General

Creating a Computer Account Object in Active Directory using adtool Command Computer account objects can be created in Active Directory, without switching over to a Windows management host, ahead of joining the computer to the domain.  On the Unix or Linux client use the /opt/pbis/bin/adtool, with the new-computer action. This is useful for administrators who want to create named computer objects as one user, but run domain join operations as a different user with different privileges. Command /opt/pbis/bin/adtool -a new-computer <ARGUMENTS> Acceptable arguments ([X] - required): --dn=STRING                                    DN/RDN of the parent container/OU containing the computer. (use '-' for stdin input)--name=STRING                               Name of the new computer. (use '-' for stdin input) [X]--pre-win-2000-name=STRING     Pre Windows-2000 name.--description=STRING                    Description of the computer--dnshostname=STRING                Fully Qualified DNS n

Updating DNS Records on Linux/Unix with AD Bridge Agent On a Linux or UNIX machine, an administrator can run the following command:/opt/pbis/bin/update-dns This command securely registers the machine’s IP addresses and corresponding PTR records in DNS using dynamic DNS updates. By default, it registers all interface addresses with the default FQDN, which is determined by either: the machine password store, or the canonical hostname returned by gethostbyname(gethostname()) if --nocreds is used.  Note: The update-dns command does not run automatically. Each time it is executed, it updates the timestamp on the DNS record. If DNS scavenging is enabled, administrators can configure a cron job (for example, daily) to refresh the record’s date and prevent its removal. The  update-dns command is never run automatically.  However, update-dns will add an updated date to the record each time it is run. If  scavenging is turned on, an admin can setup a cron job to update the date daily, for exam

How to Collect a Support Package for AD Bridge There are multiple ways to collect a Support Package for the Active Directory Bridge (AD Bridge) support team. Listed below are the most common ones, and their respective uses Prerequisite The commands in this KB require root or sudo permissions Before running the command, ensure tcpdump and Perl are installed on the host.If Perl is not installed an error message will be displayed similar to the one below:/usr/bin/perl: bad interpreter: No such file or directoryThis can be tested by checking for the Perl version using the following command:perl -v If Perl is installed, this command will display the version information. If it's not installed, Perl will need to be installed in order to execute the support pack script.  Support Package methods Method 1 /opt/pbis/libexec/pbis-support.pl This is used to gather a standard support package with the necessary data to assist with troubleshooting. Method 2 /opt/pbis/libexec/pbis-support.pl -dj -c --c

AD Bridge (ADB) Supported Platforms Below is a list of the supported platforms for AD Bridge (Unix, Linux and Windows). For additional information on each platform, refer to the respective versions Supported Platforms guide. AD Bridge no longer supports macOS or HP-UX 11i v3 (B.11.31) ITANIUM – the support was dropped as of version 10.1 Unix Platforms MR - Maintenance Release, these have the same end of support as the GA release ADB version Release Date End of Support IBM AIX POWER 64-bit Oracle Solaris 7.1 TL5 7.2 TL4 7.2 TL5 7.3 11.4 SPARC 11.4 x86 (64-bit) 24.2.2 (MR) 01 Apr 2025 21 Nov 2026   s s s s s 24.2.1 (MR) 03 Dec 2024 21 Nov 2026   s s s s s 24.2 21 Nov 2024 21 Nov 2026   s s s s s

How to Check the Health of AD Bridge AgentAfter an upgrade, it's important to perform key checks to verify that everything is functioning as expected. Check if the Active Directory is onlineRun the following command with root privileges: /opt/pbis/get-status Example successful output: [Authentication provider: lsa-activedirectory-provider] Status: Online Mode: Un-provisioned Domain: example.com Forest: example.com Site: Default-First-Site-Name  If the result is unknown, then from the console, you will need to leave the domain, go to Active Directory, and delete the computer object. Wait approximately 15 minutes, or however long it takes for replication to complete, then join. For more information, refer to Unable to login - pbis status returns unknown. Enumerate UsersThe AD Bridge agent enumerates users in the primary domain.  You can enumerate the users in Active Directory by running the following command: /opt/pbis/bin/enum-users Wait at least 15 minutes after running the command.  I

AD Bridge supported versions lifecycle information BeyondTrust provides support for any major versions of our products for two (2) years from the generally available (GA) release date. We recommend reviewing the product lifecycle at least once a year and not being more than two versions behind as it may make it more complex to upgrade. For details on the supported platforms for each version, refer to KB0019169.  AD Bridge Version Release Date End of Support Release Notes 24.2.2 (MR) 01 Apr 2025 21 Nov 2026 Details 24.2.1 (MR) 03 Dec 2024 21 Nov 2026 Details 24.2 21 Nov 2024 21 Nov 2026 Details 24.1.2 (MR) 20 June 2024 28 Feb 2026 Details 24.1.1 (MR) 15 May 2024 28 Feb 2026 Details 24.1 29 Feb 2024 28 Feb 2026 Details 23.3 07 Dec 2023 06 Dec 2025 D

Introducing Pathfinder BeyondTrust is introducing Pathfinder, our new unified interface that brings together our powerful security solutions under a single login and integrated experience for operational agility that brings shared context across all our products. This interface will enable organizations to better manage identity security across their heterogeneous environments and ensure critical assets are protected from all angles. Security teams will benefit with a unified platform for faster incident response, intelligent recommendations, and streamlined workflows to reduce risks and gain operational efficiency. Managing cybersecurity in today’s complex threat landscape requires a comprehensive, integrated approach that enables security teams to effectively find, control, and protect all paths to privilege.  For more information, please check out our press release and platform page:BeyondTrust Pathfinder Delivers a One-Platform Approach to…Pathfinder Platform | BeyondTrust Latest A