[Samba] Linux client of the domain - SSSD : authenticating via Kerberos

[steve]

On Fri, 2013-12-20 at 11:26 +0100, Cyril Lalinne wrote:

> I'm trying to allow authentication with sssd via kerberos on the samba4 AD.
> 
> That's why I'm surprise about the " when the client joined the domain"


Ah, so that's what you want to do. Using samba it's easy. Install enough
of samba to get the net command. Usually samba-client is enough:

Remove the myserver$ machine account on the DC.

On the client make a token /etc/samba/smb.conf:

workgroup = your.dc.hostname
realm = SUBDOMAIN.DOMAIN.FR
security = ADS
kerberos method = system keytab

Then it's just:
net ads join -UAdministrator

HTH
Steve