aws / aws/amazon-ssm-agent

feature: Domain Join use SSSD instead of winbindd

Open
#462 16 comments 1 reaction 0 assignees View on GitHub
Dominant language
Go
Stars
1.2k
Forks
357
PR merge metrics
No merged PRs in 30d

Description

I've been evaluating using the seamless domain join with Linux EC2 instances and noticed that it currently relies on winbindd and Samba rather than using SSSD. I would rather use SSSD but haven't seen anyway of doing so short of giving up on the existing seamless domain join functionality and handling it manually.

Any thoughts on making this a supported feature? Both can be done via the `realm` command just changing the `--client-software` option passed to realm when joining the domain. I believe most modern available Linux distributions all have SSSD available,

Contributor guide

Open the contributing guide

Research direction

Start by tracing the seamless domain join flow to the realm command and compare how its --client-software option selects winbindd versus SSSD. Review the existing join behavior and discussion, then define support that preserves the current path while allowing SSSD on supported Linux distributions; done means both client options work through seamless domain join.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, linux
Domain
authentication, infrastructure, operating-systems
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.