blocks|key|2282015|text|我遇到了这个问题，下面是我的解决方案：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2282016|编辑/etc/sudoers：使用以下条目|offset|length|style|CODE|2282017|首先使用命令id检查加载项|2282018|#id+<AD+user>(+#id+domain\\aduser01+)|code-block|syntax|javascript|2282019|我的结果：|2282020|SMB\aduser01@linux01:~/Desktop$+id+smb\\aduser02
uid=914883676(SMB\aduser02)+gid=914883073(SMB\domain%5Eusers)+groups=914883073(SMB\domain%5Eusers),1544(BUILTIN\Administrators),1545(BUILTIN\Users),914883072(SMB\domain%5Eadmins)|2282021|getent+passwd和gid+NUMBERS不适合我。DOMAIN\\domain%5Eusers为我工作|2282022|%25SMB\\domain%5Eusers+ALL=(ALL)+ALL|2282023|我们都知道，每个AD用户也都在工作。|2282024|SMB\\<aduser01>+ALL=(ALL)+ALL|entityMap^0|0|2|C|0|0|0|0|0|0|D|E|B|U|K|0|0|0^^$0|@$1|2|3|4|5|6|7|11|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|12|8|@$D|13|E|14|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|15|8|@]|9|@]|A|$]]|$1|J|3|K|5|L|7|16|8|@]|9|@]|A|$M|N]]|$1|O|3|P|5|6|7|17|8|@]|9|@]|A|$]]|$1|Q|3|R|5|L|7|18|8|@]|9|@]|A|$M|N]]|$1|S|3|T|5|6|7|19|8|@$D|1A|E|1B|F|G]|$D|1C|E|1D|F|G]|$D|1E|E|1F|F|G]]|9|@]|A|$]]|$1|U|3|V|5|L|7|1G|8|@]|9|@]|A|$M|N]]|$1|W|3|X|5|6|7|1H|8|@]|9|@]|A|$]]|$1|Y|3|Z|5|L|7|1I|8|@]|9|@]|A|$M|N]]]|10|$]]

I encounter this problem and here's my solution:

Edit <code>/etc/sudoers</code>: with the following entries

First check aduser using command id 

<pre><code>#id &lt;AD user&gt;( #id domain\\aduser01 )
</code></pre>

Results on mine:

<pre><code>SMB\aduser01@linux01:~/Desktop$ id smb\\aduser02
uid=914883676(SMB\aduser02) gid=914883073(SMB\domain^users) groups=914883073(SMB\domain^users),1544(BUILTIN\Administrators),1545(BUILTIN\Users),914883072(SMB\domain^admins)
</code></pre>

<code>getent passwd</code> and <code>gid NUMBERS</code> doesn't work for me. <code>DOMAIN\\domain^users</code> works for me

<pre><code>%SMB\\domain^users ALL=(ALL) ALL
</code></pre>

as we all know individual AD user works also

<pre><code>SMB\\&lt;aduser01&gt; ALL=(ALL) ALL
</code></pre>

blocks|key|2282111|text|我们有一个带有.local+sufix的长域名，|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2282112|邻接|2282113|%25domainname\\group+ALL=(ALL)+ALL|offset|length|style|CODE|2282114|也不是|2282115|%25domainname.local\\group+ALL=(ALL)+ALL|2282116|起作用了..。|2282117|但如果我只像这样使用组名：|2282118|%25Domain%5EAdmins+ALL=(ALL)+ALL|2282119|它起作用了。|entityMap^0|0|0|0|W|0|0|0|12|0|0|0|0|S|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|X|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|Y|8|@$F|Z|G|10|H|I]]|9|@]|A|$]]|$1|J|3|K|5|6|7|11|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|12|8|@$F|13|G|14|H|I]]|9|@]|A|$]]|$1|N|3|O|5|6|7|15|8|@]|9|@]|A|$]]|$1|P|3|Q|5|6|7|16|8|@]|9|@]|A|$]]|$1|R|3|S|5|6|7|17|8|@$F|18|G|19|H|I]]|9|@]|A|$]]|$1|T|3|U|5|6|7|1A|8|@]|9|@]|A|$]]]|V|$]]

we have a long domain name with .local sufix, 

neighter the 

<code>%domainname\\group ALL=(ALL) ALL</code>

nor the 

<code>%domainname.local\\group ALL=(ALL) ALL</code>

worked...

but if I only use the groupname like this:

<code>%Domain^Admins ALL=(ALL) ALL</code>

it works.

