1

[ubuntu] Limit available users on unity-greeter to AD users

view story
linux-howto

http://ubuntuforums.org – Hi, I am going to deploy ubuntu 12.04 in a secondary school. Students have a shared account depending on their grade (4) which is managed via Windows/AD. The requirement is to allow authentication via four AD accounts and two local accounts. The four AD accounts should be available on the greeter screen, the two local accounts should be available via the 'other' login fields. I know how to connect to AD with likewise-open and I know how to make local accounts as well as the 'other' form available on the greeter. However, I have no idea how to limit the available accounts to the four AD accou (Hardware)

dayu's picture
Submitted by dayu on 08/27/2012

Stories similar to [ubuntu] Limit available users on unity-greeter to AD users

I am running Ubuntu 12.04 with gnome-shell. I have two admin user accounts.

I have a few local accounts on a Windows XP machine.

The local account is called localUser1 ... localUser16

I need to lock the accounts down so the ONLY application that is allowed to run is Notepad.exe

All domain accounts, local Admin accounts should be unaffected.

Is this possible? If so then how to execute it?

I have added two users using the command useradd but they do no show up in the lightdm/unity-greeter login screen. So there is no way to graphically login for them. It seems Accounts Service (whatever that is) is not reading them in. How can I reload that or cause them to appear in the login window? I am a Fedora user so I have no clue about Ubuntu and how it does these things. Thanks.

This Technet article speaks of Managed Service Accounts and their local equivalents called "Virtual Accounts".

I understand a "Virtual Account" is an account of the form "nt service\myservice" when used for a Windows service named myservice.

The article states that

Virtual accounts are "managed local accounts" that can use a computer's credentials to access network resources

which I unde

The Environment: One AD domain that is not managed by local admins (can’t edit, can’t add GPO, etc.) Users have accounts here. Call this AD alpha This AD Alpha has a trust to a local AD domain (Call this one Zeta) that local admins administer. Contains computer accounts.

There are two unix accounts A and B. I want to configure password less ssh between these two accounts.This can be done without much pain but my problem is that there are mutiple accounts like A and B where I have to the same thing.I also have one admin account C (not root).

Work at a school and we've got a scenario.

We block F8 on all computers so students cannot access Safe Mode to bypass Group Policy...

Lost Special FTP Accounts 33 weeks 5 days ago

One of my users call me this morning because he can't connect to his main FTP account (additional manually created FTP accounts are OK). I checked his cPanel and all Special FTP Accounts (main FTP account, logs...) are GONE ! :confused:

How can i recover these please ? And also, how did the disappear ? It seems this is the only affected user.

Thanks.

I want to make different user accounts separate in Ubuntu 12.04 for some applications only.

My brother uses some applications I don't want so more specifically,

Can I install application like "Wine" or "Webapps" in my account but have the application not appear in or affect other accounts??

The reason is that if I install Wine it conflicts with the Arabic fonts, causing problems on all account