• rhel-sst-idm-sssd
    • ssg_idm
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • All
    • None

      What were you trying to do that didn't work?

      Develop a feature that will do the prechecks for realm join as outlined in the below KCS article https://access.redhat.com/solutions/5444941

       
      Something like `realm join precheck` this command will check the below points

      • Port connectivity to AD
      • Network/DNS connectivity
      • Test if we can obtain a ticket from AD
      • Check if the quota to join has been exceeded.

      How this feature will help:

      • AD integration is a common and widely used tool/method by cus to integrate linux and AD env in order to use centralized authentication.
      • Before we initiate a join command to integrate linux with AD we would like to check if we are fulfilling all the prerequisites this way we can eliminate the manual checking of prerequisite

         

      Expected results/TEST procedure:

      • Disable any of the required port check if the `realm join precheck` can detect.
      • Disable the connectivity to AD via firewall  check if `realm join precheck` can detect.
      • Check if `realm precheck` can detect exceed MachineAccountQuota  
        • Run Adsiedit.msc as an administrator of the domain. Expand the Domain NC node. This node contains an object that begins with "DC=" and reflects the correct domain name. Right-click this object, and then click Properties.

      In the Select which properties to view box, click Both. In the Select a property to view box, click ms-DS-MachineAccountQuota and set to some value example 2

        • Try to join thrice and check if `realm join precheck` can detect.

       

       

      Actual results

              sbose@redhat.com Sumit Bose
              rhn-support-abroy Abhijit Roy
              Sumit Bose Sumit Bose
              Shridhar Gadekar Shridhar Gadekar
              Votes:
              1 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated: