I need to set up few Linux machines to have users authenticate to them via AD using SSSD, how do you manage the users groups, home directories and shell for the user accounts on AD, is there a way doing it on AD or I have to do it on Linux side and how?
How to manage groups, home directories and shell for Linux users authenticating via AD using SSSD?
linux;users;ldap;active directory
Assuming you have extended the Active Directory users account with POSIXAccount ObjectClass, you can set the loginshell and the homedirectory attribute on the Active Directory User Account.For the Group Membership, the default Unix Group membership is defined by the GIDNumber attribute on the User Account. There should be a corresponding Active Directory Group with this GIDNumber. This group must be extended with the POSIXGroup Object Class.Additional Active Directory groups can be defined with POSIXGroup Object Class with the user in those groups. The user can be in multiple POSIXGroup AD Groups. And these groups will be available on the Linux machines