SHORTEST WAY WITH SSSD TO ADD CENTOS-7 TO AD DOMAIN

We can use sssd and realm to join Centos-7 with Window AD server.

1. SECURITY DISABLE
    #systemctl disable firewalld
    #systemctl stop firewalld
    #gedit /etc/selinux/config

      SELINUX=disabled                //change the parameter as shown

      save and exit

    #setenforce 0

2.   CONFIGURE THE TIME SERVER
  
   #yum install system-config-date
   #system-config-date
  
    Do the time server settings by removing time servers and add JIIT128DC16 server as time 
    server.
   
    # gedit /etc/ntp/step-tickers

       your-adc-server-name                               //Remove all other servers.//

      Save and exit.


   #systemctl restart ntpdate
   #systemctl enable ntpdate

3. UPDATE SYSTEM AND INSTALL REQUIRED SOFTWARE

         #yum clean all
         #yum update -y
        #yum install krb5-workstation samba-common-tools sssd-ad sssd realmd oddjob oddjob-mkhomedir adcli samba-common openldap-clients policycoreutils-python -y

4.    #realm join --user=administrator adserver.domain.name

5.    #realm list
       #id administrator
       #id administrator@domain.name        //to check that sssd fetching the user details

6.   #vi /etc/sssd/sssd.conf
   use_fully_qualified_names = False
   fallback_homedir = /home/%u

7.  #systemctl restart sssd
     #systemctl enable sssd