<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.gmail-text-notice
{mso-style-name:gmail-text-notice;}
span.gmail-timestamp
{mso-style-name:gmail-timestamp;}
span.gmail-text-info
{mso-style-name:gmail-text-info;}
span.gmail-text-error
{mso-style-name:gmail-text-error;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hi Walid,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Without knowing any specifics of your environment, the below command is what I have used, successfully across multiple clusters at 4.2.x. The binding account you specify needs to be able to add computers to the domain.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">mmuserauth service create --data-access-method file --type ad --servers
<i>some_dc.foo.bar</i> --user-name <i>some_ad_bind_account</i> --idmap-role master --netbios-name
<i>some_ad_computer_name</i> --unixmap-domains "<i>DOMAIN_NETBIOS_NAME</i>(10000-9999999)"
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">10000-9999999 is the acceptable range of UID / GID for AD accounts.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Will <o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black"><gpfsug-discuss-bounces@spectrumscale.org> on behalf of "L.walid (PowerM)" <l.walid@powerm.ma><br>
<b>Reply-To: </b>gpfsug main discussion list <gpfsug-discuss@spectrumscale.org><br>
<b>Date: </b>Sunday, May 19, 2019 at 14:30<br>
<b>To: </b>"gpfsug-discuss@spectrumscale.org" <gpfsug-discuss@spectrumscale.org><br>
<b>Subject: </b>[gpfsug-discuss] Active Directory Authentification<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><b><span style="font-size:10.0pt;color:#C10F3A">Caution: External Sender<o:p></o:p></span></b></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">Hi, <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I'm planning to integrate Active Directory with our Spectrum Scale, but it seems i'm missing out something, please note that i'm on a 2 protocol nodes with only service SMB running Spectrum Scale 5.0.3.0 (latest version). I've tried from
the gui the two ways, connect to Active Directory, and the other to LDAP.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><b><u><span style="font-size:13.5pt;color:blue">Connect to LDAP : </span></u></b><o:p></o:p></p>
</div>
<div>
<div style="margin-bottom:.75pt;overflow:hidden">
<div>
<p class="MsoNormal"><span class="gmail-text-notice"><span style="font-size:10.5pt;font-family:"Courier New";color:#023B5C">mmuserauth service create --data-access-method 'file' --type 'LDAP' --servers '<a href="https://nam03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpowermdomain.powerm.ma%3A389&data=01%7C01%7Cwill.schmied%40stjude.org%7C5f5f690cddd748100dde08d6dc906f79%7C22340fa892264871b677d3b3e377af72%7C0&sdata=93WuDa2hnFQNGoSTzw%2F4pBQE0fIN29v0Fu9Jti8mYFo%3D&reserved=0">powermdomain.powerm.ma:389</a>'
--user-name 'cn=walid,cn=users,dc=powerm,dc=ma' --pwd-file 'auth_pass.txt' --netbios-name 'scaleces' --base-dn 'cn=users,dc=powerm,dc=ma'</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">Either failed to create a samba domain entry on LDAP server if not present or could not read the already existing samba domain entry from
the LDAP server</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">Detailed message:smbldap_search_domain_info: Adding domain info for SCALECES failed with NT_STATUS_UNSUCCESSFUL</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">pdb_init_ldapsam: WARNING: Could not get domain info, nor add one to the domain. We cannot work reliably without it.</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">pdb backend ldapsam:"ldap://<a href="https://nam03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpowermdomain.powerm.ma%3A389&data=01%7C01%7Cwill.schmied%40stjude.org%7C5f5f690cddd748100dde08d6dc906f79%7C22340fa892264871b677d3b3e377af72%7C0&sdata=93WuDa2hnFQNGoSTzw%2F4pBQE0fIN29v0Fu9Jti8mYFo%3D&reserved=0">powermdomain.powerm.ma:389</a>"
did not correctly init (error was NT_STATUS_CANT_ACCESS_DOMAIN_INFO)</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">WARNING: Could not open passdb</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">File authentication configuration failed.</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">mmuserauth service create: Command failed. Examine previous error messages to determine cause.</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">7:26 PM</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">Operation Failed</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal" style="background:#D7181A"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:"Courier New";color:white">7:26 PM</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:white">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="background:#D7181A"><span class="gmail-text-error"><span style="font-size:10.5pt;font-family:"Courier New";color:white">Error: Either failed to create a samba domain entry on LDAP server if not present or could not read the already
existing samba domain entry from the LDAP server</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:white"><br>
<span class="gmail-text-error">Detailed message:smbldap_search_domain_info: Adding domain info for SCALECES failed with NT_STATUS_UNSUCCESSFUL</span><br>
<span class="gmail-text-error">pdb_init_ldapsam: WARNING: Could not get domain info, nor add one to the domain. We cannot work reliably without it.</span><br>
