Linux AD

• https://www.linuxquestions.org/questions/linux-newbie-8/any-way-to-remove-domain-name-at-end-of-username-when-authenticating-with-ldap-sssd-4175593988/

apt install sssd-ad sssd-tools realmd adcli
realm -v discover sumireko.home.dark-link.info
realm join -v sumireko.home.dark-link.info -U waldemar
pam-auth-update --enable mkhomedir

Testing

getent passwd waldemar@home.dark-link.info

Also install Kerberos

apt install krb5-user
klist

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/openssh-sssd
• https://blog.ndk.name/linux-ssh-authentication-against-active-directory-without-joining-the-domain/