Switch Over Instructions

DISABLE WAYLAND FOR SUPPORT MESH COMPATIBILITY

1	From the initial boot after installation on the login screen
2	Select your account and go to the bottom right to click the gear icon
3	Select Gnome on Xorg
4	Input password to proceed with login

Open Terminal

sudo -i
nano /etc/gdm/custom.conf

1	Go to the line #WaylandEnable=false and Delete the hashtag '#'
2	To exit: CTRL + 'X'
3	Select 'Y' for yes
4	To save: 'enter' key

sudo dnf update -y
sudo reboot

******************************COMPLETED*******************************

CHANGE COMPUTER NAME

Open Terminal

PC Name example: MYDNS-IT-C12-L.M21.GOV.LOCAL

sudo hostnamectl set-hostname mydns-it-c12-l.m21.gov.local

******************************COMPLETED*******************************

TO JOIN THE DOMAIN

Open Terminal

sudo nano /etc/environment

Add the following line to the file:

http_proxy="http://172.40.4.14:8080/"
https_proxy="http://172.40.4.14:8080/"
ftp_proxy="http://172.40.4.14:8080/"
no_proxy=127.0.0.1,localhost,.localdomain,172.30.0.0/20,172.26.21.0/24
HTTP_PROXY="http://172.40.4.14:8080/"
HTTPS_PROXY="http://172.40.4.14:8080/"
FTP_PROXY="http://172.40.4.14:8080/"
NO_PROXY=127.0.0.1,localhost,.localdomain,172.30.0.0/20,172.26.21.0/24

1	To exit: CTRL + 'X'
2	Select 'Y' for yes
3	To save: 'enter' key
4	Log out and back in again

sudo nano /etc/dnf/dnf.conf

Add the following line to the file:

fastestmirror=1

1	To exit: CTRL + 'X'
2	Select 'Y' for yes
3	To save: 'enter' key

On Fedora

sudo dnf -y install epel-release && sudo dnf -y install realmd sssd oddjob oddjob-mkhomedir adcli samba-common-tools authselect nano curl wget htop btop net-tools git zip unzip tar freeipa-client tmux

On Ubuntu

sudo apt -y install realmd sssd sssd-tools libnss-sss libpam-sss adcli samba-common-bin oddjob oddjob-mkhomedir packagekit tmuxnano curl wget htop btop net-tools git zip unzip tar freeipa-client tmux

Fix DNS

sudo unlink /etc/resolv.conf
sudo nano /etc/resolv.conf

Input the IP Address and the Domain Name into file

search	m21.gov.local
nameserver	172.16.21.161

1	To exit: CTRL + 'X'
2	Select 'Y' for yes
3	To save: 'enter' key

sudo nano /etc/hosts

Input the following lines into file

172.16.21.161	m21.gov.local M21.GOV.LOCAL
172.16.21.16	mydns-0ic16.m21.gov.local mydns-0ic16

1	To exit: CTRL + 'X'
2	Select 'Y' for yes
3	To save: 'enter' key

sudo realm discover M21.GOV.LOCAL
ping -c 4 M21.GOV.LOCAL

To stop ping: CTRL + 'C'

sudo realm join -U ent_username@M21.GOV.LOCAL m21.gov.local -v

Input Ent Account Password

To ensure that it was successful run the realm join code again and you should see "Already joined to this domain"

******************************COMPLETED*******************************

GROUP POLICY CONFLICT RESOLVE (to login without wifi)

Open Terminal

sudo nano /etc/sssd/sssd.conf

Input at the end of the file

ad_gpo_access_control = permissive

Your "/etc/sssd/sssd.conf" should look like this. Make all necessary changes or copy and paste this into the file replacing everything. Can use CTRL + K to cut entire lines until the file is empty.

[sssd]
domains = m21.gov.local
config_file_version = 2
services = nss, pam

[nss]
homedir_substring = /home

[domain/m21.gov.local]
default_shell = /bin/bash
krb5_store_password_if_offline = True
cache_credentials = True
krb5_realm = M21.GOV.LOCAL
realmd_tags = manages-system joined-with-adcli
id_provider = ad
fallback_homedir = /home/%u
ad_domain = m21.gov.local
use_fully_qualified_names = False
ldap_id_mapping = True
access_provider = ad
ad_gpo_access_control = permissive

1	To exit: CTRL + 'X'
2	Select 'Y' for yes
3	To save: 'enter' key

On Fedora

sudo authselect select sssd with-mkhomedir
sudo systemctl restart sssd

On Ubuntu

sudo pam-auth-update --enable mkhomedir
sudo systemctl restart sssd

On CentOS 7

sudo authconfig --enablesssdauth --enablesssd --enablemkhomedir --updateall
sudo systemctl restart sssd

