Difference between revisions of "Active Directory CentOS"

From UVOO Tech Wiki
Jump to navigation Jump to search
Line 17: Line 17:
 
# realm deny --all
 
# realm deny --all
 
realm permit -g 'MyAdministratorsGroup'
 
realm permit -g 'MyAdministratorsGroup'
 +
```
 +
 +
# Issues
 +
 +
Group Cache Update Issues on 7 using Samba using winbind (sssd might be different)
 +
```
 +
#!/usr/bin/env bash
 +
set -e
 +
service winbind stop
 +
rm /var/lib/samba/netsamlogon_cache.tdb
 +
# rm /var/lib/samba/winbindd_cache.tdb
 +
service winbind start
 +
id -G -n my-tester@example.com
 +
 +
 +
 +
ssh -o PubkeyAuthentication=no -l "EXAMPLE\my-tester" myhost.example.com
 
```
 
```

Revision as of 16:02, 4 May 2021

https://computingforgeeks.com/join-centos-rhel-system-to-active-directory-domain/

#!/usr/bin/env bash
set -e
ad_username=myuser
ad_userpass=mypass
ad_domain=example.com

sudo dnf install -y realmd sssd oddjob oddjob-mkhomedir adcli samba-common samba-common-tools krb5-workstation authselect-compat
realm  discover $ad_domain
echo $ad_userpass | realm join $ad_domain -U $ad_username
# sudo authselect select sssd
sudo authselect select sssd with-mkhomedir
sudo systemctl restart sssd
systemctl status sssd
# realm deny --all
realm permit -g 'MyAdministratorsGroup'

Issues

Group Cache Update Issues on 7 using Samba using winbind (sssd might be different)

#!/usr/bin/env bash
set -e
service winbind stop
rm /var/lib/samba/netsamlogon_cache.tdb
# rm /var/lib/samba/winbindd_cache.tdb
service winbind start
id -G -n my-tester@example.com



ssh -o PubkeyAuthentication=no -l "EXAMPLE\my-tester" myhost.example.com