Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Document URL: 

https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/6.1/html/User_Guide/sect-Red_Hat_Satellite-User_Guide-AD_direct.html

Section Number and Name: 

Procedure 20.5. To Configure Direct AD Integration with GSS-proxy, item 3.

Describe the issue: 

# KRB5_KTNAME=FILE:/etc/gssproxy/http.keytab net ads keytab add HTTP -U administrator -d3 -s /etc/net-keytab.conf
-bash: net: command not found
#

Suggestions for improvement: 

The prerequisites in Procedure 20.4, item 1, should include /usr/bin/net.

Additional information: 

Note that between RHEL 7.1 and RHEL 7.2 (Samba 4.1 vs. 4.2.3), that utility moved from samba-common to samba-common-tools, so installing it via its path seems like the most compatible approach.

Note that due to bug 1271614, the URL we talk about now seems to be

https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/6.1/html/User_Guide/sect-Red_Hat_Satellite-User_Guide-Configuring_External_Authentication-Using_Active_Directory_Directly.html

Also, on RHEL 7.1 samba-common was installed as part of dependencies of the other packages listed in Procedure 21.4 step 1. It no longer seem to be the case on RHEL 7.2.

It seems in RHEL 7.2, there's also bug 1271618 which might prevent full testing of the Direct AD scenario until fix/workaround is found, even if /usr/bin/net is installed.

The proposed fix is to amend the realm join command in Procedure 21.4. step 2 to read

realm join --membership-software=samba -v EXAMPLE.ORG

Both bug 1271608 and bug 1271618 were resolved with RHEL 7.2 release.

No further action is needed here.