pub fn check_join(
tools: &Tools,
keytab: &Path,
realm: Option<&str>,
deep: bool,
) -> JoinStatusExpand description
Gather the join report. Never fails as a whole — each layer degrades into
its *_error field so callers always get a full picture.
deep performs the real credential test (kinit -k into a private
throwaway cache). It needs root (keytab) and a reachable KDC.
realm selects which machine principal to check on a multi-realm host
(case-insensitive); None uses the first principal in the keytab.