Joining a Linux box to the domain

In order to participate in an AD style domain, you must have the machine joined to the domain using Administrator credentials. This will create the machine's account within the database, and provide credentials to the system for querying the ldap server.

How to do it…

1. Install Samba, heimdal-clients, and winbind:

   sudo apt-get install winbind
   

2. Populate /etc/samba/smb.conf:

   [global]
       workgroup = EXAMPLE
       realm = ad.example.org
       security = ads
       idmap uid = 10000-20000
       idmap gid = 10000-20000
       winbind enum users = yes
       winbind enum groups = yes
       template homedir = /home/%U
       template shell = /bin/bash
       winbind use default domain = yes

3. Join the system to the domain:

   sudo net ads join -U Administrator
   

4. Configure the system to use winbind for account information in /etc/nsswitch.conf:

   passwd:         compat winbind
   group:          compat winbind

How it works…

Joining a Linux box to an AD domain, you need to utilize winbind that provides a PAM...