Join Active Directory domain using SSSD on Ubuntu 14.04

Test connection to Active Directory domain and DC

dig -t SRV
dig -t SRV | grep -A2 "ANSWER SECTION"


Install Kerberos client and SSSD

sudo apt-get install krb5-user 
sudo apt-get install realmd sssd sssd-tools ntp adcli
sudo apt-get install samba-common samba-common-bin samba-libs packagekit samba

Enter your domain (ALL UPPERCASE)


Attempt authenticating with AD (DOMAIN IN UPPERCASE)

kinit xxx@XXX.COM.SG


Configure realmd

sudo nano /etc/realmd.conf
automatic-install = no

default-home = /home/%D/%U
default-shell = /bin/bash

computer-ou = OU=Computers,DC=xxx,DC=com,DC=sg
automatic-id-mapping = yes
fully-qualified-names = no
user-principal = yes
manage-system = no

Join this host to Active Directory domain

sudo realm discover
sudo realm --verbose join -U kim
sudo realm --verbose join -U kim --computer-ou="Computers"


Change access_provider = simple to ad

sudo nano /etc/sssd/sssd.conf 
access_provider = ad
sudo service sssd restart


Allow auto-creation of homedir for users

sudo nano /etc/pam.d/common-session
session required skel=/etc/skel/ umask=0077


Check Active Directory user name resolution



For Graphical login.

sudo nano /etc/lightdm/lightdm.conf


For samba

sudo nano /etc/samba/smb.conf 
workgroup = XXX
client signing = yes
client use spnego = yes
kerberos method = secrets and keytab
realm = XXX.COM.SG
security = ads

1 thought on “Join Active Directory domain using SSSD on Ubuntu 14.04”

Leave a Comment

Your email address will not be published. Required fields are marked *