nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Unable to log in using AD account on.

Linux1987

security login create -user-or-group-name domain\group -application ssh -authentication-method domain -role admin.

security login create -user-or-group-name domain\group -application ontapi -authentication-method domain -role admin.

security login create -user-or-group-name domain\group -application http -authentication-method domain -role admin.

For the user-or-group name should I use the Admin SVM or Data SVM ?

For vserver active-directory create -vserver should I use Admin SVM or Data SVM ?

Find more posts tagged with

Accepted answers

TMACMD

Not sure but there are likely hundreds of fixes and firmware updates that you are missing. I’d update and try again first

All comments

storageguy

If your user is cluster wide admin, then vserver=cluster_name

If you user is vserver (vsadmin) then vserver=svm_name

Linux1987

Let's say my cluster name is letos, the domain name is netapp.los, and the Active Directory group name is red.

I ran the following commands to create logins for the group:

security login create -user-or-group-name NETAPP\red -vserver letos -application ssh -authentication-method domain -role admin
security login create -user-or-group-name NETAPP\red -vserver letos -application ontapi -authentication-method domain -role admin
security login create -user-or-group-name NETAPP\red -vserver letos -application http -authentication-method domain -role admin

After that, when I run the command:

vserver active-directory create -vserver <TAB>
I don’t see letos or an option that looks like the admin vserver for my cluster. Instead, I see other vsadmin users listed. I'm unsure which one to select for this step. How do I identify the correct vserver to use when joining the domain?

TMACMD

In order to create the Active Directory svm in the admin svm you must be on 9.16 or higher. Anything earlier than 9.16 you must create the Active Directory (or cifs) svm in a data svm and then create a domain tunnel ( security login domain-tunnel create -vserver xxxx)

Linux1987

I'm running NetApp ONTAP version 9.16.

#security login create -vserver letos -user-or-group-name netapp\red -application http -authmethod domain -role admin
#security login create -vserver letos -user-or-group-name netapp\red -application ontapi -authmethod domain -role admin
#security login create -vserver letos -user-or-group-name netapp\red -application ssh -authmethod domain -role admin
#vserver active-directory create -vserver ras -account-name ras-gx -domain NETAPP.los -ou 'OU=NetApp Servers,DC=leos,DC=eos'

After running these commands, I'm unable to log in with my Active Directory account (netapp\red) and receive an error. What could I be missing?

TMACMD

You are mixing vservers

the user accounts are being created in vserver letos and the active-directory svm is being created in ras

Which is the admin svm?

You create the users in the admin svm.
you create the Active Directory in the admin svm

that’s likely your issue

Linux1987

The admin SVM (Cluster) is named letos.

when I try to run: vserver active-directory create -vserver letos it doesn’t work for me that's why I was trying to use ras(Data SVM).

TMACMD

OMG. please please update

9.16.1P6 is and has been out for a little while. Please get off the release candidate code!

Linux1987

Haha, I'll update it first thing in the morning. Does the update fix the issue I was experiencing?

TMACMD

Not sure but there are likely hundreds of fixes and firmware updates that you are missing. I’d update and try again first

Linux1987

Got it. I’ll update to that version and see if it resolves the issue. If it does, I’ll share the solution here for others. Thank you!