You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
[!INCLUDE [SQL Server - Linux](../includes/applies-to-version/sql-linux.md)]
19
19
20
-
The **adutil** tool is a command-line interface (CLI) utility for configuring and managing Windows Active Directory domains for SQL Server on Linux and containers, without switching between Windows and Linux machines to manage Active Directory. Make sure that you download **adutil** to a host that is already joined to an Active Directory domain.
20
+
The **adutil** tool is a command-line interface (CLI) utility for configuring and managing Windows Active Directory domains for SQL Server on Linux and containers. It eliminates the need to switch between Windows and Linux machines to manage Active Directory.
21
21
22
-
Support for **adutil** is limited for SQL Server use cases only.
22
+
> [!NOTE]
23
+
> Support for **adutil** is limited to SQL Server use cases only. You can also use other utilities like **ktpass** to enable Active Directory authentication, as explained in [Tutorial: Use Active Directory authentication with SQL Server on Linux](sql-server-linux-active-directory-authentication.md).
23
24
24
-
You don't need to use **adutil** to enable Active Directory authentication for SQL Server on Linux or containers. You can also use utilities like **ktpass**, as explained in [Tutorial: Use Active Directory authentication with SQL Server on Linux](sql-server-linux-active-directory-authentication.md).
25
+
Before you get started, make sure you download **adutil** to a host that is already joined to an Active Directory domain.
25
26
26
-
The **adutil** tool is designed as a series of commands and subcommands, with extra flags that you specify as further input. Each toplevel command represents a category of administrative functions. Within that category, each subcommand is an operation. This article shows you how you can download and get started with **adutil**.
27
+
The **adutil** tool is designed as a series of commands and subcommands, with extra flags that you specify as further input. Each top-level command represents a category of administrative functions. Within that category, each subcommand is an operation. This article shows you how to download and get started with **adutil**.
27
28
28
29
## Configure adutil for LDAP over Secure Sockets Layer (SSL)
29
30
30
-
You should use Lightweight Directory Access Protocol over SSL (LDAPS) instead of Lightweight Directory Access Protocol (LDAP). If you want to learn more about LDAP, see [Lightweight Directory Access Protocol (LDAP)](sql-server-linux-ad-auth-understanding.md#ldap).
31
+
You should use Lightweight Directory Access Protocol over SSL (LDAPS) instead of Lightweight Directory Access Protocol (LDAP). For more information about LDAP, see [Lightweight Directory Access Protocol (LDAP)](sql-server-linux-ad-auth-understanding.md#ldap).
31
32
32
-
You can set the `useLdaps` option to `true` in the `adutil.json` configuration file, which is located at:`/var/opt/mssql/.adutil/adutil.json` when run under the `mssql` user. This JSON code sample shows how to configure the setting:
33
+
You can set the `useLdaps` option to `true` in the `adutil.json` configuration file. When you run **adutil** under the `mssql` user, the configuration file is located at `/var/opt/mssql/.adutil/adutil.json`. This JSON code sample shows how to configure the setting:
33
34
34
35
```json
35
36
{
36
37
"useLdaps": "true"
37
38
}
38
39
```
39
40
40
-
By default, the `useLDAPS` setting is set to `false`. When configuring this setting and using**mssql-conf** to create the keytab (key table), make sure you run **mssql-conf** as the user `mssql`, which you can do by running the following command:
41
+
By default, `useLdaps`is `false`. When you configure this setting and use**mssql-conf** to create the keytab (key table), make sure you run **mssql-conf** as the `mssql` user. Run the following command to switch to the `mssql` user:
41
42
42
43
```bash
43
44
sudo su mssql
44
45
```
45
46
46
-
To set up the keytab using **mssql-conf**, see [Create the SQL Server service keytab file using mssql-conf](./sql-server-linux-ad-auth-adutil-tutorial.md#create-the-sql-server-service-keytab-file-using-mssql-conf).
47
+
To set up the keytab using **mssql-conf**, see [Create the SQL Server service keytab file using mssql-conf](sql-server-linux-ad-auth-adutil-tutorial.md#create-the-sql-server-service-keytab-file-using-mssql-conf).
47
48
48
49
## Install adutil
49
50
50
-
If you don't accept the end user license agreement (EULA) during the time of install, when you run the **adutil** command for the first time, you must run it with the `--accept-eula` flag (for all distributions).
51
+
If you don't accept the end user license agreement (EULA) during installation, when you run the **adutil** command for the first time, you must run it with the `--accept-eula` flag (for all distributions).
51
52
52
53
# [Red Hat Enterprise Linux (RHEL)](#tab/rhel)
53
54
54
55
1. Download the Microsoft Red Hat repository configuration file.
1. If you had a previous preview version of **adutil** installed, remove any older **adutil** packages using the following command.
75
+
1. If you installed a previous preview version of **adutil**, remove any older **adutil** packages using the following command.
