after joining a fedora client to the AD-domain i did this how to on a debian 9 xfce.
worked perfect!, did not have the chance to test the auto-mounted “nethome”
Followed this How-To to “the letter” except:
override_homedir = /home/%u@%d
override_shell = /bin/bash
in did follow your centos how-to
# Change and add /etc/sssd/sssd.conf:
use_fully_qualified_names = False
fallback_homedir = /home/%u
override_homedir = /home/%u
override_shell = /bin/bash
in the footsteps of my fedora setup: managing sudo right in AD-groups; omitted
+-+ Set sudoers permission:
echo "administrator@example.org ALL=(ALL) ALL" | sudo tee -a /etc/sudoers
echo "admin@example.org ALL=(ALL) ALL" | sudo tee -a /etc/sudoers
and created a sudo group in the AD (sudo@example.org
) and added the domain admins group to it as members and a regular user (i.e.john@example.org
) as well.
The users in the sudo@example.org
group have sudo rights on the client.
EDIT: overlooked something (not sure if it is important) just automatically typed ad.example.org:
realm join --user=administrator ad.example.org
instead of:
realm join --user=administrator example.org