====== Linux AD ====== ===== SSSD ===== * https://www.linuxquestions.org/questions/linux-newbie-8/any-way-to-remove-domain-name-at-end-of-username-when-authenticating-with-ldap-sssd-4175593988/ ===== Setup AD login ===== apt install sssd-ad sssd-tools realmd adcli realm -v discover sumireko.home.dark-link.info realm join -v sumireko.home.dark-link.info -U waldemar pam-auth-update --enable mkhomedir Testing getent passwd waldemar@home.dark-link.info Also install Kerberos apt install krb5-user klist ===== SSH Integration ===== * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/openssh-sssd * https://blog.ndk.name/linux-ssh-authentication-against-active-directory-without-joining-the-domain/