Active Directory bridging toolset
AD integration client
Active Directory integration bridging toolset command line tool.
adsysctl COMMAND [flags]
-c, --config string use a specific configuration file
-h, --help help for adsysctl
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Print last applied GPOs for current or given user/machine
Alias of "policy applied"
adsysctl applied [USER_NAME] [flags]
-a, --all show overridden rules in each GPOs.
--details show applied rules in addition to GPOs.
-h, --help help for applied
-m, --machine show applied rules to the machine.
--no-color don't display colorized version.
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for the specified shell
Generate the autocompletion script for adsysctl for the specified shell. See each sub-command's help for details on how to use the generated script.
-h, --help help for completion
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for bash
Generate the autocompletion script for the bash shell.
This script depends on the 'bash-completion' package. If it is not installed already, you can install it via your OS's package manager.
To load completions in your current shell session:
source <(adsysctl completion bash)
To load completions for every new session, execute once:
adsysctl completion bash > /etc/bash_completion.d/adsysctl
adsysctl completion bash > $(brew --prefix)/etc/bash_completion.d/adsysctl
You will need to start a new shell for this setup to take effect.
adsysctl completion bash
-h, --help help for bash
--no-descriptions disable completion descriptions
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for fish
Generate the autocompletion script for the fish shell.
To load completions in your current shell session:
adsysctl completion fish | source
To load completions for every new session, execute once:
adsysctl completion fish > ~/.config/fish/completions/adsysctl.fish
You will need to start a new shell for this setup to take effect.
adsysctl completion fish [flags]
-h, --help help for fish
--no-descriptions disable completion descriptions
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for powershell
Generate the autocompletion script for powershell.
To load completions in your current shell session:
adsysctl completion powershell | Out-String | Invoke-Expression
To load completions for every new session, add the output of the above command to your powershell profile.
adsysctl completion powershell [flags]
-h, --help help for powershell
--no-descriptions disable completion descriptions
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for zsh
Generate the autocompletion script for the zsh shell.
If shell completion is not already enabled in your environment you will need to enable it. You can execute the following once:
echo "autoload -U compinit; compinit" >> ~/.zshrc
To load completions in your current shell session:
source <(adsysctl completion zsh)
To load completions for every new session, execute once:
adsysctl completion zsh > "${fpath[1]}/_adsysctl"
adsysctl completion zsh > $(brew --prefix)/share/zsh/site-functions/_adsysctl
You will need to start a new shell for this setup to take effect.
adsysctl completion zsh [flags]
-h, --help help for zsh
--no-descriptions disable completion descriptions
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Documentation
adsysctl doc [CHAPTER] [flags]
-d, --dest string Write documentation file(s) to this directory.
-f, --format string Format type (markdown, raw or html). (default "markdown")
-h, --help help for doc
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Policy management
adsysctl policy COMMAND [flags]
-h, --help help for policy
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Dump windows policy definitions
adsysctl policy admx lts-only|all [flags]
--distro string distro for which to retrieve policy definition. (default "Ubuntu")
-h, --help help for admx
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Print last applied GPOs for current or given user/machine
adsysctl policy applied [USER_NAME] [flags]
-a, --all show overridden rules in each GPOs.
--details show applied rules in addition to GPOs.
-h, --help help for applied
-m, --machine show applied rules to the machine.
--no-color don't display colorized version.
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Purges policies for the current user or a specified one
adsysctl policy purge [USER_NAME] [flags]
-a, --all all purges the policy of the computer and all the logged in users. -m or USER_NAME cannot be used with this option.
-h, --help help for purge
-m, --machine machine purges the policy of the computer.
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Updates/Create a policy for current user or given user with its kerberos ticket
adsysctl policy update [USER_NAME KERBEROS_TICKET_PATH] [flags]
-a, --all all updates the policy of the computer and all the logged in users. -m or USER_NAME/TICKET cannot be used with this option.
-h, --help help for update
-m, --machine machine updates the policy of the computer.
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Service management
adsysctl service COMMAND [flags]
-h, --help help for service
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Print service logs
adsysctl service cat [flags]
-h, --help help for cat
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Print service status
adsysctl service status [flags]
-h, --help help for status
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Requests to stop the service once all connections are done
adsysctl service stop [flags]
-f, --force force will shut it down immediately and drop existing connections.
-h, --help help for stop
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Updates/Create a policy for current user or given user with its kerberos ticket
Alias of "policy update"
adsysctl update [USER_NAME KERBEROS_TICKET_PATH] [flags]
-a, --all all updates the policy of the computer and all the logged in users. -m or USER_NAME/TICKET cannot be used with this option.
