mirror of
https://github.com/cockpit-project/cockpit.git
synced 2026-11-03 21:49:50 -09:00
Antora uses a dedicated folder structure which we need to adhere to for it to work as it should. Makefiles has moved to `doc/` root to simplify the approach needed with Antora and AsciiDoctor. Existing bundling of documentation with help of AsciiDoctor works as normal and does not interfere with the directory change. Signed-off-by: Freya Gustavsson <freya@venefilyn.se>
34 lines
1.2 KiB
Text
34 lines
1.2 KiB
Text
[[feature-realmd]]
|
|
= realmd
|
|
|
|
If available on the system, Cockpit uses
|
|
https://www.freedesktop.org/software/realmd/[realmd] and the DBus APIs
|
|
it provides to configure the system's Active Directory or IPA domain
|
|
membership.
|
|
|
|
Not all systems can join all kinds of domains. This depends on the
|
|
availability of the necessary client software.
|
|
|
|
For non root users, realmd controls access to its APIs via
|
|
link:#privileges[Policy Kit] and a user logged into Cockpit will have
|
|
the same permissions as they do from the command line.
|
|
|
|
To perform similar tasks from the command line, use the
|
|
https://www.freedesktop.org/software/realmd/docs/realm.html[realm]
|
|
command:
|
|
|
|
....
|
|
$ realm join example.com
|
|
Password for Administrator:
|
|
....
|
|
|
|
http://www.freedesktop.org/software/realmd/[realmd] sets up
|
|
domain-qualified user names by default, i. e. login user names look like
|
|
"`+user@example.com+`". For using unqualified names (just "`+user+`"),
|
|
set the `+fully-qualified-names+` option in
|
|
https://www.freedesktop.org/software/realmd/docs/realmd-conf.html[/etc/realmd.conf]
|
|
before joining a domain.
|
|
|
|
Cockpit requests an SSL certificate from the IPA server for
|
|
`+cockpit-ws+` with the
|
|
https://www.freeipa.org/page/Certmonger[ipa-getcert] command.
|