How to allow a domain controller to use its users?

Question

Active Directory

The title is a little strange, but I'll explain everything now.
Raised a domain controller on Ubuntu. She is a Linux user and an Active Directory user who lives in completely different universes. For example, it is not possible to connect to linux-dc via ssh using domain login and password or GSSAPI Kerberos. You cannot log in as domain users. Plus, the terminal does not allow you to enter: DOMAIN\User.
How to let domain users go to Ubuntu host?

PS:

В Zentyal это делается одной галочкой.
В интернете есть гайды по включению Linux в домен с возможностью прозрачной аутентификации и гайды по созданию linux-dc. А что было и то, и другое - нету.

Answer 1

To integrate the SSH of a Linux server with AD, you need to configure SSSD and PAM accordingly.
See e.g. www.ohjeah.net/2011/06/09/linux-ssh-pam-ldap-sssd-...