blocks|key|4104197|text|我使用公共命令|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4104198|sudo+usermod+-a+-G+sudo+DOMAIN\username+|code-block|syntax|javascript|4104199|将DOMAIN\user替换为DOMAIN\\\username。|offset|length|style|CODE|entityMap^0|0|0|1|B|F|H^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|O|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|P|8|@$I|Q|J|R|K|L]|$I|S|J|T|K|L]]|9|@]|A|$]]]|M|$]]

I use the common command

<pre><code>sudo usermod -a -G sudo DOMAIN\username 
</code></pre>

and replace <code>DOMAIN\user</code> with <code>DOMAIN\\\username</code>.

blocks|key|4104346|text|其他建议的问题是|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4104347|只有当您能够访问公司局域网(或VPN)时，它们才能工作。|unordered-list-item|4104348|您必须始终在每台计算机上维护sudoers文件。|4104349|作为奖励，他们根本不为我工作--|4104350|相反，我想要的是|4104351|缓存凭据和sudo访问。|4104352|集中管理|4104353|实际的解决方案是使用SSSD并扩展AD模式。通过这种方式，SSSD定期从AD获取sudo设置和用户凭据，并维护它们的本地缓存。sudo规则随后存储在AD对象中，在AD对象中，您可以将规则限制在计算机、用户和命令上，甚至--所有这些都不涉及工作站上的sudoers文件。|4104354|确切的教程太长了，无法在这里解释，但是您可以在这里找到一步一步的指南和一些帮助自动化的脚本：|4104355|Ubuntu与Active的集成|offset|length|4104356|TL;DR：|4104357|AD|header-two|4104358|获取数独的最新版本，获取doc/schema.ActiveDirectory文件，然后导入它(确保根据域名修改域路径)：|4104359|ldifde+-i+-f+schema.ActiveDirectory+-c+"CN=Schema,CN=Configuration,DC=X"+"CN=Schema,CN=Configuration,DC=ad,DC=foobar,DC=com"+-j+.|code-block|syntax|javascript|4104360|使用ADSI编辑验证它:打开架构命名上下文并查找sudoRole类。|4104361|现在在域根上创建sudoers+OU，这个OU将保存所有Linux工作站的sudo设置。在这个OU下，创建一个sudoRole对象。若要创建sudoRole对象，必须使用ADSI编辑，但一旦创建，您可以使用用户和计算机对其进行修改。|4104362|让我们假设我有一台名为foo32linux的计算机，一个名为stewie.griffin的用户，我想让他在这个comp上使用sudo运行所有命令。在本例中，我在sudoers+OU下创建了一个sudoRole对象。对于sudoRole，您可以使用任何您想要的名称-我坚持使用计算机名称，因为我使用的是每台计算机的规则。现在将其属性设置为：|4104363|sudoHost:+foo32linux|4104364|sudoCommand:全部|4104365|sudoUser:+stewie.griffin|4104366|对于命令，您也可以使用特定的条目，比如/bin/less或其他什么。|4104367|SSSD|4104368|添加到您的/etc/sssd/sssd.conf，至少：|4104369|[sssd]
services+=+nss,+pam,+sudo

