#!/bin/bash
#
#enable ssh firewall rules
/usr/sbin/esxcfg-firewall -e sshServer
/usr/sbin/esxcfg-firewall -e sshClient
#enable ad auth and specify domain controller to use
esxcfg-auth --enablead --enablekrb5 --addomain dc.corp.com --addc dc.corp.com --krb5realm corp --krb5kdc msad-dc.corp.com --krb5adminserver dc.corp.com
#add domain users as local accounts
useradd Abc123 #tom jones
cp /etc/ssh/sshd_config /etc/ssh/sshd_config.orig
sed 's/PermitRootLogin yes/PermitRootLogin no/g' /etc/ssh/sshd_config | tee /etc/ssh/sshd_config.tmp
mv /etc/ssh/sshd_config.tmp /etc/ssh/sshd_config
service sshd restart