69
76
70
77
```bash
71
78
sudo yum remove adutil-preview
72
79
```
73
80
74
-
1. Run the following commands to install **adutil**. `ACCEPT_EULA=Y` accepts the EULA for **adutil**. The EULA is placed at the path`/usr/share/adutil/`.
81
+
1. Run the following command to install **adutil**. `ACCEPT_EULA=Y` accepts the EULA for **adutil**. The EULA is located at `/usr/share/adutil/`.
75
82
76
83
```bash
77
84
sudo ACCEPT_EULA=Y yum install -y adutil
78
85
```
79
86
80
87
# [Ubuntu](#tab/ubuntu)
81
88
82
-
1. Import the public repository GPG keys and then register the Microsoft Ubuntu repository.
89
+
1. Import the public repository GNU Privacy Guard (GPG) keys and then register the Microsoft Ubuntu repository.
curl https://packages.microsoft.com/config/ubuntu/22.04/prod.list | sudo tee /etc/apt/sources.list.d/msprod.list
89
103
```
90
104
@@ -95,27 +109,27 @@ If you don't accept the end user license agreement (EULA) during the time of ins
95
109
curl https://packages.microsoft.com/config/ubuntu/20.04/prod.list | sudo tee /etc/apt/sources.list.d/msprod.list
96
110
```
97
111
98
-
**Ubuntu 18.04**
112
+
> [!TIP]
113
+
> If you experience a key-related issue on Ubuntu 22.04 and later versions, run the following command instead:
114
+
>
115
+
> ```bash
116
+
> curl https://packages.microsoft.com/keys/microsoft.asc | sudo tee /etc/apt/trusted.gpg.d/microsoft.asc
117
+
>```
99
118
100
-
```bash
101
-
curl https://packages.microsoft.com/keys/microsoft.asc | sudo tee /etc/apt/trusted.gpg.d/microsoft.asc
102
-
curl https://packages.microsoft.com/config/ubuntu/18.04/prod.list | sudo tee /etc/apt/sources.list.d/msprod.list
103
-
```
104
-
105
-
1. If you had a previous preview version of **adutil** installed, remove any older **adutil** packages using the following command.
119
+
1. If you installed a previous preview version of **adutil**, remove any older **adutil** packages using the following command.
106
120
107
121
```bash
108
122
sudo apt-get remove adutil-preview
109
123
```
110
124
111
-
1. Run the following command to install **adutil**. `ACCEPT_EULA=Y` accepts the EULA for **adutil**. The EULA is placed at the path`/usr/share/adutil/`.
125
+
1. Run the following command to install **adutil**. `ACCEPT_EULA=Y` accepts the EULA for **adutil**. The EULA is located at `/usr/share/adutil/`.
112
126
113
127
```bash
114
128
sudo apt-get update
115
129
sudo ACCEPT_EULA=Y apt-get install -y adutil
116
130
```
117
131
118
-
# [SLES](#tab/sles)
132
+
# [SUSE Linux Enterprise Server](#tab/sles)
119
133
120
134
1. Add the Microsoft SQL Server repository to Zypper.
121
135
@@ -133,13 +147,13 @@ If you don't accept the end user license agreement (EULA) during the time of ins
1. If you had a previous preview version of **adutil** installed, remove any older **adutil** packages using the following command.
150
+
1. If you installed a previous preview version of **adutil**, remove any older **adutil** packages using the following command.
137
151
138
152
```bash
139
153
sudo zypper remove adutil-preview
140
154
```
141
155
142
-
1. Run the following command to install **adutil**. `ACCEPT_EULA=Y` accepts the EULA for **adutil**. The EULA is placed at the path`/usr/share/adutil/`.
156
+
1. Run the following command to install **adutil**. `ACCEPT_EULA=Y` accepts the EULA for **adutil**. The EULA is located at `/usr/share/adutil/`.
143
157
144
158
```bash
145
159
sudo zypper refresh
@@ -150,12 +164,17 @@ If you don't accept the end user license agreement (EULA) during the time of ins
150
164
151
165
## Use adutil to manage Windows Active Directory
152
166
153
-
Make sure that you download **adutil** to a host that is already joined to an Active Directory domain. You also need to obtain or renew the Kerberos TGT (ticket-granting ticket), using the **kinit** command and a privileged domain account. The account you use must have permission to create accounts and Service Principal Names (SPNs) on the domain.
167
+
To use **adutil**, you need to get or renew the Kerberos TGT (ticket-granting ticket) using the **kinit** command and a privileged domain account. The account you use must have permission to create accounts and Service Principal Names (SPNs) on the domain.
154
168
155
-
Here are some examples of actions that you can perform using **adutil**. To see a list of top-level commands, type `adutil --help`. This command shows you the top-level commands that you can use to manage and interact with Active Directory.
169
+
The following examples show some typical activities you can perform using **adutil**. To see a list of top-level commands, type `adutil --help`.
0 commit comments