Script to join CentOS machine to AD domain

centos-join-ad.sh

#!/bin/bash

# Script to join CentOS machine to AD domain
#   tested on CentOS 7.8 and Windows 2016
#  Adapted from https://www.linuxtechi.com/integrate-rhel7-centos7-windows-active-directory/
#  $1 is domain, $2 is DNS IP, $3 is domain admin name

cd /etc
# resolv.conf is replaced by network manager if you use DHCP.  Make sure your DHCP server
#   has the correct DNS server
cp resolv.conf resolv.conf.orig
echo "search $1" > resolv.conf
echo "nameserver $2" >> resolv.conf

yum install -y sssd realmd oddjob oddjob-mkhomedir adcli samba-common samba-common-tools krb5-workstation openldap-clients policycoreutils-python
realm join --user=$3 $1
realm list
cd /etc/sssd
cp sssd.conf sssd.conf.orig
sed -i 's/use_fully_qualified_names = .*$/use_fully_qualified_names = False/' sssd.conf
sed -i 's`fallback_homedir = .*$`fallback_homedir = /home/%u`' sssd.conf
systemctl restart sssd
# Either of these assume a domain group sudoers, the second option skips prompting for a password
#echo "%sudoers    ALL=(ALL)       ALL" >> /etc/sudoers
#echo "%sudoers    ALL=(ALL)       NOPASSWD: ALL" >> /etc/sudoers