Linux Server an Windows AD authentifizeieren

Log into the Server per SSH

install the package realmd

sudo apt-get install realmd

sudo apt-get install sssd-tools sssd libnss-sss libpam-sss adcli samba-common-bin

After successfull installation you can login into the domain, here the domain is internal.example.de and the user is admin

sudo realm join internal.example.de --user admin --install=/

You will be asked to enter the AD Password from the user admin.

So let’s check, if this was successful:

realm list

it shoudl say sth like:

internal.example.de
  type: kerberos
  realm-name: internal.example.de
  domain-name: internal.example.de
  configured: kerberos-member
  server-software: active-directory
  client-software: sssd
  required-package: sssd-tools
  required-package: sssd
  required-package: libnss-sss
  required-package: libpam-sss
  required-package: adcli
  required-package: samba-common-bin
  login-formats: %U@internal.example.de
  login-policy: allow-realm-logins

So lets restart the system:

sudo reboot now

Now we can login with any AD-User, for example the User it-admin

User:     it-admin@internal.example.de
Pass:     [AD-password]

 

aus folgendem Blog:

https://www.techrepublic.com/article/how-to-join-a-linux-computer-to-an-active-directory-domain/

https://community.spiceworks.com/topic/2018717-joining-debian-machine-to-ad-domain-packages-not-found

Schreibe einen Kommentar

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert