Joining an AD domain still fails with Enabling SSD in nsswitch.conf and PAM failed.
.
From the log:
Configured command not found: sssd-enable-service Configured command not found: sssd-restart-service Configured command not found: sssd-enable-longins
This is because the realmd-defaults.conf
nor the realmd-distro.conf
in /usr/lib/realmd
contains those values.
Some distros have a pre-built config with some specific values for those entries: - https://gitlab.freedesktop.org/realmd/realmd/-/blob/master/service/realmd-debian.conf - https://gitlab.freedesktop.org/realmd/realmd/-/blob/master/service/realmd-redhat.conf - https://gitlab.freedesktop.org/realmd/realmd/-/blob/master/service/realmd-suse.conf - https://gitlab.freedesktop.org/realmd/realmd/-/merge_requests/16/diffs
Not sure how to adapt one to Arch.
Edition:
To finish the realm join
operation, follow the SSD online/offline guide: https://wiki.archlinux.org/index.php/LDAP_authentication#Online_and_Offline_Authentication_with_SSSD
This is the last step missing not covered by the realmd package due to the default configuration provided by the upstream.
Pinned Comments