Ha a realm join -v ...satöbbi... végén azt kapod, hogy:
* Using GSS-SPNEGO for SASL bind
! Couldn't authenticate to active directory: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Configuration file does not specify default realm)
adcli: couldn't connect to pamparam.domain domain: Couldn't authenticate to active directory: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Configuration file does not specify default realm)
! Insufficient permissions to join the domain
akkor...
add ki az
mv /etc/krb5.conf /etc/krb5.conf.orig
parancsot, és utána menni fog...
És persze ne felejtsd el a --os-name=RHEL --os-version=8.3 paramétereket se :)
Ha meg nem megy az sssd-s login, mert offline-nak látja az AD-t, akkor az sssd.conf-ba rakd bele az "ad_server = ..." sort is...