Users who were added to the Enterprise Server via Active Directory synchronization can also log on from the Linux client using their domain credentials. This is what the Windows Domain Credentials authentication method is for: you enter your domain user name and your Windows password, and they are validated against Active Directory. Integrated Windows Authentication (SSO), by contrast, uses the credentials of a running Windows session – on Linux, use Windows Domain Credentials instead.
Prerequisites
Linux client version 19.0.2 or later – older client versions do not yet offer this login method.
User exists in Active Directory and on the server: You must be a member of the AD domain and must have been added as a user by the server administrator via Active Directory synchronization in the Server Manager.
Server-side settings: Under Manage → Server settings, the administrator must allow the authentication method Windows Domain Credentials (FQUN or UPN and password) and enable the Linux Edition under Connections → Supported clients – otherwise no connection is possible.
How to log on
In the Linux client, open the Enterprise Server login.
Enter the server address and port (default port in version 19: 25019).
Select Windows Domain Credentials as the authentication mode.
Enter your domain user name in the format
DOMAIN\usernameor as a UPN (username@domain.tld) together with your Windows password, and start the login.
Presetting the login format
To avoid typing the domain or UPN suffix at every login, you can preset the login format in the client options on the Network tab: Default domain name, Default UPN suffix, and User logon name format (Simple, <DOMAIN>\<sAMAccountName>, or UPN). In the Windows client, you can find these settings under Edit → Options → Network; the Linux client provides corresponding settings in its program options.
Older servers
The Linux client can in principle also connect to servers of older main versions – to do so, select your server's main version in the login dialog window. However, AD login via Windows Domain Credentials is not available with older servers such as version 18. In that case, use Standard Authentication with a user created locally on the server for Linux users – or update the Enterprise Server to the current version.
Note: If the login fails, first check the three prerequisites above (client version, AD synchronization, server-side settings) as well as the spelling and format of the user name.
Related topics:
Active Directory import and synchronization: prerequisites, permissions, and typical errors
Setting up single sign-on (SSO) login to the Enterprise Server and troubleshooting
Password Depot for Linux: feature set, supported distributions, and development status