1
.\" Title: domainjoin-cli
3
.\" Generator: DocBook XSL Stylesheets v1.72.0 <http://docbook.sf.net/>
8
.TH "DOMAINJOIN\-CLI" "8" "03/14/2008" "" ""
9
.\" disable hyphenation
11
.\" disable justification (adjust text to left margin only)
14
domainjoin\-cli \- Join a host to an Active Directory domain
17
\fBdomainjoin\-cli\fR [\fIoptions\fR] join [\fB\-\-ou\fR\ \fIorganizational_unit\fR]
19
[\fB\-\-enable\fR\ \fImodule\fR...] [\fB\-\-disable\fR\ \fImodule\fR...]
21
[\fB\-\-preview\fR] [\fB\-\-advanced\fR] [\fB\-\-details\fR\ \fImodule\fR]
23
\fIdomain\fR \fIusername\fR [\fIpassword\fR]
25
\fBdomainjoin\-cli\fR [\fIoptions\fR] leave
27
[\fB\-\-enable\fR\ \fImodule\fR...] [\fB\-\-disable\fR\ \fImodule\fR...]
29
[\fB\-\-preview\fR] [\fB\-\-advanced\fR] [\fB\-\-details\fR\ \fImodule\fR]
31
[\fIusername\fR\ [\fIpassword\fR]]
33
\fBdomainjoin\-cli\fR [\fIoptions\fR] query
35
\fBdomainjoin\-cli\fR [\fIoptions\fR] fixfqdn
37
\fBdomainjoin\-cli\fR [\fIoptions\fR] setname \fIname\fR
42
is the command\-line version of the
44
AD domain join tool. In a basic invocation,
46
will join the current machine into an AD domain, enable authentication of AD users, and enable group policy if it is available.
48
For systems with sensitive configurations,
50
offers fine\-grained control over modifications to system configuration files that are typically required during a join, such as editing
51
\fI/etc/nsswitch.conf\fR
52
or the system PAM setup.
58
supports the following major modes of operation:
62
Joins the machine to the AD domain
64
and configures AD authentication and group policy (where applicable). This operation requires valid AD credentials for
71
is not specified on the command line,
73
will prompt you for it.
77
supports joining the machine to a specific OU (Organizational Unit) with
78
\fB\-\-ou\fR \fIorganizational_unit\fR.
83
Leaves the currently\-joined AD domain and deconfigures AD authentication and group policy (where applicable).
85
In order to actually disable the machine account in AD, either administrative credentials for
87
or the same credentials originally used to join the machine must be specified as
92
is not specified on the command line,
94
will prompt you for it.
96
If no credentials are specified, the machine will no longer behave as a member of
98
but its machine account will remain enabled in AD.
103
Displays information about the currently\-joined AD domain and OU.
108
Makes local configuration modifications necessary to ensure that the fully\-qualified domain name of the machine is forward\- and backward\-resolvable. This can work around domain join issues on networks with sub\-optimal DNS setups.
113
Changes the hostname of this machine to
114
\fIname\fR. As it is necessary to have a unique, non\-generic name before joining AD, this operation is provided as a convenient way to quickly rename this computer before performing a join.
118
\fB\-\-log\fR \fIfilename\fR
120
Log details about the operation to
123
is ".", logging is directed to the console.
126
\fB\-\-loglevel\fR <error | warning | info | verbose >
128
Specifies the level of logging information which should be written to the log file.
133
Displays brief usage and help information. No operation is performed.
135
.SS "Join and leave options"
137
\fB\-\-ou\fR \fIorganizational_unit\fR
139
Joins the machine to the OU
140
\fIorganizational_unit\fR
141
instead of the default "Computers" OU. The OU to which a machine is joined determines which users will be able to authenticate against the machine and which group policies will be applied. This option has no effect when leaving a domain.
144
\fB\-\-enable\fR \fImodule\fR
146
Explicitly enables the configuration module
148
during the join or leave operation.
151
\fB\-\-disable\fR \fImodule\fR
153
Explicitly disables the configuration module
155
during the join or leave operation.
157
Note that some modules are necessary for the proper operation of
159
while joined to AD. If you attempt to disable such a module,
160
\fBdomainjoin\-cli\fR
161
will refuse to proceed with a join operation.
163
For some modules, it is possible to make the relevant configuration changes by hand;
164
\fBdomainjoin\-cli\fR
165
will inform you of the necessary changes and will proceed with the module disabled if it detects that the changes have been made.
168
\fB\-\-details\fR \fImodule\fR
170
Provide details about module
172
and what specific configuration changes it would perform during a join or leave operation. No actual operation is performed.
177
Provide a summary of what configuration modules would be run during a join or leave operation. No actual operation is performed.
182
Turns on debugging information during leave and join operations and provides more verbose output when using
183
\fB\-\-preview\fR. This is generally only helpful when diagnosing unusual system or network configuration issues.
187
Example invocations of
188
\fBdomainjoin\-cli\fR
189
and their effects follow:
193
$ domainjoin\-cli join sales.my\-company.com Administrator@sales rosebud
198
sales.my\-company.com
203
as the password. This is the typical join scenario.
207
$ domainjoin\-cli \-\-log . leave
211
Leaves the current AD domain without attempting to disable the machine account as no user credentials were specified. Information about the process will be logged to the console at the default logging level.
215
$ domainjoin\-cli join \-\-disable nsswitch sales.my\-company.com Administrator@sales
220
sales.my\-company.com
223
as the username and prompting for the password. If possible, nsswitch configuration will not be modified.
227
$ domainjoin\-cli join \-\-preview sales.my\-company.com Administrator@sales rosebud
231
Show what configuration modules would be run when joining the AD domain
232
sales.my\-company.com.
236
$ domainjoin\-cli join \-\-details pam sales.my\-company.com Administrator@sales rosebud
240
Show what changes would be made to the system by the
242
module when joining the AD domain
243
sales.my\-company.com.
246
This man page is correct for Likewise Open version 4.1.
added
removed
packaging/debian/domainjoin-cli.8
