Joining Or Disjoining A Windows Domain - Quantum DXi V-Series Manual

Joining or Disjoining a
Windows Domain
NAS Configuration CLI Commands
CLI command options:
• --deleteall: Deletes all existing NAS shares.
• * --proto: if specified, delete all shares of this type only.
• * --namematch: if specified, only shares whose names match the specified
pattern will be deleted. The wild characters ^ and $ are supported as
follows:
• ^xxx – Matching pattern xxx at the start of names
• xxx$ – Matching pattern xxx at the end of names
Remember to escape $ with a backslash because it is special to the shell. For
example, to delete all shares ending with test in the names, type the
following command: syscli --deleteall share --namematch test\$
• --sure: If specified, the command will execute immediately without asking
for confirmation.
Note: Option marked with (*) means not supported in Web Services.
syscli --join workgroup --name <workgroup name>
syscli --join ads --domain <domain name> [--org <organizational unit>] --
admin <domain user authorized to join> [--password <domain user
password>] [--pdc <primary domain controller>] [--prewin2kdomain
<preWindows 2000 domain name>]
syscli --disjoin workgroup --name <workgroup name>
syscli --disjoin ads [--admin <domain user authorized to join> [--password
<domain user password>]]
This CLI command allows the admin user to join the Samba server to a Windows
workgroup or a Windows Active Directory domain (ADS). If the server is already
in the joined state, the CLI also provides the capability to disjoin the workgroup
or the Active Directory domain.
Joining an Active Directory requires the name or IP address of a primary domain
controller (PDC). However, if the --pdc option is not specified, the CLI will
discover it automatically. The --admin option specifies the name of the domain
user who is authorized to join the active directory domain. This domain user is
the user defined in the ADS domain and is not necessarily the admin user. Thus
the admin must supply this domain user credential in order to join the domain.
The admin can choose not to supply the password on the command line. In this
case the CLI prompts the admin for the password and will not echo his response
for security purposes.
Note that the disjoin ads command no longer requires the user name and
password; it always succeeds even if the username and/or password is wrong.
The only difference is that the computer account in the AD server will be
successfully disabled if both the username and password are correct, and will
remain enabled otherwise. The new behavior of this command is needed to
disjoin ADS for cases where the AD server is changed or the old admin user
account is no longer valid.
CLI command options:
Quantum DXi-Series Command Line Interface (CLI) Guide
6-67081-09 Rev B
February 2014
27