Ubuntu use Active Directory Certification guide

Active Directory as a Microsoft directory service, it uses some open protocols like KERBEROS,LDAP and SSL. There are several ways to authenticate by using AD, and you can use PAM_KRB5, LDAP, or Winbind.

PAM_KRB5 does not require any configuration.

Pam_krb5
&http://www.aliyun.com/zixun/aggregation/37954.html ">NBSP;
# apt Install krb5-user libpam-krb5

Configure/etc/krb5.conf, for example,

[Logging]
Default = File:/var/log/krb5lib.log

[Libdefaults]
Ticket_lifetime = 24000
Default_realm = example.com
Default_tkt_enctypes = Des3-hmac-sha1 DES-CBC-CRC
Default_tgs_enctypes = Des3-hmac-sha1 DES-CBC-CRC

[Realms]
example.com = {
KDC = windc.example.com
Admin_server = windc.example.com
Default_domain = example.com
}

[Domain_realm]
. example.com = example.com
example.com = example.com

Replace example.com with your Kerberos domain by replacing the windc.example.com in the configuration file with your Windows domain controller's IP or complete domain name, where the domain name must be uppercase.