Ubuntu Active Directory

Joining Domain

• https://wiki.ubuntu.com/Enterprise/Authentication/sssd
• https://ubuntu.com/server/docs/service-sssd
• sudo apt-get install sssd libpam-sss libnss-sss sssd-tools
• sudo apt install sssd-ad sssd-tools realmd adcli
• sudo apt install sssd-ad sssd-tools realmd adcli

20.04

ssh-copy-id -i .ssh/id_ed25519 'busk@exampel.org'@10.x.x.x
ssh 'busk@extendhealth.com'@10.x.x.x
realm permit busk@example.org
realm permit -x jebusk@example.org
realm permit -g 'Domain Users@example.org'

ssh 10.250.6.180
# or for all
# echo "ad_gpo_access_control = permissive" >> /etc/sssd/sssd.conf
# sudo systemctl restart sssd

/etc/sssd/sssd.conf needs the following entry.

[domain/your.domain]
ad_gpo_access_control = permissive

sudo systemctl restart sssd