Ubuntu server with active directory integration - is AD root certificate installed on server?












0















I have joined an Ubuntu 18.04 server to an Active Directory by following this : https://www.tecmint.com/join-ubuntu-to-active-directory-domain-member-samba-winbind/



Everything is OK, I can log in with AD users.



But with Windows computers members, the root certificate of AD is automatically downloaded into local certificate store.



How can I check if ca root certificate was integrated into Ubuntu certificate store, and if not how can do it automatically (the goal is to avoid checking if certificate is expired, and be able to issue web certificates from it) ?










share|improve this question







New contributor




Dric is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

























    0















    I have joined an Ubuntu 18.04 server to an Active Directory by following this : https://www.tecmint.com/join-ubuntu-to-active-directory-domain-member-samba-winbind/



    Everything is OK, I can log in with AD users.



    But with Windows computers members, the root certificate of AD is automatically downloaded into local certificate store.



    How can I check if ca root certificate was integrated into Ubuntu certificate store, and if not how can do it automatically (the goal is to avoid checking if certificate is expired, and be able to issue web certificates from it) ?










    share|improve this question







    New contributor




    Dric is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
    Check out our Code of Conduct.























      0












      0








      0








      I have joined an Ubuntu 18.04 server to an Active Directory by following this : https://www.tecmint.com/join-ubuntu-to-active-directory-domain-member-samba-winbind/



      Everything is OK, I can log in with AD users.



      But with Windows computers members, the root certificate of AD is automatically downloaded into local certificate store.



      How can I check if ca root certificate was integrated into Ubuntu certificate store, and if not how can do it automatically (the goal is to avoid checking if certificate is expired, and be able to issue web certificates from it) ?










      share|improve this question







      New contributor




      Dric is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.












      I have joined an Ubuntu 18.04 server to an Active Directory by following this : https://www.tecmint.com/join-ubuntu-to-active-directory-domain-member-samba-winbind/



      Everything is OK, I can log in with AD users.



      But with Windows computers members, the root certificate of AD is automatically downloaded into local certificate store.



      How can I check if ca root certificate was integrated into Ubuntu certificate store, and if not how can do it automatically (the goal is to avoid checking if certificate is expired, and be able to issue web certificates from it) ?







      18.04 certificates active-directory






      share|improve this question







      New contributor




      Dric is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.











      share|improve this question







      New contributor




      Dric is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.









      share|improve this question




      share|improve this question






      New contributor




      Dric is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.









      asked Mar 12 at 16:24









      DricDric

      11




      11




      New contributor




      Dric is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.





      New contributor





      Dric is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






      Dric is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






















          0






          active

          oldest

          votes











          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "89"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });






          Dric is a new contributor. Be nice, and check out our Code of Conduct.










          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1125082%2fubuntu-server-with-active-directory-integration-is-ad-root-certificate-install%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes








          Dric is a new contributor. Be nice, and check out our Code of Conduct.










          draft saved

          draft discarded


















          Dric is a new contributor. Be nice, and check out our Code of Conduct.













          Dric is a new contributor. Be nice, and check out our Code of Conduct.












          Dric is a new contributor. Be nice, and check out our Code of Conduct.
















          Thanks for contributing an answer to Ask Ubuntu!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1125082%2fubuntu-server-with-active-directory-integration-is-ad-root-certificate-install%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Category:香港粉麵

          List *all* the tuples!

          Channel [V]