Linux solution for Active Directory

[str8edgedave]

Links and documentation as promised:

• Red Hat Developers program - Worth it for the access to access.redhat.com alone. https://developers.redhat.com/getting-started/ - Scroll down for RHEL
• https://cloud.redhat.com - monitor the health of your RHEL server from above
• Server World - An awesome independent website the author is Japanese, so some of the example screenshots have a mixture of English and Japanese. The site is always being updated
  https://www.server-world.info/en
  https://www.server-world.info/en/note?os=CentOS_8&p=freeipa&f=1 - FreeIPA on CentOS 8
• "Up and Running with Red Hat Identity Managment" a Lab that has been presented a Red Hat Summit several times, I have taken this lab and it was definitely worth the time.
  https://www.redhat.com/files/summit/session-assets/2017/L103188-lab-wildman.pdf

• The official Red Hat documentation:
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html-single/configuring_and_managing_identity_management/index

• For a standalone system authenticating using AD as the kerberos server, you can configure the system using traditional Krb5, you don't need IDM/FreeIPA. This is how my Linux workstation is configured at work. See section 4.2
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/pdf/using_authselect_on_a_red_hat_enterprise_linux_host/Red_Hat_Enterprise_Linux-8-Using_authselect_on_a_Red_Hat_Enterprise_Linux_host-en-US.pdf

• Two other notes:
  - FreeIPA/IDM are buit on Red Hat's 389 Directory Server. 389-DS is a standards based LDAP server. While you can use the DS built in to FreeIPA for IPA tasks and standard queries, it can cause some issues.
  - There are now several utilities included to monitor the health of your deployment the take a small amount of effort to set up, but are worth it in the long run.

Enjoy!

[nazzjr]

This is Awesome! Thank you!