Setting Up for Linux Desktops

3 Synchronize user information (except password) from the Active Directory to the OpenLDAP server.
4 Configure the OpenLDAP server to delegate password verification to a separate process such as
saslauthd, which can perform password verification against the Active Directory.
5 Configure the Linux desktops to use an LDAP client to authenticate users with the OpenLDAP server.
System Security Services Daemon (SSSD) LDAP Authentication
Against the Microsoft Active Directory
The SSSD LDAP authentication against the Microsoft Active Directory solution involves the following
steps:
1 To enable LDAPS, install the Certificate Services on the Active Directory.
2 To use LDAP authentication directly against the Microsoft Active Directory, configure the SSSD in the
Linux desktop.
Winbind Domain Join
The Winbind Domain Join solution involves the following steps:
1 Install the Winbind, Samba, and Kerberos packages on the Linux desktop.
2 Join the Linux desktop to the Microsoft Active Directory.
If you use the Winbind Domain Join solution or other Keberos authentication-based solution, join the
template virtual machine to the Active Directory, and re-join the cloned virtual machine to the Active
Directory. For example, use the following command:
sudo /usr/bin/net ads join -U <domain_user>%<domain_password>
Use the following options to run the domain re-join command on a cloned virtual machine for the Winbind
solution:
n
Remote connect such as SSH or vSphere PowerCLI to each virtual machine and run the command.
For more information on scripts, see Chapter 8 Bulk Deployment of Horizon 7 for Manual Desktop
Pools.
n
Include the command to a shell script and set the script path to the Horizon agent RunOnceScript
option in the /etc/vmware/viewagent-custom.conf file. For more information, see Setting Options
in Configuration Files on a Linux Desktop.
PowerBroker Identity Services Open (PBISO) Authentication
Configuring the PowerBroker Identity Services Open (PBISO) authentication solution involves the
following steps:
1 Download PBISO 8.5.6 or later from https://www.beyondtrust.com/products/powerbroker-
identity-services-open/.
Setting Up Horizon 7 for Linux Desktops
VMware, Inc. 31