2 ms·
> This means it's now a ready-to-go functionality of the OS, Fedora did this few releases ago, as a part of the new-at-the time OOB wizard (you could use AD or
by vetinari 6y ago
> This means it's now a ready-to-go functionality of the OS,
Fedora did this few releases ago, as a part of the new-at-the time OOB wizard (you could use AD or FreeIPA, autodetected). Good to see that Ubuntu does similarly.
> can be done simply without going to read a blog article on how to do it, post-setup.
I never had a problem with setting up AD membership after-the-fact, except for three things that bothered me:
1) you still needed a local (root or sudoer) account in Ubuntu (but not in Fedora),
2) the setup didn't set up domain admins (or other group) neither as sudoers, nor as PolicyKit admins (these GUI prompts for admin password that you get from Gnome Software or Disks, or other privileged apps). These had to be done manually,
3) Files doesn't use AD Kerberos ticket when accessing file shares. It will just asks the user again; kind of defeats the point of Kerberos.
I'm really interested whether these are fixed.