Simple shell script to lookup service records in an AD domain on macOS.

adlookups.sh

#!/bin/zsh

zparseopts -E -D -- D:=DOMAIN -domain:=DOMAIN d=DNS -dns=DNS

DOMAIN=$DOMAIN[2]
DNS=$DNS

if [[ -z $DOMAIN ]]; then
    echo "adlookupos.sh: Troubleshoot DNS service records needed for AD."
    echo "\nUsage: adlookups.sh [-d] [-D domain]"
    echo "  -D, --domain        AD domain to examine"
    echo "  -d, --dns           show the system DNS resolvers\n"
    echo "  Example: ./adlookups.sh --domain jamf.net"
    exit 1
fi

echo "\nChecking service records for domain $DOMAIN \n"
echo "Checking for Kerberos records..."
host -t SRV _kerberos._tcp.$DOMAIN 

echo "\nChecking for password server records..."
host -t SRV _kpasswd._tcp.$DOMAIN 

echo "\nChecking for LDAP records..."
host -t SRV _ldap._tcp.$DOMAIN

echo "\nChecking for global catalog records..."
host -t SRV _gc._tcp.$DOMAIN

if [[ -n $DNS ]]; then
    echo "\n"
    scutil --dns
fi

exit 0