VAST Cluster Active Directory configuration includes settings pertaining to Active Directory and settings for the underlying LDAP setup.
Run ldap create to configure LDAP connectivity to Active Directory.
Note
If you are going to enable Active Directory domain auto-discovery, specify a single URI in the
--urlparameter. Also note that the auto-discovery feature cannot be enabled right on the initialldap createcommand. It must be enabled with anldap modifycommand after the Active Directory configuration is created (as a last step in this procedure).vcli: admin> ldap create --urls ldap://company-ad.com,ldap://company-ad2.com --port 389 --binddn cn=admin,ou=users,dc=mycompanyad,dc=com --bindpw **** --basedn ou=users,dc=mycompanyad,dc=com --group-searchbase ou=groups,dc=mycompanyad,dc=com --method simple --use-tls --domain-name co-ad.com --posix-templates ADAn LDAP configuration record is created.
Run ldap list to find out the ID of the newly created LDAP configuration record. in this example, the ID is 2.
Run activedirectory create with the LDAP configuration record ID specified on the
--ldap-idparameter:vcli: admin> activedirectory create --ldap-id 2 --machine-account-name co-vcluster --organizational-unit OU=Computers,DC=co-ad,DC=comAn Active Directory configuration record is created.
Run activedirectory list to find out the ID of the Active Directory configuration record. In this example, the ID is 3.
Run activedirectory modify with the Active Directory configuration record ID specified on the
--idparameter. Add the--joinoption to join the Active Directory domain. Specify--admin-usernameand provide a user name of an Active Directory admin user with permission to join the Active Directory domain:vcli admin> activedirectory modify --id 3 --join --admin-username USERConfirm that you wish to proceed:
Are you sure you want to modify the Active directory? [y/N] yEnter the password for the Active Directory admin user when prompted:
Enter admin password: Password: Waiting ... [2022-03-31 10:18:39] waiting for active directory My_AD enabled state to change to True ... / Completed vcli: admin>Run activedirectory list again and verify that the Active Directory configuration state is now
Enabled.If you want to enable Active Directory domain auto-discovery, run ldap modify with the LDAP configuration record ID specified on the
--ldap-idparameter. Add the--enable-auto-discoveryoption and specify the AD template:vcli: admin> ldap modify --ldap-id 2 --enable-auto-discovery --advanced-settings-templates AD