AD Integration On RHEL 7/CentOS 7
- If YUM is configured, add the repository details, Otherwise subscribe RHEL 7 to the REDHAT.
- # yum install sssd realmd oddjob oddjob-mkhomedir adcli samba-common samba-common-tools krb5-workstation openldap-clients policycoreutils-python -y
- # yum install samba* -y
- # setup
- Select Authentication Configuration
- Select Only Kerberos (no need to enable to Winbind and Use Winbind Authentication)
- Add the Domain Name – <Domain_Name> and Enable Use DNS to resolve Hosts and KDCs
- Finish
- Add the resolv.conf details of nameserver and search domain
- # realm join -v -U <Username> –computer-name=<Computername> <Domain_Name>
- After joining a new file sssd.conf gets created automatically in /etc/sssd/sssd.conf
- Edit the File and do the following change
- Change the use_fully_qualified_names from True to False
- Save and exit
# systemctl daemon-reload
# systemctl restart sssd
Make sure the services start without any errors – systemctl status sssd
Also, check the /etc/nsswitch.conf file for sss authentication