From Fedora Project Wiki
Description
realmd automatically discovers information about kerberos realms, and determines whether they are Active Directory domains or other types of kerberos realms.
Setup
- Verify that your Active Directory domain access works. If you don't have an Active Directory domain, you can set one up.
- Make sure you have <package>realmd</package> 0.9 or later installed.
$ rpm -q realmd
How to test
- Perform a discovery command against your active directory domain.
$ realm discover ad.example.com
- The output should contain one realm listed. The domain name on the first line, and the also contain the line
type: active-directory
- Perform a discovery command against a generic kerberos domain, such as
nullroute.eu.org
.$ realm discover nullroute.eu.org
- The output should contain one realm listed. The domain name on the first line, and the also contain the line
type: kerberos
- Perform a discovery command against an IPA domain, if you have access to one.
$ realm discover ipa.example.com
- The output should contain one realm listed. The domain name on the first line, and the also contain the line
type: freeipa
Expected Results
The realms should be discoverable, and should contain the appropriate type:
lines.
The complete output for the discovery of an Active Directory domain (which is not configured locally) should look something like:
$ realm discover ad.example.com ad.example.com configured: no server-software: active-directory client-software: sssd type: kerberos realm-name: AD.EXAMPLE.COM domain-name: ad.example.com