<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
        {mso-style-name:msonormal;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
span.gmail-text-notice
        {mso-style-name:gmail-text-notice;}
span.gmail-timestamp
        {mso-style-name:gmail-timestamp;}
span.gmail-text-info
        {mso-style-name:gmail-text-info;}
span.gmail-text-error
        {mso-style-name:gmail-text-error;}
span.EmailStyle22
        {mso-style-type:personal-reply;
        font-family:"Calibri",sans-serif;
        color:windowtext;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hi Walid,<o:p></o:p></p>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p class="MsoNormal">Without knowing any specifics of your environment, the below command is what I have used, successfully across multiple clusters at 4.2.x.&nbsp; The binding account you specify needs to be able to add computers to the domain.<o:p></o:p></p>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p class="MsoNormal">mmuserauth service create --data-access-method file --type ad --servers
<i>some_dc.foo.bar</i> --user-name <i>some_ad_bind_account</i> --idmap-role master --netbios-name
<i>some_ad_computer_name</i> --unixmap-domains &quot;<i>DOMAIN_NETBIOS_NAME</i>(10000-9999999)&quot;&nbsp;
<o:p></o:p></p>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p class="MsoNormal">10000-9999999 is the acceptable range of UID / GID for AD accounts.<o:p></o:p></p>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt">&nbsp;<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">&nbsp;<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Will&nbsp;<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black">&lt;gpfsug-discuss-bounces@spectrumscale.org&gt; on behalf of &quot;L.walid (PowerM)&quot; &lt;l.walid@powerm.ma&gt;<br>
<b>Reply-To: </b>gpfsug main discussion list &lt;gpfsug-discuss@spectrumscale.org&gt;<br>
<b>Date: </b>Sunday, May 19, 2019 at 14:30<br>
<b>To: </b>&quot;gpfsug-discuss@spectrumscale.org&quot; &lt;gpfsug-discuss@spectrumscale.org&gt;<br>
<b>Subject: </b>[gpfsug-discuss] Active Directory Authentification<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><b><span style="font-size:10.0pt;color:#C10F3A">Caution: External Sender<o:p></o:p></span></b></p>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<p class="MsoNormal">Hi, <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class="MsoNormal">I'm planning to integrate Active Directory with our Spectrum Scale, but it seems i'm missing out something, please note that i'm on a 2 protocol nodes with only service SMB running Spectrum Scale 5.0.3.0 (latest version). I've tried from
 the gui the two ways, connect to Active Directory, and the other to LDAP.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class="MsoNormal"><b><u><span style="font-size:13.5pt;color:blue">Connect to LDAP :&nbsp;</span></u></b><o:p></o:p></p>
</div>
<div>
<div style="margin-bottom:.75pt;overflow:hidden">
<div>
<p class="MsoNormal"><span class="gmail-text-notice"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#023B5C">mmuserauth service create --data-access-method 'file' --type 'LDAP' --servers '<a href="https://nam03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpowermdomain.powerm.ma%3A389&amp;data=01%7C01%7Cwill.schmied%40stjude.org%7C5f5f690cddd748100dde08d6dc906f79%7C22340fa892264871b677d3b3e377af72%7C0&amp;sdata=93WuDa2hnFQNGoSTzw%2F4pBQE0fIN29v0Fu9Jti8mYFo%3D&amp;reserved=0">powermdomain.powerm.ma:389</a>'
 --user-name 'cn=walid,cn=users,dc=powerm,dc=ma' --pwd-file 'auth_pass.txt' --netbios-name 'scaleces' --base-dn 'cn=users,dc=powerm,dc=ma'</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">Either failed to create a samba domain entry on LDAP server if not present or could not read the already existing samba domain entry from
 the LDAP server</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">Detailed message:smbldap_search_domain_info: Adding domain info for SCALECES failed with NT_STATUS_UNSUCCESSFUL</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">pdb_init_ldapsam: WARNING: Could not get domain info, nor add one to the domain. We cannot work reliably without it.</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">pdb backend ldapsam:&quot;ldap://<a href="https://nam03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpowermdomain.powerm.ma%3A389&amp;data=01%7C01%7Cwill.schmied%40stjude.org%7C5f5f690cddd748100dde08d6dc906f79%7C22340fa892264871b677d3b3e377af72%7C0&amp;sdata=93WuDa2hnFQNGoSTzw%2F4pBQE0fIN29v0Fu9Jti8mYFo%3D&amp;reserved=0">powermdomain.powerm.ma:389</a>&quot;
 did not correctly init (error was NT_STATUS_CANT_ACCESS_DOMAIN_INFO)</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">WARNING: Could not open passdb</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">File authentication configuration failed.</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">mmuserauth service create: Command failed. Examine previous error messages to determine cause.</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">Operation Failed</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal" style="background:#D7181A"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:white">7:26 PM</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:white">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="background:#D7181A"><span class="gmail-text-error"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:white">Error: Either failed to create a samba domain entry on LDAP server if not present or could not read the already
