On Tue, Apr 15, 2014 at 10:42:42AM +0000, Longina Przybyszewska wrote:
I think, it is worth to mention the 'msktutil' for joining
AD; it is specially useful for installing a batch of computers,
Is well documented with a lot of options. It lets to join domain independent from samba,
with full control on creating keytab, encryption type, required UPN/SPN names etc . In
Ubuntu, package downloadable from mainstream repositories.
I found this program more accurate to work with than the realmd - ok - in unstable 14.04
.
I wonder what problems you had with realmd, were any bugs logged?
Using ad provider in multi domain environment and Global Catalog search:
-do I still need the section for each subdomain in sssd.conf? Can I configure sssd only
for main domain
C.EXAMPLE.COM,
if all subdomains {A,B,D}.C.EXAMPLE.COM don't differ?
If the subdomans are all part of a single forest, then SSSD should be
able to see all the domains and all their users with 1.11.x.
Longina