<span class="gmail-text-error">pdb backend ldapsam:"ldap://<a href="https://nam03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpowermdomain.powerm.ma%3A389&data=01%7C01%7Cwill.schmied%40stjude.org%7C5f5f690cddd748100dde08d6dc906f79%7C22340fa892264871b677d3b3e377af72%7C0&sdata=93WuDa2hnFQNGoSTzw%2F4pBQE0fIN29v0Fu9Jti8mYFo%3D&reserved=0">powermdomain.powerm.ma:389</a>"
did not correctly init (error was NT_STATUS_CANT_ACCESS_DOMAIN_INFO)</span><br>
<span class="gmail-text-error">WARNING: Could not open passdb</span><br>
<span class="gmail-text-error">File authentication configuration failed.</span><br>
<span class="gmail-text-error">mmuserauth service create: Command failed. Examine previous error messages to determine cause.</span><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:13.5pt;color:blue">Connect to Active Directory : </span></b><o:p></o:p></p>
</div>
<div>
<div style="margin-bottom:.75pt;overflow:hidden">
<div>
<p class="MsoNormal"><span class="gmail-text-notice"><span style="font-size:10.5pt;font-family:"Courier New";color:#023B5C">mmuserauth service create --data-access-method 'file' --type 'AD' --servers '192.168.56.5' --user-name 'walid' --pwd-file 'auth_pass.txt'
--netbios-name 'scaleces' --idmap-role 'MASTER' --ldapmap-domains '<a href="https://nam03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpowerm.ma&data=01%7C01%7Cwill.schmied%40stjude.org%7C5f5f690cddd748100dde08d6dc906f79%7C22340fa892264871b677d3b3e377af72%7C0&sdata=tJKajnPMlWowHIAHnoxbceVIbE4t19KiLCaohZRwwYQ%3D&reserved=0">powerm.ma</a>(type=stand-alone:ldap_srv=192.168.56.5:range=-9000000000000000-4294967296:usr_dn=cn=users,dc=powerm,dc=ma:grp_dn=cn=users,dc=powerm,dc=ma:bind_dn=cn=walid,cn=users,dc=powerm,dc=ma:bind_dn_pwd=P@ssword)'</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">7:29 PM</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">mmuserauth service create: Invalid parameter passed for --ldapmap-domain</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">7:29 PM</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">mmuserauth service create: Command failed. Examine previous error messages to determine cause.</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">7:29 PM</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span class="gmail-text-info"><span style="font-size:10.5pt;font-family:"Courier New";color:#464646">Operation Failed</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:#464646"><o:p></o:p></span></p>
</div>
</div>
<div style="margin-bottom:.75pt;overflow:hidden">
<p class="MsoNormal" style="background:#D7181A"><span class="gmail-timestamp"><span style="font-size:10.5pt;font-family:"Courier New";color:white">7:29 PM</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:white">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="background:#D7181A"><span class="gmail-text-error"><span style="font-size:10.5pt;font-family:"Courier New";color:white">Error: mmuserauth service create: Invalid parameter passed for --ldapmap-domain</span></span><span style="font-size:10.5pt;font-family:"Courier New";color:white"><br>
<span class="gmail-text-error">mmuserauth service create: Command failed. Examine previous error messages to determine cause.</span><o:p></o:p></span></p>
</div>
</div>
</div>
<p class="MsoNormal">-- <o:p></o:p></p>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">Best regards, <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt"><br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">Walid Largou<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">Senior IT Specialist<br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">Power Maroc<br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">Mobile : <a href="tel:+212%20661%2015%2021%2055" target="_blank"><span style="color:#1155CC">+212 62</span></a>1 31 98 71<br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt"><a href="mailto:y.largou@powerm.ma" target="_blank"><span style="color:black">Email: l.walid@powerm.ma</span></a><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">320 Bd Zertouni 6th Floor, Casablanca, Morocco<br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt"><a href="https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.powerm.ma%2F&data=01%7C01%7Cwill.schmied%40stjude.org%7C5f5f690cddd748100dde08d6dc906f79%7C22340fa892264871b677d3b3e377af72%7C0&sdata=qpwCQkujjr3Sq0wCySyjRMGZrp94mvRQAK0iGlh7DqQ%3D&reserved=0" target="_blank"><span style="color:black">https://www.powerm.ma</span></a><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:9.5pt"><br>
<img border="0" width="118" height="36" style="width:1.2291in;height:.375in" id="_x0000_i1025" src="cid:A8AE246E-9B75-4FE9-AE84-3DC9C8753FEA" alt="cid:A8AE246E-9B75-4FE9-AE84-3DC9C8753FEA"><br>
This message is confidential .Its contents do not constitute a commitment by Power Maroc S.A.R.L except where provided for in a written agreement between you and Power Maroc S.A.R.L. Any authorized disclosure, use or dissemination, either whole or partial,
is prohibited. If you are not the intended recipient of the message, please notify the sender immediately.</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="2"><br>
Email Disclaimer: www.stjude.org/emaildisclaimer<br>
Consultation Disclaimer: www.stjude.org/consultationdisclaimer<br>
</font>
</body>
</html>