 existing samba domain entry from the LDAP server</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:white"><br>
<span class="gmail-text-error">Detailed message:smbldap_search_domain_info: Adding domain info for SCALECES failed with NT_STATUS_UNSUCCESSFUL</span><br>
<span class="gmail-text-error">pdb_init_ldapsam: WARNING: Could not get domain info, nor add one to the domain. We cannot work reliably without it.</span><br>
<span class="gmail-text-error">pdb backend ldapsam:&quot;ldap://<a href="https://nam03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpowermdomain.powerm.ma%3A389&amp;data=01%7C01%7Cwill.schmied%40stjude.org%7C5f5f690cddd748100dde08d6dc906f79%7C22340fa892264871b677d3b3e377af72%7C0&amp;sdata=93WuDa2hnFQNGoSTzw%2F4pBQE0fIN29v0Fu9Jti8mYFo%3D&amp;reserved=0">powermdomain.powerm.ma:389</a>&quot;
 did not correctly init (error was NT_STATUS_CANT_ACCESS_DOMAIN_INFO)</span><br>
<span class="gmail-text-error">WARNING: Could not open passdb</span><br>
<span class="gmail-text-error">File authentication configuration failed.</span><br>
<span class="gmail-text-error">mmuserauth service create: Command failed. Examine previous error messages to determine cause.</span><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:13.5pt;color:blue">Connect to Active Directory :&nbsp;</span></b><o:p></o:p></p>
</div>
<div>
<div style="margin-bottom:.75pt;overflow:hidden">
<div>
<p class="MsoNormal"><span class="gmail-text-notice"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#023B5C">mmuserauth service create --data-access-method 'file' --type 'AD' --servers '192.168.56.5' --user-name 'walid' --pwd-file 'auth_pass.txt'
 --netbios-name 'scaleces' --idmap-role 'MASTER' --ldapmap-domains '<a href="https://nam03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpowerm.ma&amp;data=01%7C01%7Cwill.schmied%40stjude.org%7C5f5f690cddd748100dde08d6dc906f79%7C22340fa892264871b677d3b3e377af72%7C0&amp;sdata=tJKajnPMlWowHIAHnoxbceVIbE4t19KiLCaohZRwwYQ%3D&amp;reserved=0">powerm.ma</a>(type=stand-alone:ldap_srv=192.168.56.5:range=-9000000000000000-4294967296:usr_dn=cn=users,dc=powerm,dc=ma:grp_dn=cn=users,dc=powerm,dc=ma:bind_dn=cn=walid,cn=users,dc=powerm,dc=ma:bind_dn_pwd=P@ssword)'</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">7:29 PM</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">mmuserauth service create: Invalid parameter passed for --ldapmap-domain</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">7:29 PM</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">mmuserauth service create: Command failed. Examine previous error messages to determine cause.</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">7:29 PM</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646">Operation Failed</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal" style="background:#D7181A"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:white">7:29 PM</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:white">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="background:#D7181A"><span class="gmail-text-error"><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:white">Error: mmuserauth service create: Invalid parameter passed for --ldapmap-domain</span></span><span style="font-size:10.5pt;font-family:&quot;Courier New&quot;;color:white"><br>
<span class="gmail-text-error">mmuserauth service create: Command failed. Examine previous error messages to determine cause.</span><o:p></o:p></span></p>
</div>
</div>
</div>
<p class="MsoNormal">-- <o:p></o:p></p>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">Best regards,&nbsp;<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt"><br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">Walid Largou<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">Senior IT Specialist<br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">Power Maroc<br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">Mobile :&nbsp;<a href="tel:&#43;212%20661%2015%2021%2055" target="_blank"><span style="color:#1155CC">&#43;212 62</span></a>1 31 98 71<br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt"><a href="mailto:y.largou@powerm.ma" target="_blank"><span style="color:black">Email: l.walid@powerm.ma</span></a><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">320 Bd Zertouni 6th Floor, Casablanca, Morocco<br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt"><a href="https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.powerm.ma%2F&amp;data=01%7C01%7Cwill.schmied%40stjude.org%7C5f5f690cddd748100dde08d6dc906f79%7C22340fa892264871b677d3b3e377af72%7C0&amp;sdata=qpwCQkujjr3Sq0wCySyjRMGZrp94mvRQAK0iGlh7DqQ%3D&amp;reserved=0" target="_blank"><span style="color:black">https://www.powerm.ma</span></a><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:9.5pt"><br>
<img border="0" width="118" height="36" style="width:1.2291in;height:.375in" id="_x0000_i1025" src="cid:A8AE246E-9B75-4FE9-AE84-3DC9C8753FEA" alt="cid:A8AE246E-9B75-4FE9-AE84-3DC9C8753FEA"><br>
This message is confidential .Its contents do not constitute&nbsp;a commitment by Power Maroc S.A.R.L except where&nbsp;provided for in a written agreement between you and&nbsp;Power Maroc S.A.R.L. Any authorized disclosure, use or dissemination, either whole or partial,
 is prohibited. If you&nbsp;are not the intended recipient of the message, please notify&nbsp;the sender immediately.</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="2"><br>
Email Disclaimer: www.stjude.org/emaildisclaimer<br>
Consultation Disclaimer: www.stjude.org/consultationdisclaimer<br>
</font>
</body>
</html>