* Anleitung in der Datei <code>xRDP Installation Script Version 1.5.1.pdf</code>
### Active Directory nach der Installation einrichten
```
sudo apt install sssd-ad sssd-tools realmd adcli
sudo realm -v discover ad1.example.com
sudo realm join -v ad1.example.com
sudo pam-auth-update --enable mkhomedir
```
Achtung! Die Datei /etc/sssd/sssd.conf muss root:root gehören und permissions 0600 haben!
```
Let’s highlight a few things from this config file:
cache_credentials: This allows logins when the AD server is unreachable
fallback_homedir: The home directory. By default, /home/<user>@<domain>. For example, the AD user john will have a home directory of /home/john@ad1.example.com.
use_fully_qualified_names: Users will be of the form user@domain, not just user. This should only be changed if you are certain no other domains
will ever join the AD forest, via one of the several possible trust relationships.
```
Tests:
```
getent passwd john@ad1.example.com
groups john@ad1.example.com
```
Tipp: Die Domain kann auch gekürzt werden: statt z.b. pr@ostrach.tld kann auch nur pr@ostrach verwendet werden.
