User Tools
сервис_sssd
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
сервис_sssd [2021/10/15 20:51] val |
сервис_sssd [2024/03/29 09:49] (current) val [Присоединение к домену MS AD] |
||
|---|---|---|---|
| Line 4: | Line 4: | ||
| * [[https://access.redhat.com/articles/3023951|Manually Connecting an SSSD Client to an Active Directory Domain]] | * [[https://access.redhat.com/articles/3023951|Manually Connecting an SSSD Client to an Active Directory Domain]] | ||
| * [[https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/changing-the-format-of-user-names-displayed-by-sssd|5.5. Changing the Format of User Names Displayed by SSSD]] | * [[https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/changing-the-format-of-user-names-displayed-by-sssd|5.5. Changing the Format of User Names Displayed by SSSD]] | ||
| - | <code> | ||
| - | # apt install packagekit sssd-ad sssd-tools realmd adcli | ||
| - | # realm -v discover corp13.un | + | ===== Установка ПО ===== |
| - | # realm -v join corp13.un | + | * В Debian11 понадобился auditd для корректного управления сообщениями (что бы не валилось все на консоль), поскольку насколько устанавливаемых севисов находятся в complain режиме. Возможно, потребуется перезагрузка |
| + | <code> | ||
| + | clientN# apt install packagekit sssd-ad sssd-tools realmd adcli auditd | ||
| - | # less /etc/nsswitch.conf | + | clientN# less /etc/nsswitch.conf |
| + | </code> | ||
| + | ===== Присоединение к домену MS AD ===== | ||
| + | <code> | ||
| + | clientN# realm -v discover corpX.un | ||
| - | # less /etc/krb5.keytab | + | clientN# realm -v join corpX.un |
| - | # getent passwd user1@corp13.un | + | clientN# realm list |
| - | # id user1@corp13.un | + | clientN# less /etc/krb5.keytab |
| - | # pam-auth-update | + | clientN# getent passwd user1@corpX.un |
| - | ....Create home directory on login.... | + | |
| - | # login | + | clientN# id user1@corpX.un |
| - | gate.corp13.un login: user1@corp13.un | + | |
| - | Password: | + | |
| - | $ pwd | + | |
| - | # cat /etc/sssd/sssd.conf | + | clientN# cat /etc/sssd/sssd.conf |
| </code><code> | </code><code> | ||
| [sssd] | [sssd] | ||
| - | default_domain_suffix = corp13.un | + | default_domain_suffix = corpX.un |
| full_name_format = %1$s | full_name_format = %1$s | ||
| + | ... | ||
| + | [domain/corpX.un] | ||
| + | ... | ||
| + | fallback_homedir = /home/%u | ||
| ... | ... | ||
| </code><code> | </code><code> | ||
| - | # service sssd restart | + | clientN# service sssd restart |
| - | # apt install krb5-user | + | clientN# getent passwd user1 |
| + | </code> | ||
| + | * [[Использование библиотеки PAM#Автоматическое создание домашних каталогов]] | ||
| - | # login | + | !!! Может потребоваться перезагрузка |
| - | gate.corp13.un login: user1 | + | |
| + | * [[Настройка KDC серверов и клиентов#Настройка Kerberos клиента]] только если нужна команда klist :) | ||
| + | <code> | ||
| + | clientN:~# login | ||
| + | clientN login: user1 | ||
| Password: | Password: | ||
| - | $ klist | + | ... |
| + | user1@clientN:~$ ssh gate | ||
| + | </code> | ||
| - | $ ssh gate | + | * Для работы в GUI может потребоваться перезагрузка системы |
| + | |||
| + | ===== Отключение от домена MS AD ===== | ||
| + | <code> | ||
| + | clientN:~# realm leave corpX.un | ||
| + | </code> | ||
| + | |||
| + | ===== Доп ===== | ||
| + | <code> | ||
| + | cache_credentials = True | ||
| </code> | </code> | ||
сервис_sssd.1634320279.txt.gz · Last modified: 2021/10/15 20:51 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
