windows AD integration with linux servr client setup

Posted on

I have AD access in windows servers we need to implement same to Linux servers and configure the client.

I have tried SSSD.conf file and configured all its not working

[sssd]
config_file_version = 2
services = nss, pam
domains = domainname

[nss]

filter_groups = root
filter_users = root
reconnection_retries = 3

[pam]

[domain/iac_net]
enumerate = false
ldap_referrals = false
auth_provider = ldap
id_provider = ldap
case_sensitive = False
debug_level = 2
cache_credentials = True
ldap_user_principal = userPrincipalName
ldap_user_object_class = user
ldap_group_object_class = group
ldap_group_name = sAMAccountName
ldap_user_name = sAMAccountName
ldap_search_base = dc=corp,dc=xxxco,dc=com
ldap_user_search_base = dc=corp,dc=xxxco,dc=com
ldap_group_search_base = dc=corp,dc=irvineco,dc=com

ldap_default_bind_dn = CN=s-unixldap,OU=Service,OU=Accts,DC=corp,DC=com

ldap_uri = dap_uri = ldap://test-dev.ldap.corp.xxxco.com:389

ldap_user_home_directory = unixHomeDirectory

ldap_tls_cacertdir = /etc/openldap/cacerts
ldap_tls_reqcert = never
min_id = 100
ldap_schema = rfc2307bis

Fall back

ldap_schema = rfc2307

ldap_id_use_start_tls = False
access_provider = simple
ldap_default_authtok_type = obfuscated_password
ldap_default_authtok =

simple_allow_groups =

simple_deny_groups =

[domain/ADEXAMPLE]
debug_level = 0xFFF0
id_provider = ad
ad_server = test-dev.ldap.corp.xxxxco.com
ad_domain = corp.xxxxco.com
krb5_canonicalize = False

Responses