Earlier quoted context omitted.
> I know you can, in a very basic sense, such that one can log in. Log in, get group and netgroup membership, apply GPO based access control, access ssh keys, apply sudo rules. > after both setting up the OS, and then configuring the domain join realmd join ad.example.com Just the same as joining the domain on a Windows machine. Add-Computer -Domain ad.example.com > Rather than hand-crafting one Ubuntu server that co…
> preseed files to automate the install, domain join, Genuine question, wouldn't that require a kerberos ticket to work? Or at least some high privilege password that you might not want to keep around your preseed files? Bootstrapping trust is a tricky problem. Most that I've seen tend to go with some custom solution.
We don't broadcast the join password and rotate it every so often but we also don't really care if it gets out.