Active Directory - how to safely remove it?

By the time of this writing, nobody automatically has functional AD support after upgrading to 24.04.3. That’s because of the the bug for which I described a fix in post-1. (Configuration file in the wrong place.)

I guess that answers your question. Whatever channels Ubuntu Pro uses, it can’t be AD because “out of the box” AD is not usable. Likewise, a functional AD support can not be a condition for getting Pro updates because most of us don’t meet it.

I spent some time to figure out how to produce functional VirtualBox VM of 24.04.3, so that I have “guinea pigs” to experiment with:

With that in hand I can safely try out what happens if you uninstall the AD support. That would be reversing this command for installing it on a Ubuntu machine with no AD support at all:

sudo apt -y install realmd libnss-sss libpam-sss sssd sssd-tools adcli samba-common-bin oddjob oddjob-mkhomedir packagekit

(Found here: Join an Ubuntu Machine to Active Directory - This Is How I Spend My Time )

Looks a bit scary to purge/autoremove all of this on a real machine...

As a quick fix, masking realmd and sssd should be enough to prevent any hacks.

3 Likes