This topic applies to the page in XInsight for managed systems running QSM 4.2 or later.

The Domain page connects the selected storage system to an external Active Directory (AD) or LDAP domain. After a connection is established, domain users and groups can be used to manage accounts and permissions.

Go to Account > Domain to configure the external domain connection and view its connection status.

Select a Security Mode #

Use Security Mode to select the type of external directory service:

• AD: Connects the storage system to a Microsoft Active Directory domain.
• LDAP: Connects the storage system to an LDAP directory service.

The required settings vary depending on the selected security mode.

Configure DNS for Active Directory #

Before joining an Active Directory domain, configure the DNS settings so that the storage system can resolve the AD domain.

Go to System > Network, select DNS Settings, and set the Primary DNS Server to the IP address of the DNS server used by the Active Directory environment.

If the AD server also provides the DNS service, enter the IP address of the AD server as the Primary DNS Server.

After configuring the DNS settings, return to Account > Domain to continue the domain configuration.

Join an Active Directory Domain #

Select AD as the security mode, and then configure the following settings:

• AD Server: Enter the name or address of the Active Directory server.
• Administrator Account: Enter an account with permission to join the storage system to the domain.
• Administrator Password: Enter the password for the administrator account.
• Netbios Domain: Enter the Microsoft domain name.

After completing the required settings, click Join Domain.

Join an LDAP (Lightweight Directory Access Protocol) Domain #

Select LDAP as the security mode, and then configure the following settings:

• LDAP Server: Enter the IP address of the LDAP server.
• Search Base: Enter the base distinguished name (DN) from which directory searches begin.
• Admin DN: Enter the distinguished name of the account used to access the LDAP directory.
• User DN: Enter the distinguished name of the directory location containing user accounts.
• Group DN: Enter the distinguished name of the directory location containing groups.

After completing the required settings, click Join Domain.

Verify the Domain Connection Status #

After joining an external domain, select External Domain to verify the connection status and review the domain settings in the right pane.

The connection status may display one of the following:

• Connect: The storage system is connected to an external domain.
• Disconnect: The storage system is not currently connected to an external domain.

If the status displays Disconnect, verify the domain server, network connection, credentials, DNS settings, and related system events.

Troubleshoot a Domain Connection #

If the storage system cannot connect to the external domain, verify the following:

• The domain server address and domain name are correct.
• The storage system can communicate with the domain server.
• For dual-controller systems, verify that both controllers can successfully ping the configured AD or LDAP server.
• If the Active Directory environment contains multiple domain controllers (DCs), verify that all domain controllers are reachable. For dual-controller systems, both controllers must be able to reach all domain controllers.
• The configured DNS server can resolve the domain and domain server correctly.
• The administrator account and password are valid.
• The account has permission to join devices to the domain.
• The storage system and domain server use synchronized system time.
• The required network ports are not blocked by a firewall.

After correcting the settings, attempt to join the domain again.