Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/ubuntu/adsys
Active Directory bridging tool suite
https://github.com/ubuntu/adsys
active-directory group-policy ubuntu ubuntu-desktop
Last synced: 7 days ago
JSON representation
Active Directory bridging tool suite
- Host: GitHub
- URL: https://github.com/ubuntu/adsys
- Owner: ubuntu
- License: gpl-3.0
- Created: 2020-10-02T10:33:20.000Z (over 4 years ago)
- Default Branch: main
- Last Pushed: 2025-01-07T13:58:41.000Z (15 days ago)
- Last Synced: 2025-01-08T15:13:26.321Z (14 days ago)
- Topics: active-directory, group-policy, ubuntu, ubuntu-desktop
- Language: Go
- Homepage:
- Size: 9.54 MB
- Stars: 200
- Watchers: 19
- Forks: 50
- Open Issues: 30
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
- Security: SECURITY.md
Awesome Lists containing this project
README
# adsys
Active Directory GPO support.
[](https://github.com/ubuntu/adsys/actions?query=workflow%3AQA)
[](https://codecov.io/gh/ubuntu/adsys)
[](https://pkg.go.dev/github.com/ubuntu/adsys)
[](https://goreportcard.com/report/ubuntu/adsys)
[](https://github.com/ubuntu/adsys/blob/main/LICENSE)
## Documentation and Usage
The documentation and the command line reference is available on [Read The Docs](https://canonical-adsys.readthedocs-hosted.com/en/stable/) as well as the [documentation for the current development release](https://canonical-adsys.readthedocs-hosted.com/en/latest/).
## Installing development versions
For every commit on the `main` branch of the `adsys` repository, the GitHub Actions CI builds a development version of the `adwatchd` project. This is *NOT* a stable version of the application and should not be used for production purposes. However, it may prove useful to preview features or bugfixes not yet available as part of a stable release.
To get access to the build artifact you need to be logged in on GitHub. Then, click on any passing run of the [QA workflow](https://github.com/ubuntu/adsys/actions/workflows/qa.yaml) that has the `Windows tests for adwatchd` job, and look for the `adwatchd_setup` file.
## Troubleshooting
If AD authentication works but adsys fails to fetch GPOs (e.g. you see `can't get policies` errors on login), please perform the following steps:
1. Add the following to `/etc/samba/smb.conf`:
```text
log level = 10
```
2. Run `sudo login {user}@{domain}` in a terminal, replacing with your AD credentials
3. Paste the output in the bug report
The `adsysctl` command can also be useful to fetch logs for the daemon and client:
```bash
# You can increase the amount of information that will be displayed by using a more verbose tag (-vv or -vvv).
# Note that this command will start a watcher that will print logs as they are generated, so you will need to perform
# actions (such as trying to login) while the command is running.
adsysctl service cat -v
```
Additionally, you can check the system journal to look at more logs about adsys:
Remember that adsys runs with privileges, so you will need to run the following commands as root.
```bash
# You can use the -b flag to control how many boots the log will show (e.g. -b 0 will show the current boot only)
journalctl -b0 | grep adsys
# You can also get the logs of the individual units:
systemctl list-units | grep adsys # this will show all adsys related systemd units
# The -u flag will show the logs of the specified unit
journalctl -b0 -u adsysd.service # this command will only show the adsysd.service logs of the current boot
```