Add Debian/Ubuntu Linux Device to Windows Active Directory

#Linux #ActiveDirectory #Enterprise Full steps can be found at -------------------------------------------------------------------- Installing Pre-Requesites and Configuration --------------------------------------------------------------------    01. Log into the Debian device and run the following commands in terminal:          sudo apt update          # set the fully qualified host name          sudo hostnamectl set-hostname          # confirm or add domain controller to DNS entries          sudo nano /etc/          sudo systemctl disable systemd-resolved          sudo systemctl stop systemd-resolved          sudo apt-get upgrade          # install required packages          sudo apt -y install realmd libnss-sss libpam-sss sssd sssd-tools adcli samba-common-bin oddjob oddjob-mkhomedir packagekit          sudo realm discover    02. Paste the following text into /etc/          [libdefaults]          dns_lookup_realm = false          ticket_lifetime = 24h          renew_lifetime = 7d          forwardable = true          rdns = false          default_realm =          default_ccache_name = KEYRING:persistent:%{uid}    03. Press CTRL O, Enter, CTRL X to write the changes to /etc/    04. Continue with the following commands in terminal:          sudo realm join -U i12bretro          # check the configured value of the domain          sudo realm list    05. Paste the following lines into terminal together to enable automatically creating user home directories:          sudo bash -c “cat ≫ /usr/share/pam-configs/mkhomedir“ ≪≪EOF Name: activate mkhomedir          Default: yes          Priority: 900          Session-Type: Additional          Session:          required umask=0022 skel=/etc/skel          EOF    06. Continue with the following commands in terminal:          sudo pam-auth-update    07. Arrow down to activate mkhomedir ≫ Press spacebar to select ≫ Press Enter to confirm    08. Run one or more of the following commands in terminal to grant active directory users or groups access to log into the linux machine:          # add specific user(s )          realm permit user1@ user2@          # add specific group(s)          sudo realm permit -g ’LinuxUsers’ ’Linux Admins’          # add everyone          sudo realm permit --all          # deny everyone          sudo realm deny --all    09. Similarly, run the following command to edit /etc/sudoers.d/domain_admins to add specific users or groups to the sudoers file:          sudo nano /etc/sudoers.d/domain_admins          # add specific user(s )          user1@ ALL=(ALL) ALL          user2@ ALL=(ALL) ALL          # add specific group(s)          %LinuxUsers@ ALL=(ALL) ALL          %Linux\ Admins@ ALL=(ALL) ALL    10. Press CTRL O, Enter, CTRL X to write the changes to /etc/sudoers.d/domain_admins   -------------------------------------------------------------------- Testing Active Directory Authentication --------------------------------------------------------------------    01. Attempt to login to the Debian device either into a desktop environment or via SSH. The user name must be formatted like user1@ and the password will be the active directory password   Additonal reading:     ### Connect with me and others ### ★ Discord: ★ Reddit: ★ Twitter: