Symptoms

There may be various reasons for this error.Most notably, the user account used for the domain join might have an ability to create a computer account but not modify it.A customer is unable to perform a domain join operation with any known standard flags.The join command is failing with the following error:Error 13157007728: server_2 : DomainJoin::reuseAccount: Unable set account attribute for compname 'CIFS01' to domain 'DOM.Domain.NET' on Active Directory server 'dc2.dom.domain.net' using CIFS server credential. Distinguished name is 'CN=cifs01,OU=Computers,OU=EMC Celerra,DC=DOM,DC=domain,DC=net'. server_cifs is showing unjoined:CIFS Server 02CIFSSERVER[DOM] RC=160 (local users supported) Full computer name=02cifs01.dom.domain.net realm=DOM.DOMAIN.NET (domain not joined !) Comment='EMC-SNAS:T7.1.83.2' if=02CIFS01 l=10.xxx.xx.x b=10.xxx.xx.xx mac=0:00:00:00:00:00 FQDN=02cifs01.dom.diomain.net (Retrying DNS update...) Password change interval: 43140 minutes

Cause

The computer account was unjoined from the domain, but there are no clear indications on the NAS cmd_log that this was performed on the NAS side.

Resolution

Method for forcing the rejoin operation: 1. Ensure that the account has sufficient rights to perform this operation.2. Check whether computer account exists in Active Directory. - See nas_message instructions in notes.3. Trying to perform a rejoin with options may not work either [-option {reuse|resetserverpasswd|addservice=nfs}] and fail with account does not exist in AD.4. Ensure that the compname matches the netbios name. In one particular scenario , the netbios was set differently historically. In order to force dns domain registration the following param was applied:nasadmin@vnxcs01 ~]$ server_param server_2 -facility cifs -info djEnforceDhnserver_2 :name = djEnforceDhnfacility_name = cifsdefault_value = 1current_value = 1configured_value =user_action = nonechange_effective = immediaterange = (0,1)description = Enforces the setting of the dNSHostName attribute[nasadmin@vnxcs01 ~]$ server_param server_2 -facility cifs -modify djEnforceDhn -value 0server_2 : done[nasadmin@vnxcs01 ~]$ server_param server_2 -facility cifs -info djEnforceDhnserver_2 :name = djEnforceDhnfacility_name = cifsdefault_value = 1current_value = 0configured_value = 0user_action = nonechange_effective = immediaterange = (0,1)description = Enforces the setting of the dNSHostName attribute[nasadmin@vnxcs01 ~]$Retry a simple join again without any special flags.

Support Cases