Setup Debian to join domain <lapso.lab>

join-debian-domain-lapso-lab.sh

#!/bin/sh

if [ "$EUID" -ne 0 ]; then
  echo "Erro: Este script precisa ser executado como root (ou usando sudo)." >&2
  exit 1
fi

apt update
apt install -y realmd sssd adcli krb5-user realmd  sssd  sssd-tools  libnss-sss  libpam-sss  adcli  \
               samba-common-bin  oddjob  oddjob-mkhomedir  packagekit  krb5-user

sed -i 's/mange/lapso/g' /etc/hostname /etc/hosts
realm join lapso.lab -U Administrator
pam-auth-update --enable mkhomedir

cat << EOF > /etc/sssd/sssd.conf
[sssd]
domains = lapso.lab
config_file_version = 2
services = nss, pam

[domain/lapso.lab]
default_shell = /bin/zsh
krb5_store_password_if_offline = True
cache_credentials = True
krb5_realm = LAPSO.LAB
realmd_tags = manages-system joined-with-adcli 
id_provider = ad
fallback_homedir = /home/%d/%u
ad_domain = lapso.lab
use_fully_qualified_names = False
ldap_id_mapping = True
access_provider = ad
EOF

systemctl restart sssd.service