-
Story
-
Resolution: Unresolved
-
Minor
-
None
-
rhel-9.3.0
What were you trying to do that didn't work?
Develop a feature that will do the prechecks for realm join as outlined in the below KCS article https://access.redhat.com/solutions/5444941
Something like `realm join precheck` this command will check the below points
- Port connectivity to AD
- Network/DNS connectivity
- Test if we can obtain a ticket from AD
- Check if the quota to join has been exceeded.
How this feature will help:
- AD integration is a common and widely used tool/method by cus to integrate linux and AD env in order to use centralized authentication.
- Before we initiate a join command to integrate linux with AD we would like to check if we are fulfilling all the prerequisites this way we can eliminate the manual checking of prerequisite
Expected results/TEST procedure:
- Disable any of the required port check if the `realm join precheck` can detect.
- Disable the connectivity to AD via firewall check if `realm join precheck` can detect.
- Check if `realm precheck` can detect exceed MachineAccountQuota
- Run Adsiedit.msc as an administrator of the domain. Expand the Domain NC node. This node contains an object that begins with "DC=" and reflects the correct domain name. Right-click this object, and then click Properties.
In the Select which properties to view box, click Both. In the Select a property to view box, click ms-DS-MachineAccountQuota and set to some value example 2
-
- Try to join thrice and check if `realm join precheck` can detect.