Active Directory Integration

[iain_winfield]

Hello

Wondering if any wizz kids can help,

I am trying to setup AD integration on my ESX hosts, I have Develpoment server which I can mess around with and is fully patched ESX3.02

I have done various commands to setup AD authenication.

- esxcfg-auth --enablead --addomain=xxxxxxxxx.com --addc=server1.xxxxxxxxxx.com

Now when I try and logon I get access denied, but if I do the following command

useradd xxxxxx.xxxxxxx

Then try and logon it works. :smileygrin:

But that is no good, it means I would have to add all my accounts there. So I have searched around and found that SAMBA (Winbind) will do the job for me! Is this true? I have downloaded the SAMBA file and extracted but now I am lost. I am curious to see if anyone else has got it going and if so willing to share the knowledge.

[alanrenouf]

Seams like a pretty good guide here

http://blog.scottlowe.org/2007/07/10/esx-server-ad-integration/

If you found this information useful, please consider awarding points for "Correct" or "Helpful". Thanks!!!

[depping]

I used the following for SAMBA: http://www.astroarch.com/wiki/index.php/Full_Integration_of_Active_Directory

Duncan

My virtualisation blog:

[Texiwill]

Hello,

Check out http://www.astroarch.com/wiki/index.php/Remote_Authentication for two ways to integrate with AD. Secure LDAP and Winbind.

Best regards,

Edward L. Haletky

VMware Communities User Moderator

====

Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education. As well as the Virtualization Wiki at http://www.astroarch.com/wiki/index.php/Virtualization

[iain_winfield]

Thanks for the responses still no luck, As my ESX is up to date do I need to install the SAMBA package?

Also Winbind seems so vast..... any other pointers?

[depping]

you will need the packages described on astrosearch.

Duncan

My virtualisation blog:

[sbeaver · Accepted solution]

Do a seach on the forums for my LDAP search script. This script will connect with AD and get the members of a group and add or remove members based on the membership

Steve Beaver

VMware Communities User Moderator

*Virtualization is a journey, not a project.*