The program "
realm" is your friend on this one.
Once you install
realmd and configure your
/etc/krb5.conf file, assuming you realm name is
AD.JOSHUA.COM, run the following....
Code:
[root@wopr ~]realm discover AD.JOSHUA.COM
ad.joshua.com
type: kerberos
realm-name: AD.JOSHUA.COM
domain-name: ad.joshua.com
configured: no
server-software: active-directory
client-software: sssd
required-package: oddjob
required-package: oddjob-mkhomedir
required-package: sssd
required-package: adcli
required-package: samba-common
Make sure all the required package listed above are installed. Then join the domain...
Code:
[root@wopr ~]realm join --user ginola@ad.joshua.com AD.JOSHUA.COM
The
--user option can be left out, but then you'll login as
ADMINSTRATOR.
You can then su in as that user to check it works.
I always tidy up
/etc/sssd/sssd.conf
Code:
use_fully_qualified_names = False
fallback_homedir = /home/%u
I change the first option so the users can log directly on the box with just the username, no domain needed, and the second option makes the home directory area tidier..
HTH.