Virtualized server systems and methods including domain joining techniques
Examples described herein include virtualized environments including a virtualized file server. Examples of secure domain join processes are described which may facilitate joining a virtualized file server or portions thereof to a domain. In some examples, the secure domain join process itself, and/or an associated file server virtual machine, may have insufficient credentials to write objects into an active directory. The active directory credentials need not be shared with the file server virtual machine. Rather, in some examples, the secure domain join process may provide a user system with a list of actions to be performed using active directory credentials.
1. A method comprising:
requesting a distributed file server including a file server virtual machines (FSVM) join an active directory domain, wherein the file server virtual machine is configured to conduct input/output (I/O) transactions with a storage pool shared by the distributed file server;
receiving an identification of an action to perform using active directory credentials;
performing the actions using the active directory credentials;
initiating a domain join process using regular credentials, wherein the regular credentials are different than the active directory credentials; and
receiving verification of completion of the domain join process including the actions using the regular credentials.
2. The method of claim 1 , wherein the identification of the action to perform comprises identification of entities to create on an active directory.
3. The method of claim 2 , wherein the entities to create comprise account name, account attribute, name server entry, or combinations thereof.
4. The method of claim 1 , wherein the identification of the action to perform is specific to the active directory domain.
5. The method of claim 1 , wherein the domain join process is performed without access to the active directory credentials.
6. The method of claim 1 , wherein the active directory credentials have sufficient permission to create entities on the active directory domain.
7. The method of claim 1 , wherein the identification of the action to perform is provided using domain join configuration data stored by the distributed file server.
8. The method of claim 1 , wherein the verification is performed by the distributed file server using active directory and name server configuration data.
9. The method of claim 1 , wherein the regular credentials have insufficient permission to create entities on the active directory domain.
10. A system comprising:
at least one processor;
computer readable media encoded with instructions which, when executed, cause the system to perform actions comprising:
request a distributed file server including a file server virtual machine (FSVM) join an active directory domain, wherein the file server virtual machine is configured to conduct input/output (I/O) transactions with a storage pool shared by the distributed file server;
receive an identification of an action to perform using active directory credentials;
perform the action using the active directory credentials;
initiate a domain join process using regular credentials, wherein the regular credentials are different from the active directory credentials; and
receive verification of completion of the domain join process including the action using the regular credentials.
11. The system of claim 10 , wherein the active directory credentials associated with permissions different from the regular credentials.
12. The system of claim 10 , wherein the active directory credentials are sufficient for write access to the active directory.
13. The system of claim 10 , wherein the action to perform includes a list of entities to create on the active directory.
14. The systems of claim 13 , wherein the entities to create comprise account name, account attribute, nameserver entry, or combinations thereof.
15. The system of claim 10 , wherein the identification of the action to perform is specific to the active directory domain.
16. The system of claim 10 , wherein the regular credentials have insufficient permission to create entities on the active directory domain.
17. At least one non-transitory computer readable medium encoded with instructions which, when executed, cause a system to perform action comprising:
request a distributed file server including a file server virtual machine (FSVM), to join an active directory domain, wherein the file server virtual machine is configured to conduct input/output (I/O) transactions with a storage pool shared by the distributed file server;
receive an identification of an action to perform using active directory credentials;
perform, using the active directory credentials, the action;
initiate, at the active directory, a domain join process using regular credentials, wherein the regular credentials are different from the active directory credentials; and
receive, at the active directory, verification of completion of the domain join process including the action using the regular credentials.
18. The non-transitory computer readable medium of claim 17 , wherein the domain join process is configured to verify completion of the domain join process including completion of the action to perform.
19. The non-transitory computer readable medium of claim 17 , wherein the action to perform includes a list of entities to create on the active directory.
20. The non-transitory computer readable medium of claim 17 , wherein the active directory; credentials are sufficient for write access to the active directory.
21. The non-transitory computer readable medium of claim 17 , wherein the active directory credentials are associated with permissions different from the regular credentials.
22. The non-transitory computer readable medium of claim 17 , wherein the regular credentials have insufficient permission to create entities on the active directory domain.