From Fedora Project Wiki

Description

realmd can discover information about a domain server directly

Setup

  1. Make sure you have the required software:
    • realmd 0.14.0
  2. Verify that your Active Directory domain access works, or set a domain up.
  3. Server names (domain controllers) for Active Directory and FreeIPA domains.
    If you don't know the servers for a given domain, you can use DNS to look them up:
    $ host -t SRV _ldap._tcp.ad.example.com

How to test

  1. Perform a discovery command against the active directory server.
    $ realm discover server.ad.example.com
    The output should contain one realm listed, at it should be the name of the domain and not the server that you specified.
    The domain name on the first line, and the also contain the line server-software: active-directory
  2. Perform a discovery command against an IPA domain server.
    $ realm discover server.ipa.example.com
    The output should contain one realm listed, at it should be the name of the domain and not the server that you specified.
    The domain name on the first line, and the also contain the line server-software: freeipa

Expected Results

  1. Using realm discover with servers should discover their appropriate realms, and should contain the appropriate server-software: lines.
    The realm-name: and domain-name: should be as expected for the domain



More: Use IP addresses

Repeat the tests but this time use the IP addresses of the servers instead. Results should be identical.

Troubleshooting

Use the --verbose argument to see details of what's being done during discovery. You can see output like this:

[stef@stef-fedora realmd]$ realm discover --verbose 192.168.12.12
 * Sending MS-CLDAP ping to: 192.168.12.12
 * Performing LDAP DSE lookup on: 192.168.12.12
 * Successfully discovered: domain.example.com
domain.example.com
  type: kerberos
  realm-name: DOMAIN.EXAMPLE.COM
  domain-name: domain.example.com
  configured: kerberos-member
  server-software: active-directory
  client-software: sssd
  required-package: sssd-tools
  required-package: sssd
  required-package: adcli
  required-package: samba-common
  login-formats: DOMAIN\%U
  login-policy: allow-realm-logins