{"id":71,"date":"2025-01-09T21:30:10","date_gmt":"2025-01-09T20:30:10","guid":{"rendered":"https:\/\/www.daminus.fr\/wordpress\/?p=71"},"modified":"2025-01-14T07:43:06","modified_gmt":"2025-01-14T06:43:06","slug":"script-integrer-active-directory","status":"publish","type":"post","link":"https:\/\/www.daminus.fr\/wordpress\/?p=71","title":{"rendered":"Script Int\u00e8grer Active Directory"},"content":{"rendered":"\n

La solution realmd<\/strong><\/h2>\n\n\n\n
\"\"<\/figure>\n\n\n\n

La solution realmd<\/strong> est un outil qui permet de d\u00e9couvrir et de rejoindre des domaines d’identit\u00e9 pour une int\u00e9gration directe avec des services de domaine. Voici quelques points cl\u00e9s sur son fonctionnement2 :<\/p>\n\n\n\n

    \n
  1. D\u00e9couverte des domaines<\/strong> : realmd peut effectuer une recherche pour identifier les domaines disponibles, tels que Microsoft Active Directory ou Red Hat Enterprise Linux Identity Management.<\/li>\n\n\n\n
  2. Configuration des services syst\u00e8me<\/strong> : Il configure les services syst\u00e8me sous-jacents, comme SSSD (System Security Services Daemon) ou Winbind, pour se connecter au domaine.<\/li>\n\n\n\n
  3. Gestion des utilisateurs<\/strong> : realmd permet de contr\u00f4ler quels utilisateurs du domaine peuvent acc\u00e9der aux ressources du syst\u00e8me local.<\/li>\n\n\n\n
  4. Commandes de domaine<\/strong> : Utilisez l’outil de ligne de commande realm<\/code> pour ex\u00e9cuter des commandes telles que d\u00e9couvrir, rejoindre, quitter et lister les domaines.<\/li>\n<\/ol>\n\n\n\n

    En r\u00e9sum\u00e9, realmd simplifie le processus d’int\u00e9gration des syst\u00e8mes Linux avec des domaines d’identit\u00e9, rendant la gestion des utilisateurs et des services plus efficace.<\/p>\n\n\n\n

    #!\/bin\/bash<\/strong><\/strong><\/p>\n\n\n\n

    # Mettre \u00e0  jour les paquets<\/strong><\/strong><\/p>\n\n\n\n

    sudo<\/strong> <\/strong>apt<\/strong> <\/strong>update<\/strong> <\/strong>&&<\/strong> <\/strong>sudo<\/strong> <\/strong>apt<\/strong> <\/strong>upgrade<\/strong> <\/strong>-y<\/strong><\/strong><\/p>\n\n\n\n

    # Installer les paquets n\u00e9cessaires<\/strong><\/strong><\/p>\n\n\n\n

    sudo<\/strong> <\/strong>apt<\/strong> <\/strong>-y<\/strong> <\/strong>install<\/strong> <\/strong>realmd<\/strong> <\/strong>libnss-sss<\/strong> <\/strong>libpam-sss<\/strong> <\/strong>sssd<\/strong> <\/strong>sssd-tools<\/strong> <\/strong>adcli<\/strong> <\/strong>samba-common-bin<\/strong> <\/strong>oddjob<\/strong> <\/strong>oddjob-mkhomedir<\/strong> <\/strong>packagekit<\/strong><\/strong><\/p>\n\n\n\n

    # D\u00e9terminer le nom du domaine Active Directory<\/strong><\/strong><\/p>\n\n\n\n

    read<\/strong> <\/strong>-p<\/strong> <\/strong>\u00ab\u00a0Nom du domaine Active Directory :\u00a0\u00bb<\/strong> <\/strong>AD<\/strong><\/strong><\/p>\n\n\n\n

    # Ajout de la machine \u00e0 Active Directory<\/strong><\/strong><\/p>\n\n\n\n

    sudo<\/strong> <\/strong>realm<\/strong> <\/strong>discover<\/strong> <\/strong>$AD<\/strong><\/strong><\/p>\n\n\n\n

