PBIs can easily add domain and then use domain authentication, which is much more convenient than Winbind+samba. This thing originally called Likewise, now change this name, have open source version, function also enough.
#1: Download https://github.com/BeyondTrust/pbis-open/releases #2: Install, the default setting is SH pbis-open-8.5.4.334.linux.x86_64.deb.sh # 3: Add domain domainjoin-cli join test.net admin #4: Possible custom settings/opt/pbis/bin/config homedirtemplate '%h/%d/%u '/opt/pbis/bin/ Config loginshelltemplate/bin/bash/opt/pbis/bin/config homedirumask 077/opt/pbis/bin/config UserDomainPrefix After the test.net# is set, the password is first logged in, but not later. On a domain-joined computer/opt/pbis/bin/config assumedefaultdomain true#/opt/pbis/bin/config requiremembershipof "test.net\\ Linuxuser "# Allow Linuxuser user Group login
Ubuntu uses PBIS certification