Warn user about realm-domain mismatch in install scripts

If the IPA server is setup with non-matching domain and realm
names, it will not be able to estabilish trust with the Active
Directory.

Adds warnings to the ipa-server-install and warning to the
ipa-adtrust-install (which has to be confirmed).

Man pages for the ipa-server-install and ipa-adtrust-install were
updated with the relevant notes.

https://fedorahosted.org/freeipa/ticket/3924

1 files changed, 11 insertions, 0 deletions

diff --git a/install/tools/ipa-server-install b/install/tools/ipa-server-install
index 028cca097..cf8d3d01b 100644
--- a/install/tools/ipa-server-install
+++ b/install/tools/ipa-server-install
@@ -968,6 +968,17 @@ def main():
                 or reverse_zone is None else reverse_zone)
         print
 
+    # If domain name and realm does not match, IPA server will not be able
+    # to estabilish trust with Active Directory. Print big fat warning.
+
+    realm_not_matching_domain = (domain_name.upper() != realm_name)
+
+    if realm_not_matching_domain:
+        print("WARNING: Realm name does not match the domain name.\n"
+              "You will not be able to estabilish trusts with Active "
+              "Directory unless\nythe realm name of the IPA server matches "
+              "its domain name.\n\n")
+
     if not options.unattended and not user_input("Continue to configure the system with these values?", False):
         sys.exit("Installation aborted")