On Tue, Apr 15, 2014 at 10:42:42AM +0000, Longina Przybyszewska wrote:
I think, it is worth to mention the 'msktutil' for joining AD; it is specially useful for installing a batch of computers, Is well documented with a lot of options. It lets to join domain independent from samba, with full control on creating keytab, encryption type, required UPN/SPN names etc . In Ubuntu, package downloadable from mainstream repositories. I found this program more accurate to work with than the realmd - ok - in unstable 14.04 .
I wonder what problems you had with realmd, were any bugs logged?
Using ad provider in multi domain environment and Global Catalog search: -do I still need the section for each subdomain in sssd.conf? Can I configure sssd only for main domain C.EXAMPLE.COM, if all subdomains {A,B,D}.C.EXAMPLE.COM don't differ?
If the subdomans are all part of a single forest, then SSSD should be able to see all the domains and all their users with 1.11.x.
Longina