# Samba AD Authentication **URL:** \ **Category:** Ignition\ **Created:** [October 6, 2017, 7:44pm UTC](https://forum.inductiveautomation.com/t/samba-ad-authentication/15595 "2017-10-06T19:44:09Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![cody.tamaki](https://avatars.discourse-cdn.com/v4/letter/c/b487fb/32.png) [@cody.tamaki](https://forum.inductiveautomation.com/u/cody.tamaki)\ **Post date:** [October 6, 2017, 7:44pm UTC](https://forum.inductiveautomation.com/t/samba-ad-authentication/15595/1 "2017-10-06T19:44:09Z")
Hello, Has anyone tried or succeeded in joining Ignition to a Linux based domain running on Samba? ---
**Author:** ![Kevin.Collins](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.collins/32/13497_2.png) [@Kevin.Collins](https://forum.inductiveautomation.com/u/Kevin.Collins)\ **Post date:** [October 8, 2017, 4:17am UTC](https://forum.inductiveautomation.com/t/samba-ad-authentication/15595/2 "2017-10-08T04:17:19Z")
I’ve got a Linux-based AD (via Samba 4 as DC) at home. I will see if I can get Ignition authenticating a user source against it and report back… Are you more interested in AD authentication (under Ignition) against a DC running on Samba, or AD auth on a Linux machine joined to a Windows domain (with, say, a standard Windows DC)? ---
**Author:** ![sluitz](https://avatars.discourse-cdn.com/v4/letter/s/e19b73/32.png) [@sluitz](https://forum.inductiveautomation.com/u/sluitz)\ **Post date:** [October 13, 2017, 12:58am UTC](https://forum.inductiveautomation.com/t/samba-ad-authentication/15595/3 "2017-10-13T00:58:21Z")
We are using Ignition on Linux (CentOS 7) gateways in production with a Samba 4 AD domain (redundant DCs). We use the domain for authentication and roles management. It works just fine. For setting up with LDAPS we had to import the AD domain root certificate into the Java trusted certs store, otherwise Ignition complained that it couldn’t verify the DC’s server certificates. On our CentOS 7 gateway servers it was sufficient to place the exported domain root cert into /etc/pki/ca-trust/source/anchors and run the update-ca-trust command (see man update-ca-trust). ``` Steffen ``` ---
**Author:** ![Kevin.Collins](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.collins/32/13497_2.png) [@Kevin.Collins](https://forum.inductiveautomation.com/u/Kevin.Collins)\ **Post date:** [October 24, 2017, 1:13pm UTC](https://forum.inductiveautomation.com/t/samba-ad-authentication/15595/4 "2017-10-24T13:13:24Z")
I finally got around to trying to get my connection setup to my Ubuntu-based Samba 4 AD DC… I ran into some issues, but I imagine that it is related to @sluitz comment about certificate trust. ---
**Author:** ![cody.tamaki](https://avatars.discourse-cdn.com/v4/letter/c/b487fb/32.png) [@cody.tamaki](https://forum.inductiveautomation.com/u/cody.tamaki)\ **Post date:** [November 7, 2017, 7:41pm UTC](https://forum.inductiveautomation.com/t/samba-ad-authentication/15595/5 "2017-11-07T19:41:23Z")
Do you guys have any kind of how-to guide that you followed for this? ---
**Author:** ![Kevin.Collins](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.collins/32/13497_2.png) [@Kevin.Collins](https://forum.inductiveautomation.com/u/Kevin.Collins)\ **Post date:** [November 9, 2017, 11:35pm UTC](https://forum.inductiveautomation.com/t/samba-ad-authentication/15595/6 "2017-11-09T23:35:10Z")
It would have been more than 5 years ago that I originally setup an AD DC with Samba 4… Yeah, because I’ve upgraded that server at home twice and I run it on the Long-Term-Support releases and I started on 12.04… That aside, I know that much has changed in the Samba world since then, probably very likely for the better. I’ll be honest and mention though that I haven’t checked in on those changes and don’t know what to suggest at this time. If I stumble across some good resources, I’ll try to return and share.