I am working in a company who works with an Active Directory domain, running on Win Server 2016. I have some Linux servers (RHEL6) AD integrated with Samba. I've read Microsoft will release soon an update Microsoft ADV190023, and I am working with RHEL 7 (8 not approved yet), in order to work with AD controllers only via LDAPS.
I want my Linux client to speak only to DC on target port 636. I tried to look at several forums but I am a little bit lost between the different configs (realmd, krb5, sssd, pam, ldap.conf).
I know there are several ways to join an AD Domain. The last I tried was the realm who configured automatically sssd and krb5. that works successfully but I would like only on 636. moreover, I would need a little refresh on the above, I am wondering what is the difference between join a Linux to AD via the net ads join -U administrator and realm join mydomain.com ?
Is there a way to force my linux client to speak only to DC on port 636 ? Do I need to generate certificates on my Linux client and make it approve by our certification authority ? I already imported the DC certificates + the root CA.
Thanks for your help, Regards