/usr/share/doc/realmd/html/guide-ipa-join.html is in realmd 0.16.3-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 | <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ANSI_X3.4-1968">
<title>Joining a IPA domain</title>
<meta name="generator" content="DocBook XSL Stylesheets V1.79.1">
<link rel="home" href="index.html" title="realmd">
<link rel="up" href="guide-ipa.html" title="Using with IPA">
<link rel="prev" href="guide-ipa-client.html" title="IPA client software">
<link rel="next" href="guide-ipa-permit.html" title="Logins using Domain Accounts">
<link rel="stylesheet" href="style.css" type="text/css">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<table class="navigation" id="top" width="100%" summary="Navigation header" cellpadding="2" cellspacing="2"><tr valign="middle">
<td><a accesskey="p" href="guide-ipa-client.html"><img src="left.png" width="24" height="24" border="0" alt="Prev"></a></td>
<td><a accesskey="u" href="guide-ipa.html"><img src="up.png" width="24" height="24" border="0" alt="Up"></a></td>
<td><a accesskey="h" href="index.html"><img src="home.png" width="24" height="24" border="0" alt="Home"></a></td>
<th width="100%" align="center">realmd</th>
<td><a accesskey="n" href="guide-ipa-permit.html"><img src="right.png" width="24" height="24" border="0" alt="Next"></a></td>
</tr></table>
<div class="section">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
<a name="guide-ipa-join"></a>Joining a IPA domain</h2></div></div></div>
<p>To join a IPA domain with <span class="command"><strong>realmd</strong></span>
you can use the <a class="link" href="realm.html" title="realm"><span class="command"><strong>realm</strong></span></a>
command line tool:</p>
<div class="informalexample"><pre class="screen">
$ <span class="command"><strong>realm join --verbose ipa.example.com</strong></span>
</pre></div>
<p>By specifying the <code class="option">--verbose</code> it's easier
to see what went wrong if the join fails.</p>
<p>Other tools also use <span class="command"><strong>realmd</strong></span> which can
be used to perform the join operation, for example: GNOME
Control Center.</p>
<p>The join operation does the following:</p>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
<li class="listitem"><p>Discovers information about the domain.</p></li>
<li class="listitem"><p>Installs the necessary software to join the domain, such as SSSD.</p></li>
<li class="listitem"><p>Prompts for administrative credentials.</p></li>
<li class="listitem"><p>A computer account in the domain will be created, and or updated.</p></li>
<li class="listitem"><p>A host keytab file at <code class="filename">/etc/krb5.keytab</code> is created.</p></li>
<li class="listitem"><p>Configures the SSSD service, and restarts and enables it as appropriate.</p></li>
<li class="listitem"><p>Enables domain users in <code class="filename">/etc/nsswitch.conf</code></p></li>
</ul></div>
<p>In addition an IPA domain server's host name
or IP address may be specified to join via that domain controller
directly.</p>
<p>After the join operation is complete, domain accounts should
be usable locally, although logins using domain accounts are
not necessarily enabled.</p>
<p>You verify that domain accounts are working with with a
command like this:</p>
<div class="informalexample"><pre class="screen">
$ <span class="command"><strong>getent passwd admin@ipa.example.com</strong></span>
</pre></div>
<p>The join operation will create or update a computer account
in the domain.</p>
</div>
<div class="footer">
<hr>
Generated by GTK-Doc
</div>
</body>
</html>
|