Sun Storage 7000 Unified Storage System: Unable to join Active Directory domain

Asset ID:	1-72-1494771.1
Update Date:	2016-09-28
Keywords:

Solution Type Problem Resolution Sure

Solution 1494771.1 : Sun Storage 7000 Unified Storage System: Unable to join Active Directory domain - port blocked by firewall

Applies to:

Sun Storage 7110 Unified Storage System - Version All Versions and later
Sun Storage 7210 Unified Storage System - Version All Versions and later
Sun Storage 7410 Unified Storage System - Version All Versions and later
Sun Storage 7310 Unified Storage System - Version All Versions and later
Sun ZFS Storage 7120 - Version All Versions and later
7000 Appliance OS (Fishworks)

Symptoms

System fails to join the Active Directory domain.

Cause

A snoop of all paths to the Domain Controllers showed the Domain Controller that the system was communicating with was not responding to kpasswd requests.

The domain controller should provide a response - positive or negative - no response indicates either the message was not transmitted to the Domain Controller or the response is not received by the appliance due to a network path issue.

In this case, we found ports required to complete the join were blocked by the firewall.

Another possible cause for this problem is a firewall that has udp fragments blocked. If the kpasswd request is two large to fit in a single frame, it will be sent in fragments. A firewall configured to block udp fragments will prevent the kpasswd request from reaching the KDC.

Solution

Check the network path between the appliance and the domain controller to insure no required ports are blocked by a firewall.

The ports required to join an Active Directory domain can be found in MSKB Document 179442.

References

<NOTE:1408716.1> - Sun Storage 7000 Unified Storage System: How to Troubleshoot SMB (CIFS) Problems

Attachments

This solution has no attachment