-h, --help help for update
-m, --machine machine updates the policy of the computer.
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Returns version of client and service
adsysctl version [flags]
-h, --help help for version
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
AD integration daemon
Active Directory integration bridging toolset daemon.
adsysd COMMAND [flags]
--ad-backend string Active Directory authentication backend (default "sssd")
--cache-dir string directory where ADsys caches GPOs downloads and policies. (default "/var/cache/adsys")
-c, --config string use a specific configuration file
-h, --help help for adsysd
--run-dir string directory where ADsys stores transient information erased on reboot. (default "/run/adsys")
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
--sssd.cache-dir string SSSd cache directory (default "/var/lib/sss/db")
--sssd.config string SSSd config file path (default "/etc/sssd/sssd.conf")
-t, --timeout int time in seconds without activity before the service exists. 0 for no timeout. (default 120)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for the specified shell
Generate the autocompletion script for adsysd for the specified shell. See each sub-command's help for details on how to use the generated script.
-h, --help help for completion
--ad-backend string Active Directory authentication backend (default "sssd")
--cache-dir string directory where ADsys caches GPOs downloads and policies. (default "/var/cache/adsys")
-c, --config string use a specific configuration file
--run-dir string directory where ADsys stores transient information erased on reboot. (default "/run/adsys")
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
--sssd.cache-dir string SSSd cache directory (default "/var/lib/sss/db")
--sssd.config string SSSd config file path (default "/etc/sssd/sssd.conf")
-t, --timeout int time in seconds without activity before the service exists. 0 for no timeout. (default 120)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for bash
Generate the autocompletion script for the bash shell.
This script depends on the 'bash-completion' package. If it is not installed already, you can install it via your OS's package manager.
To load completions in your current shell session:
source <(adsysd completion bash)
To load completions for every new session, execute once:
adsysd completion bash > /etc/bash_completion.d/adsysd
adsysd completion bash > $(brew --prefix)/etc/bash_completion.d/adsysd
You will need to start a new shell for this setup to take effect.
adsysd completion bash
-h, --help help for bash
--no-descriptions disable completion descriptions
--ad-backend string Active Directory authentication backend (default "sssd")
--cache-dir string directory where ADsys caches GPOs downloads and policies. (default "/var/cache/adsys")
-c, --config string use a specific configuration file
--run-dir string directory where ADsys stores transient information erased on reboot. (default "/run/adsys")
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
--sssd.cache-dir string SSSd cache directory (default "/var/lib/sss/db")
--sssd.config string SSSd config file path (default "/etc/sssd/sssd.conf")
-t, --timeout int time in seconds without activity before the service exists. 0 for no timeout. (default 120)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for fish
Generate the autocompletion script for the fish shell.
To load completions in your current shell session:
adsysd completion fish | source
To load completions for every new session, execute once:
adsysd completion fish > ~/.config/fish/completions/adsysd.fish
You will need to start a new shell for this setup to take effect.
adsysd completion fish [flags]
-h, --help help for fish
--no-descriptions disable completion descriptions
--ad-backend string Active Directory authentication backend (default "sssd")
--cache-dir string directory where ADsys caches GPOs downloads and policies. (default "/var/cache/adsys")
-c, --config string use a specific configuration file
--run-dir string directory where ADsys stores transient information erased on reboot. (default "/run/adsys")
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
--sssd.cache-dir string SSSd cache directory (default "/var/lib/sss/db")
--sssd.config string SSSd config file path (default "/etc/sssd/sssd.conf")
-t, --timeout int time in seconds without activity before the service exists. 0 for no timeout. (default 120)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for powershell
Generate the autocompletion script for powershell.
To load completions in your current shell session:
adsysd completion powershell | Out-String | Invoke-Expression
To load completions for every new session, add the output of the above command to your powershell profile.
adsysd completion powershell [flags]
-h, --help help for powershell
--no-descriptions disable completion descriptions
--ad-backend string Active Directory authentication backend (default "sssd")
--cache-dir string directory where ADsys caches GPOs downloads and policies. (default "/var/cache/adsys")
-c, --config string use a specific configuration file
--run-dir string directory where ADsys stores transient information erased on reboot. (default "/run/adsys")
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
--sssd.cache-dir string SSSd cache directory (default "/var/lib/sss/db")
--sssd.config string SSSd config file path (default "/etc/sssd/sssd.conf")
-t, --timeout int time in seconds without activity before the service exists. 0 for no timeout. (default 120)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for zsh
Generate the autocompletion script for the zsh shell.
