How to add a Centos 7 server to a domain?

Question

linux

Hello, I have a task like this. It is necessary to make authentication by domain accounts and register the right to run sudo in sudoers for group members in the 'linux' domain for example. I tried to do something similar for debian, a similar distribution kit according to this instruction Entering ubuntu into a domain, but I have a problem that sudoers does not work correctly for a domain group. That is, when adding a user to the linux group in the domain, it does not appear as such when the getent group 'linux' command is output, and as a result, the user does not have administrator rights on the server. In the winbind cache settings, I set the smallest value, but the infa is not updated correctly.
And the question is, is there some simpler way to enter servers into the linux domain without dancing with tambourines and editing a large number of configs? Or can someone tell me what other way is there besides the samba + winbind bundle, or is it somehow already automated?

Answer 1

In centos and debian, entering a domain is a hit. Suse does best with domains.

Answer 2

The process of adding UNIX to a domain was described back in shaggy 2005. Link times . Link two . These articles were published in the journal "System Administrator" at the appropriate time. The process of adding a specific centos to a domain without samba (in fact, samba is completely not sewn on there) was described in the article "Beyond nss_ldap or else authorization methods", which the "System Administrator" published, in my opinion, in March 2015 th. I can’t give a link - the site from which the previous links were abandoned by the author, there was the last update in 2011: D
But adding centos to the domain will not automatically give domain administrators the rights to administrator rights. All it will do is make domain accounts known on centos.

Answer 3

It is difficult to describe completely the operations for introducing samba into a domain. However, things get a little easier if you bring samba into the domain using samba-tool domain join. Based on the results of this utility, samba will be introduced into the domain and minimal smb.conf and krb.conf will be generated to work with the current domain, which can already be supplemented with parameters as needed.