Configuration Client join

Joining a (Client) System to the Lightwave (Identity) Domain creates a Computer/Machine Security Account for it (in the Identity Domain).

The following command helps join the client system to Lightwave.

/opt/vmware/bin/ic-join join --domain   <lightwave domain name>
                            [--site     <sitename>]
                            [--password <password>]

Example:
    /opt/vmware/bin/ic-join join --domain lightwave.local --site Bellevue --password 'MySecret123$'

Pre-requisites

• Verify your networking configuration! The client MUST have a valid hostname set up and be able to reach the server.
  • Does "hostname -f" return a valid fully qualified hostname (e.g. client01.domain.com)?
  • Can you ping the server machine you are trying to join using its hostname?
  • The client needs to access the SRV records for the domain setup in the DNS service running on the Lightwave Servers.
    • Note: One way to achieve this is as follows.
      1. Add any DNS forwarders to the DNS service running on the Lightwave Servers
      2. Configure the client system to use the Lightwave Server as its DNS server

Further commands required to configure Lightwave integration with PAM and NSSWITCH

* Provide precedence to Lightwave Directory Provider in Likewise Authentication stack
    /opt/likewise/bin/lwregshell set_value '[HKEY_THIS_MACHINE\Services\lsass\Parameters\Providers]' "LoadOrder" "ActiveDirectory" "VmDir" "Local"
* Restart identity service
    /opt/likewise/bin/lwsm restart lsass
* Configure integration with NSSWITCH
    /opt/likewise/bin/domainjoin-cli configure --enable nsswitch
* Configure integration with PAM
    /opt/likewise/bin/domainjoin-cli configure --enable pam