33 lines
1.3 KiB
Markdown
33 lines
1.3 KiB
Markdown
# Zorin OS
|
||
|
||
### Remotezugang mit xRDP
|
||
|
||
* Originalseite: https://c-nergy.be/blog/?p=19671
|
||
* Das Installationsscript <code>xrdp-installer-1.5.1.zip</code> herunterladen
|
||
* Anleitung in der Datei <code>xRDP Installation Script Version 1.5.1.pdf</code>
|
||
|
||
### Active Directory nach der Installation einrichten
|
||
|
||
```
|
||
sudo apt install sssd-ad sssd-tools realmd adcli
|
||
sudo realm -v discover ad1.example.com
|
||
sudo realm join -v ad1.example.com
|
||
sudo pam-auth-update --enable mkhomedir
|
||
```
|
||
Achtung! Die Datei /etc/sssd/sssd.conf muss root:root gehören und permissions 0600 haben!
|
||
```
|
||
Let’s highlight a few things from this config file:
|
||
|
||
cache_credentials: This allows logins when the AD server is unreachable
|
||
fallback_homedir: The home directory. By default, /home/<user>@<domain>. For example, the AD user john will have a home directory of /home/john@ad1.example.com.
|
||
use_fully_qualified_names: Users will be of the form user@domain, not just user. This should only be changed if you are certain no other domains
|
||
will ever join the AD forest, via one of the several possible trust relationships.
|
||
|
||
```
|
||
Tests:
|
||
```
|
||
getent passwd john@ad1.example.com
|
||
groups john@ad1.example.com
|
||
```
|
||
|
||
Tipp: Die Domain kann auch gekürzt werden: statt z.b. pr@ostrach.tld kann auch nur pr@ostrach verwendet werden. |