - AD accounts unable to login error "LW_ERROR_KRB5_PREAUTH_FAILED Preauthentication failed. KRB5 Error code: -1765328174"

5 days ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Apr 20 - Apr 27)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022220 - Error trying to join a domain - Undocumented exception

130

12 days ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Apr 13 - Apr 20)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021688 - Support package (pbis-support.pl) on AIX host fails to capture the packet capture KB0023472 - AD Bridge 26.1.0 machine account password encryption

19 days ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Apr 6 - Apr 13)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023421 - Error implementing Apache SSO to AD Bridge "Cannot load /opt/pbis/lib64/apache2.4/mod_auth_kerb.so into server:" KB0023465 - Solaris 11.4 fails to resolve group or user with error LW_ERROR_NOT_HANDLED (0x9c51)

100

26 days ago

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - March - ADB

New Features in AD Bridge 25.2 Improved Linux workstation experience with Entra ID We’ve enhanced the Linux workstation login experience by integrating Microsoft Entra ID, making identity management simpler and more secure. This improvement supports the growing adoption of Entra ID bridging on Linux desktops, enabling organizations to unify access across platforms and strengthen compliance Tenantjoin: Endpoint key renewal A new configuration option allows administrators to define the lifespan of an app secret, enabling automated renewal workflows. When the secret approaches expiration, a renewal process is triggered by a script, which can be customized by administrators to align with their preferred tooling or operational practices. More information can be found in the new config option MachineSecretLifespan.

130

1 month ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Mar 2 - Mar 9)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022044 - Using --nohosts results in error - Required configuration stage not enabled [code 0x0000a606] KB0023321 - Error 1721 installing AD Bridge "There is a problem with this Windows Installer package"

1 month ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Jan 26 - Feb 2)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022013 - OEL 8 authentication issue after AD Bridge installation. Error "LW_ERROR_KRB5KDC_ERR_ETYPE_NOSUPP" KB0023266 - All AD users cannot authenticate after a successful install and domain join AD Bridge when SELinux is enforcing

270

3 months ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Jan 19 - Jan 26)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022480 - Hostname update and domain join fails "ERROR_FILE_NOT_FOUND"

180

3 months ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Jan 12 - Jan 19)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023239 - Where to find response procedures for AD Bridge failure states KB0023241 - Information on tenantjoin renewing secrets in AD Bridge 25.2 and higher

3 months ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Dec 29 - Jan 5)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023149 - Using Samba 4.21, unable to map a drive using AD credentials. Error: The target account name is incorrect

4 months ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Dec 15 - Dec 22)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021857 - How to configure multiple GPOs to use specific scripts with AD Bridge KB0022132 - Domain join fails with Error: ERROR_BAD_CONFIGURATION [code 0x0000064a] KB0022411 - Error - sudo: fatal error, unable to load plugins

430

4 months ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Dec 9 - Dec 16)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023148 - Computers can't self-assign licenses.

300

4 months ago

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - November - Active Directory Bridge

AD Bridge Supported Versions Lifecycle Information BeyondTrust provides support for any major versions of our products for two (2) years from the generally available (GA) release date. We recommend reviewing the product lifecycle at least once a year and not being more than two versions behind as it may make it more complex to upgrade. For details on the supported platforms for each version, refer to KB0019169.MR - Maintenance Release, these have the same end of support as the GA release AD Bridge Version Release Date End of Support

290

5 months ago

mcencienzoTrailblazer

asked in General

AD Bridge Cached Credential in Linux Servers

Hi Everyone, Has everyone encountered any impact regarding the cached credential on Linux servers with AD Bridge installed? Particularly if the cached credential is managed by Password Safe and is being rotated regularly? Thanks!

341

5 months ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Nov 10 - Nov 17)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022197 - Default Packages in RHEL 9 and derivatives don't include perl modules - error when installing FindBin

110

5 months ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Oct 27 - Nov 3)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021709 - After a new AD Bridge install - gpupdate and gporefresh hangs or does not complete KB0022869 - Collector Status error - Can not contact the database server

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - October - Active Directory Bridge

Creating a Computer Account Object in Active Directory using adtool Command Computer account objects can be created in Active Directory, without switching over to a Windows management host, ahead of joining the computer to the domain. On the Unix or Linux client use the /opt/pbis/bin/adtool, with the new-computer action. This is useful for administrators who want to create named computer objects as one user, but run domain join operations as a different user with different privileges. Command /opt/pbis/bin/adtool -a new-computer <ARGUMENTS> Acceptable arguments ([X] - required): --dn=STRING DN/RDN of the parent container/OU containing the computer. (use '-' for stdin input)--name=STRING

260

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Oct 20 - Oct 27)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022993 - Error when changing AD user's password on Debian 13 machine "Passwd: Provided user name is not a valid name"

250

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Oct 13 - Oct 20)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021668 - Server login error - /usr/bin/id: cannot find name for user or group KB0021721 - The adtool command fails to return all ACLs and computer objects when host name is greater than 15 characters KB0022959 - GPO update is failing with error: "lsass: [lsass] Cache could not be emptied

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Oct 6 - Oct 13)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021632 - How to enable or disable a computer object using adtool

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - September - Active Directory Bridge

Updating DNS Records on Linux/Unix with AD Bridge Agent On a Linux or UNIX machine, an administrator can run the following command:/opt/pbis/bin/update-dns This command securely registers the machine’s IP addresses and corresponding PTR records in DNS using dynamic DNS updates. By default, it registers all interface addresses with the default FQDN, which is determined by either: the machine password store, or the canonical hostname returned by gethostbyname(gethostname()) if --nocreds is used. Note: The update-dns command does not run automatically. Each time it is executed, it updates the timestamp on the DNS record. If DNS scavenging is enabled, administrators can configure a cron job (for example, daily) to refresh the record’s date and prevent its removal. The update-dns comman

7 months ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Sep 15 - Sep 22)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022869 - Collector Status error - Can not contact the database server

7 months ago

GloriaBBeyondTrust Employee

Active Directory (AD) Bridge - Knowledge Article Publications (Sep 1 - Sep 8)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022611 - Domain join or setkey-cli fail with local LDAP error KB0022792 - Warning: A resumable error occurred while processing a module KB0022866 - KRB5 cache files are not deleted at logout

8 months ago

BeyondTrust CommunicationsCommunity Manager