[domain/AD.FOOBAR.COM]
cache_credentials+=+True|4104370|SSSD每隔几个小时用更新的规则刷新其本地缓存，但最简单的测试方法是重新启动计算机。然后与AD用户登录并检查：|4104371|sudo+-l|4104372|它应该列出添加到该用户和计算机中的所有相关项目。简单点！|entityMap|0|LINK|mutability|MUTABLE|url|http://vault-tec.info/post/132414642261/integrating-ubuntu-with-active-directory|1|http://www.sudo.ws/dist/^0|0|0|0|0|0|0|0|0|0|0|G|0|0|0|0|2|2|1|0|0|0|0|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|27|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|28|8|@]|9|@]|A|$]]|$1|E|3|F|5|D|7|29|8|@]|9|@]|A|$]]|$1|G|3|H|5|D|7|2A|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|2B|8|@]|9|@]|A|$]]|$1|K|3|L|5|D|7|2C|8|@]|9|@]|A|$]]|$1|M|3|N|5|D|7|2D|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|2E|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|2F|8|@]|9|@]|A|$]]|$1|S|3|T|5|D|7|2G|8|@]|9|@$U|2H|V|2I|1|2J]]|A|$]]|$1|W|3|X|5|6|7|2K|8|@]|9|@]|A|$]]|$1|Y|3|Z|5|10|7|2L|8|@]|9|@]|A|$]]|$1|11|3|12|5|6|7|2M|8|@]|9|@$U|2N|V|2O|1|2P]]|A|$]]|$1|13|3|14|5|15|7|2Q|8|@]|9|@]|A|$16|17]]|$1|18|3|19|5|6|7|2R|8|@]|9|@]|A|$]]|$1|1A|3|1B|5|6|7|2S|8|@]|9|@]|A|$]]|$1|1C|3|1D|5|6|7|2T|8|@]|9|@]|A|$]]|$1|1E|3|1F|5|D|7|2U|8|@]|9|@]|A|$]]|$1|1G|3|1H|5|D|7|2V|8|@]|9|@]|A|$]]|$1|1I|3|1J|5|D|7|2W|8|@]|9|@]|A|$]]|$1|1K|3|1L|5|6|7|2X|8|@]|9|@]|A|$]]|$1|1M|3|1N|5|10|7|2Y|8|@]|9|@]|A|$]]|$1|1O|3|1P|5|6|7|2Z|8|@]|9|@]|A|$]]|$1|1Q|3|1R|5|15|7|30|8|@]|9|@]|A|$16|17]]|$1|1S|3|1T|5|6|7|31|8|@]|9|@]|A|$]]|$1|1U|3|1V|5|15|7|32|8|@]|9|@]|A|$16|17]]|$1|1W|3|1X|5|6|7|33|8|@]|9|@]|A|$]]]|1Y|$1Z|$5|20|21|22|A|$23|24]]|25|$5|20|21|22|A|$23|26]]]]

The problem with the other suggestions is that

<ul>
<li>they only work when you have access to the corporate LAN (or VPN)</li>
<li>you have to maintain the sudoers file on each and every computer all the time</li>
<li>as a bonus, they didn't work for me - at all</li>
</ul>

Instead, I wanted something that

<ul>
<li>caches both the credentials and the sudo access</li>
<li>is centrally managed</li>
</ul>

The actual solution is using SSSD and extending the AD schema. This way SSSD fetches sudo settings and user credentials periodically from AD and maintains a local cache of them. The sudo rules are then stored in AD objects, where you can restrict rules to computers, users and commands, even - all that without ever touching a sudoers file on the workstations.

The exact tutorial is way too long to explain here, but you can find the step-by-step guide and some scripts to help with automation here:

<ul>
<li><a href="http://vault-tec.info/post/132414642261/integrating-ubuntu-with-active-directory" rel="nofollow">Integrating Ubuntu with Active Directory</a></li>
</ul>

TL;DR:

<h1>AD</h1>

Grab the latest release of <a href="http://www.sudo.ws/dist/" rel="nofollow">sudo</a>, get the doc/schema.ActiveDirectory file, then import it (make sure to modify the domain path according to your domain name):

<pre><code>ldifde -i -f schema.ActiveDirectory -c "CN=Schema,CN=Configuration,DC=X" "CN=Schema,CN=Configuration,DC=ad,DC=foobar,DC=com" -j .
</code></pre>

Verify it with ADSI Edit: open the Schema naming context and look for the sudoRole class.

Now create the sudoers OU on your domain root, this OU will hold all the sudo settings for all your Linux workstations. Under this OU, create a sudoRole object. To create the sudoRole object you have to use ADSI Edit, but once created, you can use Active Directory Users and Computers to modify it.

Let's assume I have a computer named foo32linux, a user called stewie.griffin and I want to let him run all commands with sudo on that comp. In this case, I create a sudoRole object under the sudoers OU. For the sudoRole you can use any name you want - I stick with the computer name since I use per-computer rules. Now set its attributes as follows:

<ul>
<li>sudoHost: foo32linux</li>
<li>sudoCommand: ALL</li>
<li>sudoUser: stewie.griffin</li>
</ul>

For commands you can use specific entries as well, like /bin/less or whatever.

<h1>SSSD</h1>

Add to your /etc/sssd/sssd.conf, at least:

<pre><code>[sssd]
services = nss, pam, sudo

[domain/AD.FOOBAR.COM]
cache_credentials = True
</code></pre>

SSSD refreshes its local cache with the updated rules every few hours, but the simplest way to test it is to just reboot the computer. Then log in with the AD user and check:

<pre><code>sudo -l
</code></pre>

It should list all the related entires you added to that user and computer. Easy-peasy!

