I do not think this is the right mailing list for "realm". The author has an email address if I recall. Frank On Mon, Mar 20, 2017 at 4:03 PM, <smfrench(a)gmail.com&gt; wrote: > In testing using "realm join" to join an Active Directory domain with two domain controllers, we ran into a problem where "realm join" would fail when one of the two Domain Controllers were down. It looks like in a common case where nslookup shows two entries for myrealm.ad.test but the first one is down (can't ping it), that realmd doesn't try the second one automatically - but rather fails the 'realm join' > _______________________________________________ > sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org > To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org

On Mon, Mar 20, 2017 at 09:31:45PM -0000, smfrench(a)gmail.com wrote: On Fedora and RHEL relmd calls authconfig to do the needed modifications the to PAM, NSS and Kerberos configuration. Coming to your original question, realmd should check which DC returned by DNS is reachable and then call adcli or 'net ads join' with this one. Can you send the 'realm -v' output to see what realmd tried to do? bye, Sumit > _______________________________________________ > sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org > To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org