******************************COMPLETED*******************************

TO MAKE AD ACCOUNT A SUDOER

Open Terminal

sudo nano /etc/sudoers.d/domain_admins

1	Input line : firstname.lastname ALL=(ALL) ALL
2	To allow all ICT Staff: %MYDNS\ ICT\ Staff\ SG ALL=(ALL:ALL) ALL
	cn=mydns ict staff sg,ou=security groups_m21,ou=mydns,dc=m21,dc=gov,dc=local
3	To exit: CTRL + 'X'
4	Select 'Y' for yes
5	To save: 'enter' key

******************************COMPLETED*******************************

1	Launch the Files app -> OTHER LOCATIONS -> Bottom of window to enter address
2	Input: smb://172.16.21.16/
3	Toggle on REGISTERED USER
4	Input: YOUR DOMAIN ACCOUNT USERNAME and PASSWORD
5	Domain: M21.GOV.LOCAL or 172.16.21.161

******************************COMPLETED*******************************

TO ADD PRINTER

Open Terminal

HP Printers

dnf search hplip
sudo dnf install hplip hplip-gui -y
hp-setup
hp-setup ‘printer IP Address’

1	Select detected printer
2	Follow next prompt until the end

XEROX Printers

Open Terminal
wget http://download.support.xerox.com/pub/drivers/CQ8580/drivers/linux/pt_BR/XeroxOfficev5Pkg-Linuxx86_64-5.20.661.4684.rpm
sudo dnf -y localinstall XeroxOfficev5Pkg-Linuxx86_64-5.20.661.4684.rpm

NOTE: DO NOT PRINT A TEST PAGE!! Print a regular text document to test

******************************COMPLETED*******************************

TO REPLACE FEDORA LOGO

Download Image and rename as: MYDNS-Logo

1	Go to EXTENSION MANAGER -> SYSTEM EXTENSIONS -> BACKGROUND LOGO
2	Click on the gear icon to get the background settings
3	Go to LOGO -> Filename to attach the MYDNS-Logo.png file -> Filename (dark) to attach the MYDNS-Logo.png file
4	Scroll down to OPTIONS -> Toggle on Show for all backgrounds

******************************COMPLETED*******************************

Adding Certificate File to Local Machine (Fedora)

Browse to 172.16.21.16>fileserver2>General>IT FILES>prx and copy the GORTT.pem file to a folder on the local machine.

Navigate to the location of the certificate file in Terminal (or right click and open from the location)
Move the ceritficate file to the proper location with the following command:
sudo mv GORTT.pem /etc/pki/ca-trust/source/anchors/GORTT.pem
Update trusted certificates with the following command:
sudo update-ca-trust

Adding Certificate File to Local Machine (Ubuntu)

Browse to 172.16.21.16>fileserver2>General>IT FILES>prx and copy the GORTT.pem file to a folder on the local machine.

sudo apt-get install -y ca-certificates

Navigate to the location of the certificate file in Terminal (or right click and open from the location)

openssl x509 -in GORTT.pem -out GORTT.crt

Move the ceritficate file to the proper location with the following command:
```
sudo mv GORTT.crt /usr/local/share/ca-certificates
```
Update trusted certificates with the following command:
```
sudo update-ca-certificates
```

HELPFUL APPS

1	Extension Manager flatpak install flathub com.mattjakeman.ExtensionManager
2	GNOME Tweaks ( sudo dnf install gnome-tweaks )
3	OnlyOffice https://download.onlyoffice.com/install/desktop/editors/linux/onlyoffice-desktopeditors.x86_64.rpm sudo dnf -y localinstall onlyoffice-desktopeditors.x86_64.rpm
4	Element flatpak install flathub im.riot.Riot
5	Google Chome (Fedora) wget https://dl.google.com/linux/direct/google-chrome-stable_current_x86_64.rpm sudo dnf -y localinstall google-chrome-stable_current_x86_64.rpm
6	Google Chrome (Ubuntu) sudo apt install curl software-properties-common apt-transport-https ca-certificates -y curl -fSsL https://dl.google.com/linux/linux_signing_key.pub \| gpg --dearmor \| sudo tee /usr/share/keyrings/google-chrome.gpg > /dev/null echo deb [arch=amd64 signed-by=/usr/share/keyrings/google-chrome.gpg] http://dl.google.com/linux/chrome/deb/ stable main \| sudo tee /etc/apt/sources.list.d/google-chrome.list sudo apt update sudo apt -y install google-chrome-stable

HELPFUL EXTENSIONS

1	Dash to Dock - Displays a dynamic centered Taskbar
2	Dash to Panel - Displays screen width static Taskbar
3	Vitals - displays the PC health at the top right
4	Desktop icons NG (Ding) - display anything saved to desktop
5	Clipboard History - enables clipboard history tool

******************************COMPLETED*******************************