Network and Storage Protocols

CIFS not joining AD domain

jha71
49,731 Views

Hello,

 

Follow problem with ONTAP 9 and FAS2552

 

cl1::vserver cifs> dns

 

cl1::vserver services name-service dns> show

                                                              Name

Vserver         State     Domains                             Servers

--------------- --------- ----------------------------------- ----------------

cl1             enabled   gym-hksb.local                      10.30.253.1,

                                                              10.30.253.3

nas             enabled   gym-hksb.local                      10.30.253.1,

                                                              10.30.253.3

2 entries were displayed.

 

cl1::vserver services name-service dns> cifs

 

cl1::vserver cifs> create -cifs-server file02 -domain gym-hksb.local -ou CN=Computers

 

In order to create an Active Directory machine account for the CIFS server, you must supply the name and password of a Windows account with sufficient privileges to add computers to the

"CN=Computers" container within the "GYM-HKSB.LOCAL" domain.

 

Enter the user name: administrator

 

Enter the password:

 

Error: Machine account creation procedure failed

  [  1002] Loaded the preliminary configuration.

  [  1730] Created a machine account in the domain

  [  1732] Successfully connected to ip 10.30.253.1, port 445 using

           TCP

  [  1833] Unable to connect to LSA service on dc01.gym-hksb.local

           (Error: RESULT_ERROR_SPINCLIENT_SOCKET_RECEIVE_ERROR)

  [  1835] Successfully connected to ip 10.30.253.3, port 445 using

           TCP

  [  1937] Unable to connect to LSA service on dc02.gym-hksb.local

           (Error: RESULT_ERROR_SPINCLIENT_SOCKET_RECEIVE_ERROR)

  [  1937] No servers available for MS_LSA, vserver: 4, domain:

           gym-hksb.local.

**[  1937] FAILURE: Unable to make a connection

**         (LSA:GYM-HKSB.LOCAL), result: 6940

  [  1937] Could not find Windows SID

           'S-1-5-21-1131981276-2882716370-3949356162-512'

  [  1944] Deleted existing account

           'CN=FILE02,CN=Computers,DC=gym-hksb,DC=local'

 

Error: command failed: Failed to create the Active Directory machine account "FILE02". Reason: SecD Error: no server available.

 

 

 

ping to Domain successful

time zone on Domain and Netapp correct

 

Any idea to solve this?

 

Thanks,

Jürgen

1 ACCEPTED SOLUTION

jha71
49,137 Views

The Problem was DC related. Our config as follow:

 

Hyper-V with DC role. It seems thats not supported. Can anyone confirm this?

 

We created a new DC (VM) and the Domain join was successful without any Issue.  Cat Happy

 

 

View solution in original post

16 REPLIES 16
Public