blocks|key|2281910|text|我能找到的关于这个问题的最好信息是：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2281911|http://www.mail-archive.com/likewise-open-discuss@lists.likewisesoftware.com/msg00572.html|offset|length|2281912|它基本上要求您使用正确的配置修改/etc/sudoers文件，以允许AD上管理员组中的人员访问所有特权。|style|CODE|2281913|如果您需要有选择性并受用户限制，您也可以这样做。但是它警告说，您必须确保通过使用getend+passwd命令找出linux系统中的用户名，如下所示。|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|2I|0|0|G|C|0|14|D^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|S|8|@]|9|@$D|T|E|U|1|V]]|A|$]]|$1|F|3|G|5|6|7|W|8|@$D|X|E|Y|H|I]]|9|@]|A|$]]|$1|J|3|K|5|6|7|Z|8|@$D|10|E|11|H|I]]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|C]]]]

The best information I could find on the subject is here:

<a href="http://www.mail-archive.com/likewise-open-discuss@lists.likewisesoftware.com/msg00572.html" rel="nofollow">http://www.mail-archive.com/likewise-open-discuss@lists.likewisesoftware.com/msg00572.html</a>

It basically asks you to modify your <code>/etc/sudoers</code> file with the correct configuration to allow the people in your administrator's group on AD to have access to all privileges.

If you need to be selective and restrict by user, you can do that too. But it warns that you must make sure to find out what the user's name on the linux system is by using <code>getend passwd</code> command as shown.

blocks|key|2282054|text|使用Centify直接，我将域用户添加到/etc/sudoers文件中。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2282055|(域用户)ALL=(全部)+ALL|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|E|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|F|8|@]|9|@]|A|$]]]|D|$]]

Using Centify direct I have added domain user into /etc/sudoers file.

(Domain User) ALL=(ALL) ALL

blocks|key|4104418|text|我的首选答案是@bviktor，但我还不是一个足够先进的域管理员。上面的其他答案对我都没有用。我总是收到OP报告的相同的错误消息。错误信息的格式告诉我，sudoers中的条目是区分大小写的，但在我所读到的关于这个主题的许多文章中，我从未见过对此的任何讨论。例如，一些帖子建议组名为"Domain%5EAdmins"，而另一些帖子则建议使用"domain%5Eadmins“。两个人都不适合我的情况。在DC+(a+Synology+DS)上，组显示为"Domain“，但在客户端PC+(运行UbuntuStudio18.04)上，命令"id”将组返回为“域管理员”。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4104419|对我来说有用的是：|4104420|sudo+visudo|code-block|syntax|javascript|4104421|如前所述，添加单个用户而不是组：|4104422|username@my.domain.name+ALL=(ALL)+ALL|4104423|直到行尸走肉。|entityMap^0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|R|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|S|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|T|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|U|8|@]|9|@]|A|$]]]|O|$]]

My preferred answer would be @bviktor's, but I am not yet an advanced enough domain administrator. None of the other answers above worked for me. I always got the same error message reported by OP. The format of the error message suggests to me that the entries in sudoers are case-sensitive, but I have never seen any discussion of this in the numerous posts I have read on this subject. For example, some posts suggest the group name &quot;Domain^Admins&quot;, whereas others suggest &quot;domain^admins&quot;.
Neither worked in my case. On the DC (a Synology DS), the group is displayed as &quot;Domain Admins&quot;, but on the client PC (running Ubuntu Studio 18.04), the command &quot;id&quot; returns the group as &quot;domain admins&quot;.
What did work for me was to use:
<pre><code>sudo visudo
</code></pre>
as described above to add a single user instead of a group:
<pre><code>username@my.domain.name ALL=(ALL) ALL
</code></pre>
to the end of sudoers.

blocks|key|2282383|text|sudo+visudo然后插入：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2282384|"%25domain+users"+ALL=(ALL)+ALL|code-block|syntax|javascript|2282385|在Ubuntu+20.04.2+LTS上为我工作。它还与其他任意的AD组合作。|entityMap^0|0|B|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@$9|O|A|P|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|Q|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|R|8|@]|D|@]|E|$]]]|M|$]]

<code>sudo visudo</code> then insert:
<pre><code>&quot;%domain users&quot; ALL=(ALL) ALL
</code></pre>
worked for me on Ubuntu 20.04.2 LTS. It also worked with other arbitrary AD groups.

