oam/knowledge base/realmd.md

Realmd

On-demand system DBus service allowing callers to configure network authentication and domain membership in a standard way.

Realmd discovers information about the domain or realm automatically, and configures SSSD or Winbind to manage the actual network authentication and user account lookups.

Table of contents

1. TL;DR
2. Further readings

TL;DR

# Scan for domains on the network.
realm discover
realm discover 'domain.example.com'

# Add the system to domains.
realm join 'ad.example.com'
realm join --user='admin' --computer-ou='OU=Special' 'domain.example.com'

# List joined domains.
realm list
realm list --all --name-only

# Remove the system from domains.
realm leave 'ad.example.com'


# Enable access to the system for users within configured domains.
realm permit --all
realm permit 'username'
realm permit 'DOMAIN\User2'
realm permit --withdraw 'user@example.com'

# Restrict access to the system for users within configured domain.
realm deny --all
realm deny 'username'
realm deny 'DOMAIN\User2'

Further readings

• Website
• SSSD
• Winbind
• Integrating Linux systems with Active Directory environments