2.1 Linux Requirements and Supported Platforms

Review the information in this section before installing the AD Bridge Agent on a Linux server.

2.1.1 Linux Requirements

Complete the following requirements before you install the Linux Agent and join Active Directory:

  • Install the Linux Agent with root (requires administrator password)

  • DNS name servers on the Linux Agent must list the Active Directory DNS servers

  • The Active Directory domain is listed as one of the default search domains

  • Download and install prerequisite Linux packages from respective vendors during the Linux Agent installation.

    Otherwise, you must install the following Linux packages prior to running the Linux Agent installation:

    Linux Distribution

    Required Linux Packages

    All distributions

    .NetCore system update to install .NetCore 2.2 and its prerequisites.

    For more information, see Linux distribution dependencies.

    RHEL 8, RHEL 7, CentOS 8, CentOS 7, Oracle 8, Oracle 7

    		 
    samba
samba-client
samba-winbind
samba-winbind-clients
cifs-utils
openldap-clients

    SLES 12, SLES 15

    		 
    realmd
adcli
sssd
sssd-tools
sssd-ad
samba-client
krb5-client
openldap2-client

    Ubuntu 18.04

    		 
    realmd
sssd
sssd-tools
libnss-sss
libpam-sss
adcli
samba-common-bin
oddjob
oddjob-mkhomedir
packagekit
krb5-user
cifs-utils
keyutils

    Ubuntu 16.04

    		 
    ntpdate
samba
krb5-config
krb5-user
winbind
libpm-winbind
libnss-winbind
cifs-utils

NOTE:If a prerequisite package check or installation fails, the failure notice will identify any missing prerequisites.

2.1.2 Supported Linux Platforms

AD Bridge 3.3 supports the following Linux platforms:

Linux Distribution

Version

RHEL

  • RHEL 8

  • RHEL 7

SLES

  • SLES 12

  • SLES 15

CentOS Enterprise Linux

  • CentOS 8

  • CentOS 7

Ubuntu

  • Ubuntu 18

  • Ubuntu 16

Oracle Linux

  • Oracle 8

  • Oracle 7

NOTE:If your cloud environment uses a GoDaddy SSL certificate on RHEL 7, RHEL 8, CentOS 7, CentOS 8, Oracle Linux 7, Oracle Linux 8, Ubuntu 16, Ubuntu 18, SLES 12, and SLES 15 operating systems, you must copy it to agent machines and manually assign trust.

2.1.3 Adding a GoDaddy SSL Certificate

To add a GoDaddy SSL certificate, you must download the certificate, copy to the necessary agent machine and manually assign trust to the certificate:

Prerequisite

Download the gdig2.crt.pem certificate from the GoDaddy Repository.

For RHEL 7 or CentOS 7 or Oracle Linux 7:

  1. Copy the gdig2.crt.pem file to /etc/pki/tls/certs.

  2. Type ln -s /etc/pki/tls/certs/gdig2.crt.pem /etc/pki/tls/certs/27eb7704.0 and press Enter.

  3. Type certutil -d sql:/etc/pki/nssdb -A -t "C,C,C" -n "Go Daddy Secure Certificate Authority - G2" -i /etc/pki/tls/certs/gdig2.crt.pem and press Enter.

For RHEL 8 or CentOS 8 or Oracle Linux 8:

  1. Copy the Go Daddy Secure Certificate Authority - G2.pem file to /usr/share/pki/ca-trust-source/anchors.

  2. Type update-ca-trust and press Enter.

For SLES 12 and SLES 15:

  1. Copy the certificate to /etc/pki/trust/anchors/.

  2. Type update-ca-certificates and press Enter.

  3. Restart the agent.

For Ubuntu 16 and 18:

  1. Copy the certificate.pem to /usr/local/share/ca-certificates/certificate.crt.

  2. Type dpkg-reconfigure ca-certificates and press Enter.