If shell completion is not already enabled in your environment you will need to enable it. You can execute the following once:
echo "autoload -U compinit; compinit" >> ~/.zshrc
To load completions in your current shell session:
source <(adsysd completion zsh)
To load completions for every new session, execute once:
adsysd completion zsh > "${fpath[1]}/_adsysd"
adsysd completion zsh > $(brew --prefix)/share/zsh/site-functions/_adsysd
You will need to start a new shell for this setup to take effect.
adsysd completion zsh [flags]
-h, --help help for zsh
--no-descriptions disable completion descriptions
--ad-backend string Active Directory authentication backend (default "sssd")
--cache-dir string directory where ADsys caches GPOs downloads and policies. (default "/var/cache/adsys")
-c, --config string use a specific configuration file
--run-dir string directory where ADsys stores transient information erased on reboot. (default "/run/adsys")
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
--sssd.cache-dir string SSSd cache directory (default "/var/lib/sss/db")
--sssd.config string SSSd config file path (default "/etc/sssd/sssd.conf")
-t, --timeout int time in seconds without activity before the service exists. 0 for no timeout. (default 120)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Returns version of service and exits
adsysd version [flags]
-h, --help help for version
--ad-backend string Active Directory authentication backend (default "sssd")
--cache-dir string directory where ADsys caches GPOs downloads and policies. (default "/var/cache/adsys")
-c, --config string use a specific configuration file
--run-dir string directory where ADsys stores transient information erased on reboot. (default "/run/adsys")
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
--sssd.cache-dir string SSSd cache directory (default "/var/lib/sss/db")
--sssd.config string SSSd config file path (default "/etc/sssd/sssd.conf")
-t, --timeout int time in seconds without activity before the service exists. 0 for no timeout. (default 120)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
AD watch daemon
Watch directories for changes and bump the relevant GPT.ini versions.
adwatchd [COMMAND] [flags]
-c, --config string use a specific configuration file
-h, --help help for adwatchd
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for the specified shell
Generate the autocompletion script for adwatchd for the specified shell. See each sub-command's help for details on how to use the generated script.
-h, --help help for completion
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for bash
Generate the autocompletion script for the bash shell.
This script depends on the 'bash-completion' package. If it is not installed already, you can install it via your OS's package manager.
To load completions in your current shell session:
source <(adwatchd completion bash)
To load completions for every new session, execute once:
adwatchd completion bash > /etc/bash_completion.d/adwatchd
adwatchd completion bash > $(brew --prefix)/etc/bash_completion.d/adwatchd
You will need to start a new shell for this setup to take effect.
adwatchd completion bash
-h, --help help for bash
--no-descriptions disable completion descriptions
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for fish
Generate the autocompletion script for the fish shell.
To load completions in your current shell session:
adwatchd completion fish | source
To load completions for every new session, execute once:
adwatchd completion fish > ~/.config/fish/completions/adwatchd.fish
You will need to start a new shell for this setup to take effect.
adwatchd completion fish [flags]
-h, --help help for fish
--no-descriptions disable completion descriptions
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for powershell
Generate the autocompletion script for powershell.
To load completions in your current shell session:
adwatchd completion powershell | Out-String | Invoke-Expression
To load completions for every new session, add the output of the above command to your powershell profile.
adwatchd completion powershell [flags]
-h, --help help for powershell
--no-descriptions disable completion descriptions
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Generate the autocompletion script for zsh
Generate the autocompletion script for the zsh shell.
If shell completion is not already enabled in your environment you will need to enable it. You can execute the following once:
echo "autoload -U compinit; compinit" >> ~/.zshrc
To load completions in your current shell session:
source <(adwatchd completion zsh)
To load completions for every new session, execute once:
adwatchd completion zsh > "${fpath[1]}/_adwatchd"
adwatchd completion zsh > $(brew --prefix)/share/zsh/site-functions/_adwatchd
You will need to start a new shell for this setup to take effect.
adwatchd completion zsh [flags]
-h, --help help for zsh
--no-descriptions disable completion descriptions
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Starts the directory watch loop
Can run as a service through the service manager or interactively as a standalone application.
The program will monitor the configured directories for changes and bump the appropriate GPT.ini versions anytime a change is detected. If a GPT.ini file does not exist for a directory, a warning will be issued and the file will be created. If the GPT.ini file is incompatible or malformed, the program will report an error.
adwatchd run [flags]
-c, --config string use a specific configuration file
-d, --dirs directory a directory to check for changes (can be specified multiple times)
-f, --force force the program to run even if another instance is already running
-h, --help help for run
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Manages the adwatchd service
The service command allows the user to interact with the adwatchd service. It can manage and query the service status, and also install and uninstall the service.
adwatchd service COMMAND [flags]
-h, --help help for service
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Installs the service
Installs the adwatchd service.
