HowTo join Debian 9 Desktop to NethServer-7 Active Directory

(fpausp) #1

HowTo join Debian 9 Desktop to NethServer-7 Active Directory

Please feel free to give me a feedback to be able to correct my howto. I mean technical and formulation (I am not a nativ speaker).

This is based upon limited testing, and a small number of users. Both, Client and Server, were installed as VPS under Proxmox PVE.

Server prerequisites:
Installed NethServer 7.4 Server and updated from command line. Active Directory has been configured and the domain-name was given.

Client prerequisites:
Installed Debian 9 (debian-9.2.1-amd64-DVD-1.iso), with standard gnome desktop and one local user who has local admin rights. DHCP-Client was activ to get an IP from the NethServer who is acting as DHCP-and AD-Server. It is important that the Debian Client can resolv DNS correctly.

Now we can join the Domain with:
±+ Open a Terminal on Debian 9

±+ Get root:

±+ install some packages:
apt-get install sudo realmd ntp adcli sssd

sudo mkdir -p /var/lib/samba/private

±+ Enable sssd:
sudo systemctl enable sssd

±+ Join Domain:
sudo realm join --user=administrator

±+ Start sssd:
sudo systemctl start sssd

±+ (all in one line)
echo "session required skel=/etc/skel/ umask=0022" | sudo tee -a /etc/pam.d/common-session

±+ Install libsss-sudo
sudo apt-get install libsss-sudo

±+ Set sudoers permission:
echo " ALL=(ALL) ALL" | sudo tee -a /etc/sudoers.d/DomainAdmins
echo " ALL=(ALL) ALL" | sudo tee -a /etc/sudoers.d/DomainAdmins

±+ Reboot Debian Desktop:

±+ After the reboot, logon with:
pass: your-administrator-password

Looking for HOWTO for Neth 7 as AD PDC and file server with Ubuntu and Windows clients
(Alessio Fattorini) #2

Great! I suggest use Preformatted text sintax for code :wink:

(Rob Bosch) #3

Great effort!
Maybe it would be a good idea to create an HowTo in our wiki. Preferably for all major Linux flavors.

(fpausp) #4

Yes, I agree. It’s just a matter of time, I can spend…

(Alessio Fattorini) #5

What do you think to create a wiki page where you list all these howtos? How to join…
Would be great

(fpausp) #6

Yes, - HowTo join clients to NethServer AD… - But I am busy now, can start in Feb ?

(Alessio Fattorini) #7

Sure! I guess that it takes just a few minutes