first commit

Linux/ActiveDirectory/AD_linux,txt

@@ -0,0 +1,7 @@
+sm233387        ALL=(ALL)       ALL
+%CYBER_ROOT ALL=(ALL:ALL) ALL
+   
+apt install sssd-ad sssd-tools realmd adcli
+pam-auth-update --enable mkhomedir
+realm join -U sm233387adm ct.czech-tv.cz
+

Linux/ActiveDirectory/sssd.conf

@@ -0,0 +1,21 @@
+
+[sssd]
+domains = ct.czech-tv.cz
+config_file_version = 2
+services = nss, pam
+
+[domain/ct.czech-tv.cz]
+default_shell = /bin/bash
+krb5_store_password_if_offline = True
+cache_credentials = True
+krb5_realm = CT.CZECH-TV.CZ
+realmd_tags = manages-system joined-with-adcli 
+id_provider = ad
+fallback_homedir = /home/%u@%d
+ad_domain = ct.czech-tv.cz
+#use_fully_qualified_names = True
+use_fully_qualified_names = False
+ldap_id_mapping = True
+access_provider = simple
+simple_allow_users = sm233387
+simple_allow_groups = APP_ROOT