CentOS7與Windows AD集成之一CentOS加入Windows域控

首先準備好如下測試機：

1. Windows AD一臺：192.168.137.137
2. CentOS7一臺：192.168.137.130

CentOS7上操做以下：

[root@centos130 ~]# yum install sssd realmd oddjob oddjob-mkhomedir adcli samba-common
[root@centos130 ~]# cat /etc/resolv.conf
search example.com
nameserver 192.168.137.137

[root@centos130 ~]# realm join --user=administrator hadoop.local

Password for administrator:

檢查：

[root@centos130 ~]# realm list
hadoop.local
  type: kerberos
  realm-name: HADOOP.LOCAL
  domain-name: hadoop.local
  configured: kerberos-member
  server-software: active-directory
  client-software: sssd
  required-package: oddjob
  required-package: oddjob-mkhomedir
  required-package: sssd
  required-package: adcli
  required-package: samba-common-tools
  login-formats: %U@hadoop.local
  login-policy: allow-realm-logins

[root@centos130 ~]# id sshuser001@hadoop.local
uid=193601109(sshuser001@hadoop.local) gid=193600513(domain users@hadoop.local) groups=193600513(domain users@hadoop.local)

去Windows AD查看一下，這臺CentOS已經加入到Windows AD裏了。