Configuration Client join

Joining a (Client) System to the Lightwave (Identity) Domain creates a Computer/Machine Security Account for it (in the Identity Domain).

The following command helps join the client system to Lightwave.

/opt/vmware/bin/ic-join join --domain   <lightwave domain name>
                            [--site     <sitename>]
                            [--password <password>]

Example:
    /opt/vmware/bin/ic-join join --domain lightwave.local --site Bellevue --password 'MySecret123$'

Pre-requisites

• Verify your networking configuration! The client MUST have a valid hostname set up and be able to reach the server.
  • Does "hostname -f" return a valid fully qualified hostname (e.g. client01.domain.com)?
  • Can you ping the server machine you are trying to join using its hostname?
  • The client needs to access the SRV records for the domain setup in the DNS service running on the Lightwave Servers.
    • Note: One way to achieve this is as follows. 1 Add any DNS forwarders to the DNS service running on the Lightwave Servers 1 Configure the client system to use the Lightwave Server as its DNS server

Further commands required to configure Lightwave integration with PAM and NSSWITCH

* Provide precedence to Lightwave Directory Provider in Likewise Authentication stack
    /opt/likewise/bin/lwregshell set_value '[HKEY_THIS_MACHINE\Services\lsass\Parameters\Providers]' "LoadOrder" "ActiveDirectory" "VmDir" "Local"
* Restart identity service
    /opt/likewise/bin/lwsm restart lsass
* Configure integration with NSSWITCH
    /opt/likewise/bin/domainjoin-cli configure --enable nsswitch
* Configure integration with PAM
    /opt/likewise/bin/domainjoin-cli configure --enable pam