{"id":15804,"date":"2024-05-24T06:36:26","date_gmt":"2024-05-24T06:36:26","guid":{"rendered":"https:\/\/www.insentragroup.com\/us\/insights\/uncategorized\/joining-red-hat-systems-directly-to-multiple-active-directories-using-sssd\/"},"modified":"2024-12-13T02:00:04","modified_gmt":"2024-12-13T02:00:04","slug":"joining-red-hat-systems-directly-to-multiple-active-directories-using-sssd","status":"publish","type":"post","link":"https:\/\/www.insentragroup.com\/us\/insights\/geek-speak\/modern-workplace\/joining-red-hat-systems-directly-to-multiple-active-directories-using-sssd\/","title":{"rendered":"Joining Red Hat Systems Directly to Multiple Active Directories using SSSD"},"content":{"rendered":"\n

Did you know you can centrally manage Linux systems and user accounts under an Active Directory domain?\u202f <\/p>\n\n\n\n

For many businesses, Active Directory (AD) is the preferred (if not only) directory service.\u202f <\/p>\n\n\n\n

If you and your team are in charge of a Linux and Windows hybrid environment, centralizing authentication for both systems makes sense.\u202f\u00a0<\/p>\n\n\n\n

In this article, I\u2019ll discuss how to include Linux devices in an Active Directory domain. <\/p>\n\n\n\n

For many years, Microsoft Active Directory<\/a>, also referred to as AD, has dominated the market for enterprise access control. It is used by organizations and people all over the world to centrally manage access to organizational resources. You can control who has access to what by managing users, passwords, and resources like computers. Some of you who are reading this article, especially those who work for large organizations, have already dealt with AD. Typically, the interaction involves logging in to all workstations inside the organization using a single set of login credentials.\u202f<\/p>\n\n\n\n

Each user in Active Directory is uniquely created as an object with a single set of credentials in a central database. Additionally, every computer system is created as an object. With the same set of credentials, every user has automatic access to every workstation. Any necessary account updates are made once at the centralized database. The same set of credentials can be used by staff members to access the printers. To do that, AD can be connected with the printers\u2019 authentication system.\u202f<\/p>\n\n\n\n

It is possible to customize and maintain access to different resources using groups and organizational units. This directory can be expanded to include more information in addition to the phone numbers and email addresses of the personnel.\u202f\u00a0<\/p>\n\n\n\n

AD is a kind of distributed database, which is accessed using Lightweight Directory Access Protocol (LDAP).\u202f <\/p>\n\n\n\n

What happens, though, if your organization leverages AD and you have a few Red Hat systems but do not want to keep track of a distinct set of login credentials for your Linux users? As it turns out \u2013 you can join the Red Hat systems to AD using sssd.\u202f\u00a0<\/p>\n\n\n\n

The System Security Services Daemon (SSSD) is a system service facilitating access to remote directories and authentication mechanisms.\u202f <\/p>\n\n\n\n

An SSSD client, on a local system, can be connected to an identity provider.\u202f <\/p>\n\n\n\n

For instance:\u202f <\/p>\n\n\n\n