Use Realmd Join for RHEL or Rocky Linux 8.x Desktops

To ensure the operation of features such as single sign-on for a RHEL 8.x or Rocky Linux 8.x desktop, use the solution to join the base virtual machine to your Active Directory (AD) domain.

Procedure

1. Configure a fully qualified host name for the base virtual machine (VM).

   For example, if rhel8 is the unqualified host name of the VM and LXD.VDI is the AD domain, run the following command.

   sudo hostnamectl set-hostname rhel8.lxd.vdi
   

2. Verify the network connection with the AD domain, as shown in the following example.

   sudo realm discover -vvv LXD.VDI
   

3. Install the required dependency packages, as shown in the following example.

   sudo dnf install -y sssd adcli samba-common-tools oddjob oddjob-mkhomedir
   

4. Join the AD domain, as shown in the following example.

   sudo realm join -U Administrator LXD.VDI
   

5. Edit the /etc/sssd/sssd.conf so that it resembles the following example. Under the [domain/domain name] section, add a line for ad_gpo_map_interactive and set equal to a +gdm value. You must obtain from Omnissa Support the appropriate value to use for your specific Horizon version ad_gpo_map_interactive = <value>

   [sssd]
   domains = LXD.VDI
   config_file_version = 2
   services = nss, pam
   
   [domain/LXD.VDI]
   ad_domain = LXD.VDI
   krb5_realm = LXD.VDI
   realmd_tags = manages-system joined-with-adcli
   cache_credentials = True
   id_provider = ad
   krb5_store_password_if_offline = True
   default_shell = /bin/bash
   ldap_id_mapping = True
   use_fully_qualified_names = False
   fallback_homedir = /home/%u
   access_provider = ad
   ad_gpo_map_interactive = <value> # Obtain this <value> from Omnissa Support, the appropriate one for your specific Horizon version.
   

6. To ensure that the domain-join takes effect, restart the VM and log back in.

7. Verify that the domain users are configured correctly. The following example shows how to use the id command to return the configuration output from domain user zyc1.

   id zyc1
   
   uid=1084401403(zyc1) gid=1084400513(domain users) groups=1084400513(domain users)
   

8. Using the credentials of a domain user, verify that you can successfully log in to the VM.

   Note: Horizon Agent only supports the X11 display server protocol for RHEL and Rocky Linux 8.x desktops.