Configuring Webmin with AD users

[Squiduser]

SYSTEM INFORMATION
OS type and version	Rocky Linux 9.7
Webmin version	2.620

i’ve working sssd with tested su -
but webmin login with AD user does not work

any help in this matter is appretiated

Thanks

[ID10T]

Does this help?

SSSD / Active Directory authentication to Webmin

Right, so I finally managed to get this working. Most definitely Webmin doesn’t work with this “by default”. If it does there there are probably some hidden requirements, but that’s a different discussion. To get this working: I had to make the following change to /etc/sudo.conf: echo "Set group_source dynamic" >> /etc/sudo.conf I got the solution from this forum post. This is probably the main problem point. In my case for some reason the PAM webmin setup was missing (/etc/pam.d/webmin),…

[Squiduser]

no it does not , i tried same config, but no luck .. is there any way to leverage ldap client in webmin ?

[ID10T]

I don’t know if there is something inherently different between RH/DEB setups that needs to be looked at. Basically I’m already out of my element. Best I can do at this point is ask what errors do you get? Logs?

[Joe]

@Squiduser

i tried same config, but no luck

What does “no luck” mean? What happens? What errors? Does PAM authentication to your AD work at all? (Webmin authenticates via PAM, so making PAM auth to AD is how you get Webmin to auth to the AD.)

[Squiduser]

PAM Auth to AD works , as i’m able to login with ad account using su - ..
which logs and config files you need to see ?
i see no errors in /var/log /secure …

thanks again for looking into it .

[Joe]

So, what are the errors in the Webmin logs when you try to login? Is that user a user with sudo ALL privileges or otherwise exists in Webmin, so Webmin knows the user is allowed to do root stuff? (I guess there’s also a way to configure Webmin to pay attention to group membership or something, I don’t remember details, as I have never used AD.)

[Squiduser]

It’s working now. I feel the issue was PAM Authen module.

~# cat /etc/pam.d/webmin
auth      include         system-auth
auth      required        pam_env.so
auth      required        pam_unix.so nullok
account   required        pam_unix.so
password  required        pam_unix.so shadow nullok use_authtok
session   required        pam_unix.so

I changed pam=webmin in /etc/webmin/miniserv.conf and installed perl-Authen-PAM on EL systems and libauthen-pam-perl on Debian.

My SSSD was already working.

Thanks again for your support!