The service will be installed as a Windows service.
adwatchd service install [flags]
-c, --config string use a specific configuration file
-h, --help help for install
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Restarts the service
Restarts the adwatchd service.
adwatchd service restart [flags]
-h, --help help for restart
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Starts the service
Starts the adwatchd service.
adwatchd service start [flags]
-h, --help help for start
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Returns service status
Returns the status of the adwatchd service.
adwatchd service status [flags]
-h, --help help for status
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Stops the service
Stops the adwatchd service.
adwatchd service stop [flags]
-h, --help help for stop
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Uninstalls the service
Uninstalls the adwatchd service.
adwatchd service uninstall [flags]
-h, --help help for uninstall
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Returns version of service and exits
adwatchd version [flags]
-h, --help help for version
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Hidden commands
Those commands are hidden from help and should primarily be used by the system or for debugging.
Debug various policy infos
adsysctl policy debug [flags]
-h, --help help for debug
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Write certificate autoenrollment python embedded script in current directory
adsysctl policy debug cert-autoenroll-script [flags]
-h, --help help for cert-autoenroll-script
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Write GPO list python embeeded script in current directory
adsysctl policy debug gpolist-script [flags]
-h, --help help for gpolist-script
-c, --config string use a specific configuration file
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
-t, --timeout int time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. (default 30)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Mount the locations listed in the specified file for the current user
adsysd mount MOUNTS_FILE [flags]
-h, --help help for mount
--ad-backend string Active Directory authentication backend (default "sssd")
--cache-dir string directory where ADsys caches GPOs downloads and policies. (default "/var/cache/adsys")
-c, --config string use a specific configuration file
--run-dir string directory where ADsys stores transient information erased on reboot. (default "/run/adsys")
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
--sssd.cache-dir string SSSd cache directory (default "/var/lib/sss/db")
--sssd.config string SSSd config file path (default "/etc/sssd/sssd.conf")
-t, --timeout int time in seconds without activity before the service exists. 0 for no timeout. (default 120)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
Runs scripts in the given subdirectory
adsysd runscripts ORDER_FILE [flags]
--allow-order-missing allow ORDER_FILE to be missing once the scripts are ready.
-h, --help help for runscripts
--ad-backend string Active Directory authentication backend (default "sssd")
--cache-dir string directory where ADsys caches GPOs downloads and policies. (default "/var/cache/adsys")
-c, --config string use a specific configuration file
--run-dir string directory where ADsys stores transient information erased on reboot. (default "/run/adsys")
-s, --socket string socket path to use between daemon and client. Can be overridden by systemd socket activation. (default "/run/adsysd.sock")
--sssd.cache-dir string SSSd cache directory (default "/var/lib/sss/db")
--sssd.config string SSSd config file path (default "/etc/sssd/sssd.conf")
-t, --timeout int time in seconds without activity before the service exists. 0 for no timeout. (default 120)
-v, --verbose count issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output
For every commit on the main branch of the adsys repository, the GitHub Actions CI builds a development version of the adwatchd project. This is NOT a stable version of the application and should not be used for production purposes. However, it may prove useful to preview features or bugfixes not yet available as part of a stable release.
To get access to the build artifact you need to be logged in on GitHub. Then, click on any passing run of the QA workflow that has the Windows tests for adwatchd job, and look for the adwatchd_setup file.
If AD authentication works but adsys fails to fetch GPOs (e.g. you see can't get policies errors on login), please perform the following steps:
- Add the following to
/etc/samba/smb.conf:
log level = 10
-
Run
sudo login {user}@{domain}in a terminal, replacing with your AD credentials -
Paste the output in the bug report
The adsysctl command can also be useful to fetch logs for the daemon and client:
# You can increase the amount of information that will be displayed by using a more verbose tag (-vv or -vvv).
# Note that this command will start a watcher that will print logs as they are generated, so you will need to perform
# actions (such as trying to login) while the command is running.
adsysctl service cat -vAdditionally, you can check the system journal to look at more logs about adsys: Remember that adsys runs with privileges, so you will need to run the following commands as root.
# You can use the -b flag to control how many boots the log will show (e.g. -b 0 will show the current boot only)
journalctl -b0 | grep adsys
# You can also get the logs of the individual units:
systemctl list-units | grep adsys # this will show all adsys related systemd units
# The -u flag will show the logs of the specified unit
journalctl -b0 -u adsysd.service # this command will only show the adsysd.service logs of the current boot
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot]")
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "github-actions[bot]")
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent