p_reichart/zorin-os
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

README.md aktualisiert

Browse Source
This commit is contained in:
Peter Reichart 2024-07-18 09:57:06 +00:00
parent 2a10c73c00
commit f74f28f450
1 changed files with 27 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
README.md
View File

@ -4,3 +4,29 @@
* Das Installationsscript <code>xrdp-installer-1.5.1.zip</code> herunterladen * Das Installationsscript <code>xrdp-installer-1.5.1.zip</code> herunterladen
* Anleitung in der Datei <code>xRDP Installation Script Version 1.5.1.pdf</code> * Anleitung in der Datei <code>xRDP Installation Script Version 1.5.1.pdf</code>
### Active Directory nach der Installation einrichten
```
sudo apt install sssd-ad sssd-tools realmd adcli
sudo realm -v discover ad1.example.com
sudo realm join -v ad1.example.com
sudo pam-auth-update --enable mkhomedir
```
Achtung! Die Datei /etc/sssd/sssd.conf muss root:root gehören und permissions 0600 haben!
```
Let’s highlight a few things from this config file:
cache_credentials: This allows logins when the AD server is unreachable
fallback_homedir: The home directory. By default, /home/<user>@<domain>. For example, the AD user john will have a home directory of /home/john@ad1.example.com.
use_fully_qualified_names: Users will be of the form user@domain, not just user. This should only be changed if you are certain no other domains
will ever join the AD forest, via one of the several possible trust relationships.
```
Tests:
```
getent passwd john@ad1.example.com
groups john@ad1.example.com
```
Tipp: Die Domain kann auch gekürzt werden: statt z.b. pr@ostrach.tld kann auch nur pr@ostrach verwendet werden.