Log in to Linux using AD credentials without specifying the domain

Kovasky Buezo | Feb 16, 2024 min read

edited on: May 17, 2024

Intro

After creating a trust in FreeIPA, I kept having to write the full domain alongside my username whenever I tried to access the system. These are the steps I took to log in only with my username.

Editing SSSD.conf

Navigate to /etc/sssd/ and open sssd.conf in an elevated text editor. It should look something like

[domain/lin.mydomain.com]
...
[sssd]
services = nss, pam, ssh, sudo
domains = lin.mydomain.com

Before [sssd], add your trusted domain. Something like:

[domain/lin.mydomain.com]
...
use_fully_qualified_names = false

[domain/lin.mydomain.com/win.mydomain.com]
use_fully_qualified_names = false

[sssd]
...

Restart SSSD service

After the modification has taken place, just restart the service with the following command:

sudo systemctl restart sssd

You’re done! Next time you log in, you will only have to specify your username.