Red Hat Summit Red Hat SummitSupportConsoleDevelopersStart a trialContact

Chapter 9. Querying domain information using SSSD

The sssctl utility retrieves domain data from the System Security Services Daemon (SSSD), covering Identity Management and trusted Active Directory realms. Use this tool to audit available domains and verify connection status for troubleshooting.

9.1. Listing domains using sssctl
Copy link

The sssctl domain-list command outputs all detected identity domains, including local files and trusted external directories. This list helps you to verify the domain topology and ensure complete visibility of identity sources.

Note

The status might not be available immediately. If the domain is not visible, repeat the command.

Prerequisites

  • You must be logged in with administrator privileges.

Procedure

  1. Optional: To display help for the sssctl command, enter: 

    [user@client1 ~]$ sssctl --help
...

  2. To display a list of available domains, enter: 

    [root@client1 ~]# sssctl domain-list
     
    implicit_files
idm.example.com
ad.example.com
sub1.ad.example.com

    The list includes domains in the cross-forest trust between Active Directory and Identity Management.

9.2. Verifying the domain status using sssctl
Copy link

The sssctl domain-status command checks the real-time connectivity of a specific domain. This utility confirms server reachability and online status, assisting you in diagnosing network or configuration failures.

Note

The status might not be available immediately. If the domain is not visible, repeat the command.

Prerequisites

  • You must be logged in with administrator privileges.

Procedure

  1. Optional: To display help for the sssctl command, enter: 

    [user@client1 ~]$ sssctl --help

  2. To display user data for a particular domain, replace <domain_name> with the actual domain name and enter: 

    [root@client1 ~]# sssctl domain-status <domain_name>

    Example output for the domain idm.example.com 

    Online status: Online

Active servers:
IPA: server.idm.example.com

Discovered IPA servers:
- server.idm.example.com

    The domain idm.example.com is online and visible from the client where you applied the command.

    If the domain is not available, the result is: 

    [root@client1 ~]# sssctl domain-status <domain_name>
     
    Unable to get online status
Red Hat logoGithubredditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Theme

© 2026 Red HatBack to top