DSfW: Unable to join a NetApp SVM to a domain.

  • 7023054
  • 06-Jun-2018
  • 17-Sep-2018

Environment

Open Enterprise Server 2015 (OES 2015) Linux Support Pack 1
Open Enterprise Server 2018 (OES 2018) Linux
Domain Services for Windows
DSfW

Situation

Attempting to join a NetApp SVM version 9.3P1 or higher fails with the following message:

Error: Machine account creation procedure failed
  [   121] Loaded the preliminary configuration.
  [   451] Created a machine account in the domain
  [   452] Successfully connected to ip x.x.x.x, port 445
           using TCP
  [   456] Unable to connect to LSA service on dsfw01.ourlab.com
  [   456] Successfully connected to ip x.x.x.x, port 445
           using TCP
  [   459] Unable to connect to LSA service on dsfw02.ourlab.com
  [   459] No servers available for MS_LSA, vserver: 3, domain:
           ourlab.com.
**[   459] FAILURE: Unable to make a connection (LSA:OURLAB.COM),
**         result: 6940
  [   460] Could not find Windows SID
           'S-1-5-21-706389590-1342203275-300340892-512'
  [   465] Deleted existing account
           'CN=netapp_server,CN=Computers,DC=ourlab,DC=com'
Error: command failed: Failed to create the Active Directory machine account
       "FILER01". Reason: SecD Error: no server available.

Resolution

In order to join the NetApp SVM to the DSfW domain, SMBv1 needs to be enabled. This can be done by entering the following command:

cifs security modify -vserver <virtual_server_name_here> -smb1-enabled-for-dc-connections true

Cause

DSfW only supports SMBv1 at this time. NetApp version 9.3P1 and later have SMBv1 disabled.