blocks|key|4104520|text|好吧，这些答案对我都没有用。如果您的产业中有大量Linux机器，那么说明修改AD模式的答案可能是一件好事，但对于少量的Linux机器来说，这是不切实际的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4104521|对我有用的是：|4104522|在AD中创建一个sudo组，将用户添加到其中。在您的Linux机器上(有一个可以sudo的帐户)：在/etc/sudoers.d中创建一个文件|4104523|sudo+touch+/etc/sudoers.d/{yourdomain}|code-block|syntax|javascript|4104524|现在用visudo编辑sudoers文件。不要做任何更改并存在编辑器，它应该会提示您在sudoers.d中编辑新文件。|4104525|将此添加到该文件中：|4104526|%25sudo@yourdomain.name+ALL=(ALL:ALL)+ALL|4104527|保存那个文件。|4104528|你现在应该好好的。AD中sudo组的成员可以在任何有此新文件的机器上使用sudo。|4104529|用户在连接到域时登录后，我已经用与域断开连接的计算机(我的笔记本电脑)对此进行了测试，并且当组成员被缓存时，它仍然工作。|4104530|注意:不要直接编辑新文件，这是行不通的。|entityMap^0|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Z|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|10|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|11|8|@]|9|@]|A|$]]|$1|F|3|G|5|H|7|12|8|@]|9|@]|A|$I|J]]|$1|K|3|L|5|6|7|13|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|14|8|@]|9|@]|A|$]]|$1|O|3|P|5|H|7|15|8|@]|9|@]|A|$I|J]]|$1|Q|3|R|5|6|7|16|8|@]|9|@]|A|$]]|$1|S|3|T|5|6|7|17|8|@]|9|@]|A|$]]|$1|U|3|V|5|6|7|18|8|@]|9|@]|A|$]]|$1|W|3|X|5|6|7|19|8|@]|9|@]|A|$]]]|Y|$]]

OK, none of these answers actually worked for me. The answer stating to modify the AD schema might be a nice thing if you have a large fleet of Linux machines in your estate but for a small number that's not practical.
What worked for me was this:
Create a sudo group in AD, add users to it.
on your Linux machines (with an account that can sudo):
create a file in /etc/sudoers.d
<pre><code>sudo touch /etc/sudoers.d/{yourdomain}
</code></pre>
Now edit the sudoers file with visudo.
Don't make any changes and exist the editor, it should prompt you to edit the new file in sudoers.d.
add this to that file:
<pre><code>%sudo@yourdomain.name ALL=(ALL:ALL) ALL
</code></pre>
Save that file.
You should be good now. The members of the sudo group in your AD can use sudo on any machine with this new file.
After the user logs in while connected to the domain I have tested this with the computer (my laptop) disconnected from the domain and it still works as the group memberships are cached.
Note: Do not edit the new file directly, that will not work.

I'm setting up an Ubuntu 11.04 server VM for use as a database server. It would make everyone's lives easier if we could have folks login using windows credentials and perhaps even make the machine work with the current AD-driven security we've got elsewhere. 

The first leg of this was really easy to accomplish -- <code>apt-get install likewise-open</code> and I was pretty much in business. The problem I'm having is getting our admins into the sudoers groups -- I can't seem to get anything to take. I've tried:

a) <code>usermod -aG sudoers [username]</code> 
b) adding the user names in several formats (DOMAIN\user, user@domain) to the sudoers file. 

None of which seemed to take, I still get told "DOMAIN\user is not in the sudoers file. This incident will be reported."

So, how do I add non-local users to the sudoers?

Add AD Domain user to sudoers from the command line

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

教程

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云AI代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

功能1上新10个字符

功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符。

功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符。

功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符

功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符

功能4上新

文章&问答评论现已支持表情

全新交互，全新视觉，新增快捷键、悬浮工具栏、高亮块等功能并同时优化现有功能，全面提升创作效率和体验

社区富文本编辑器全新改版！诚邀体验～ 

精选全网热门MCP server，让你的AI更好用 🚀

💥开发者 MCP广场重磅上线！

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

我正在设置一个Ubuntu11.04服务器VM，用作数据库服务器。如果我们可以让人们使用windows凭证登录，甚至可以让机器使用我们在其他地方拥有的当前AD驱动的安全性，这将使每个人的生活变得更容易。这件事的第一步很容易完成-- apt-get install likewise-open和我几乎都在做生意。我遇到的问题是让我们的管理员加入到修士小组--我似乎没什么可拿的。我试过：( a) use

问从命令行向sudoers添加AD域用户
EN

回答 9

Ask Ubuntu用户

Ask Ubuntu用户

Ask Ubuntu用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问从命令行向sudoers添加AD域用户EN

回答 9

Ask Ubuntu用户

Ask Ubuntu用户

Ask Ubuntu用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问从命令行向sudoers添加AD域用户
EN