删除本系列文章第一部分中创建的 liveuser 帐户：

# rm -f /fc28/etc/sudoers.d/liveuser

# MY_HOSTNAME=$(</etc/hostname)

# MY_DOMAIN=${MY_HOSTNAME#*.}

# dnf -y --installroot=/fc28 install ntp krb5-workstation sssd

# cp /etc/sssd/sssd.conf /fc28/etc/sssd

# sed -i '/services =/s/$/, pam/' /fc28/etc/sssd/sssd.conf

# sed -i '/id_provider/a ad_maximum_machine_account_password_age = 0' /fc28/etc/sssd/sssd.conf

加入活动目录

# MY_USERNAME=jsmith

# MY_CLIENT_HOSTNAME=$(</fc28/etc/hostname)

# rm -f /fc28/etc/krb5.keytab

# chroot /fc28 /usr/bin/bash --login

# MY_USERNAME=jsmith

# MY_HOSTNAME=$(</etc/hostname)

# MY_DOMAIN=${MY_HOSTNAME#*.}

# MY_REALM=${MY_DOMAIN^^}

# for i in run sys proc dev/shm dev/pts dev; do umount /fc28/$i; done

# dnf install -y --installroot=/fc28 pam_mount

<?xml version="1.0" encoding="utf-8" ?>

<pam_mount>