    # D\u00e9finir les permissions du fichier de configuration SSSD<\/strong><\/strong><\/p>\n\n\n\n

    sudo<\/strong> <\/strong>chmod<\/strong> <\/strong>600<\/strong> <\/strong>\/etc\/sssd\/sssd.conf<\/strong><\/strong><\/p>\n\n\n\n

    # Red\u00e9marrer le service SSSD<\/strong><\/strong><\/p>\n\n\n\n

    sudo<\/strong> <\/strong>systemctl<\/strong> <\/strong>restart<\/strong> <\/strong>sssd<\/strong><\/strong><\/p>\n\n\n\n

    # Connection au domaine Active Directory<\/strong><\/strong><\/p>\n\n\n\n

    Sudo<\/strong> <\/strong>realm<\/strong> <\/strong>join<\/strong> <\/strong>-U<\/strong> <\/strong>administrateur<\/strong> <\/strong>$AD<\/strong><\/strong><\/p>\n\n\n\n

    # Cr\u00e9ation dossier utilisateur<\/strong><\/p>\n\n\n\n

    sudo<\/strong> <\/strong>bash<\/strong> <\/strong>-c<\/strong> <\/strong>\u00ab\u00a0cat > \/usr\/share\/pam-configs\/mkhomedir\u00a0\u00bb<\/strong> <\/strong><<<\/strong>EOF<\/strong><\/strong><\/p>\n\n\n\n

    Name:<\/strong> <\/strong>activate<\/strong> <\/strong>mkhomedir<\/strong><\/strong><\/p>\n\n\n\n

    Default:<\/strong> <\/strong>yes<\/strong><\/strong><\/p>\n\n\n\n

    Priority:<\/strong> <\/strong>900<\/strong><\/strong><\/p>\n\n\n\n

    Session-Type:<\/strong> <\/strong>Additional<\/strong><\/strong><\/p>\n\n\n\n

    Session:<\/strong><\/strong><\/p>\n\n\n\n

            <\/strong>required<\/strong>                        <\/strong>pam_mkhomedir.so<\/strong> <\/strong>umask=0022<\/strong> <\/strong>skel=\/etc\/skel<\/strong><\/strong><\/p>\n\n\n\n

    EOF<\/strong><\/p>\n\n\n\n

    # Red\u00e9marrage sssd<\/strong><\/p>\n\n\n\n

    sudo<\/strong> <\/strong>pam-auth-update<\/strong><\/p>\n\n\n\n

    sudo<\/strong> <\/strong>systemctl<\/strong> <\/strong>restart<\/strong> <\/strong>sssd<\/strong><\/strong><\/p>\n\n\n\n

    # V\u00e9rification que l’utilisateur est bien reconnu<\/strong><\/strong><\/p>\n\n\n\n

    id<\/strong> <\/strong>administrateur@\u00a0\u00bb<\/strong>$AD<\/strong>\u00ab\u00a0<\/strong><\/strong><\/p>\n\n\n\n

    # Autorisation de connexion<\/strong><\/strong><\/p>\n\n\n\n

    sudo realm permit administrateur@admin<\/strong><\/p>\n\n\n\n

    <\/p>\n","protected":false},"excerpt":{"rendered":"

    La solution realmd La solution realmd est un outil qui permet de d\u00e9couvrir et de rejoindre des domaines d’identit\u00e9 pour une int\u00e9gration directe avec des services de domaine. Voici quelques points cl\u00e9s sur son fonctionnement2 : En r\u00e9sum\u00e9, realmd simplifie…<\/p>\n","protected":false},"author":1,"featured_media":253,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-71","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/www.daminus.fr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/71","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.daminus.fr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.daminus.fr\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.daminus.fr\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.daminus.fr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=71"}],"version-history":[{"count":7,"href":"https:\/\/www.daminus.fr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/71\/revisions"}],"predecessor-version":[{"id":108,"href":"https:\/\/www.daminus.fr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/71\/revisions\/108"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.daminus.fr\/wordpress\/index.php?rest_route=\/wp\/v2\/media\/253"}],"wp:attachment":[{"href":"https:\/\/www.daminus.fr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=71"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.daminus.fr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=71"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.daminus.fr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=71"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}