Joining Active Directory is currently a manual operation. There is no reason why it couldn’t be done by SaltStack – that is left as an exercise for the reader! Continue reading
You need to keep the time consistent across your machines for a number of reasons – not the least is basic sanity. AD needs the time consistent as otherwise Kerberos won’t work. Standard practice is to use the DC as the time source. Fortunately NTP makes it pretty easy.
This post finishes off the key parts of the AD configuration.
Installs SSSD – the System Security Services Daemon
- name: sssd
Continuing AD with SaltStack; onwards with Samba!
Installs Samba for SMB support for AD
SaltStack provides an easy, fast way to manage systems – from one to thousands. One of its key capabilities is configuration management – “make it look like this” – and this series of posts describes how to implement the AD join described in a previous post. Continue reading