Implementing NAS on FAS 2620

[NghiaTD]

Dear All!

 I have a question about CIFS server. When I tried to configure NAS on FAS2620, i cannot create CIFS server in SVM fields required with error as below:

Data ONTAP API Failed: Failed to create the Active Directory machine account "VMS". Reason: SecD Error: no server available Details: Error: Machine account creation procedure failed [ 0 ms] Trying to create machine account 'VMS' in 'VMS.NETAPP.LOCAL' for Vserver 'svm-nas1' [ 2005] Failed to connect to 192.168.1.10 for DNS via Source Address 192.168.1.104: Operation timed out **[ 4011] FAILURE: Unable to contact DNS to discover domain ** controllers. [ 4011] Unable to connect to any (0) domain controllers. [ 4011] 'NisDomain' configuration not available [ 4011] NIS configuration not found for Vserver 6 [ 6017] Failed to connect to 192.168.1.10 for DNS via Source Address 192.168.1.104: Operation timed out [ 6017] Unable to contact DNS to discover domain controllers. [ 8021] Failed to connect to 192.168.1.10 for DNS via Source Address 192.168.1.104: Operation timed out [ 8021] Unable to contact DNS to discover domain controllers. [ 10024] Failed to connect to 192.168.1.10 for DNS via Source Address 192.168.1.104: Operation timed out [ 10025] Unable to contact DNS to discover domain controllers. [ 10025] No servers available for MS_LDAP_AD, vserver: 6, domain: VMS.NETAPP.LOCAL. . (Error: 13001)

 Can someone instruction how to pass this field.

Thanks a lot

[TMADOCTHOMAS]

Hi NghiaTD, looks like you can't connect to your domain controller. It also appears you can't connect to your DNS servers. I would check your DNS settings and then verify you've assigned the correct LIFs to the SVM that will be able to connect to your DC.

[NghiaTD]

Hi Thomas!

I've already created Active Directory Domain controller with infor:

vms.netapp.local

Ip: 192.168.1.10

And i've tried join AD from another server and it's ok.

What infor you want to check?

Thanks,

[TMADOCTHOMAS]

Check your DNS configuration in the SVM to see if it's correct.

[NghiaTD]

Hi Thomas!

I've tried with the following informations:

CIFS Setup:

 - NetBios Name: vms

 - Domain: vms.netapp.local

 - Organization unit: CN = Computers

 - User: administrator

 - Pass: ...

SVM DNS Configured Information:

 - DNS: vms.netapp.local

 - Server Name: 192.168.1.10

Server Configured Informations:

 - DNS: vms.netapp.local

 - IP: 192.168.1.10

Please check attach file for more informations

Thanks!

[NghiaTD]

Updated!

Already conntected to AD but created CIFS still failed!

The error returned by ONTAP is "Data ONTAP API Failed: Failed to create the Active Directory machine account "NETAPP-01". Reason: SecD Error: no server available Details: Error: Machine account creation procedure failed [ 25] Loaded the preliminary configuration. [ 48] Created a machine account in the domain [ 48] Successfully connected to ip 192.168.1.10, port 445 using TCP [ 51] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup [ 51] Cluster and Domain Controller times differ by more than the configured clock skew (KRB5KRB_AP_ERR_SKEW) [ 51] Kerberos authentication failed with result: 7537. [ 53] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup [ 53] Cluster and Domain Controller times differ by more than the configured clock skew (KRB5KRB_AP_ERR_SKEW) [ 53] Kerberos authentication failed with result: 7537. [ 53] Unable to connect to LSA service on vms-server-01.vms.netapp.local (Error: RESULT_ERROR_KERBEROS_SKEW) [ 53] No servers available for MS_LSA, vserver: 7, domain: vms.netapp.local. **[ 54] FAILURE: Unable to make a connection ** (LSA:VMS.NETAPP.LOCAL), result: 6940 [ 54] Could not find Windows SID 'S-1-5-21-3139160450-3593412140-2123682809-512' [ 56] Deleted existing account 'CN=NETAPP-01,CN=Computers,DC=vms,DC=netapp,DC=local' . "

[TMADOCTHOMAS · Accepted solution]

I see there's a clock skew error. You won't be able to join if the time is >5 minutes difference on the NetApp vs. the DC. Check your time settings on the NetApp and make sure they point to the same time server as your DC.

[NghiaTD]

Hi Thomas!

I've fixed and it's ok right now. 

Thank for your support.

[TMADOCTHOMAS]

Excellent! Glad to hear it is resolved.

[NghiaTD]

Hi Thomas!

 One more question!

 I have two Server running HA and using 1 database will be located at FAS2620. So, with this case I have to create 2 DNS servers or just need only 1 DNS Server when configure SVM.

  Because follow my understanding is if with 1 DNS server (example Server 1), when svr 1 down, svm will be disconnected with AD and I will cannot connect to FAS from Server 2? Is this right?

So with this case, what I have to do for best optimization?

Regards,