This section explains how to use the qq ad_join command.

Description

Join an Active Directory Domain

Usage

qq ad_join [-h] -d DOMAIN -u USERNAME [-p PASSWORD] [--domain-netbios DOMAIN_NETBIOS] [-o OU] [--disable-search-trusted-domains] [--use-ad-posix-attributes] [--base-dn BASE_DN] [--domain-controllers DOMAIN_CONTROLLERS]

Flags

Flag Name Required Description
-d Yes Fully-qualified name of Active Directory Domain
-u Yes Domain user to perform the operation, e.g., Administrator
-p No Domain password (insecure, visible via ps)
--domain-netbios No NetBIOS name of the domain. By default, the first part of the domain name is used.
-o No Organizational Unit to join to
--disable-search-trusted-domains No Disallows the cluster from using trusted domains for user information. Disabling may prevent the cluster from finding all relevant user and group membership data for authenticated users.
--use-ad-posix-attributes No Use AD POSIX attributes.
--base-dn No When using LDAP POSIX extensions, query using this base DN
--domain-controllers No A single fully qualified domain name (FQDN) or a comma-separated list of FQDNs of the domain controllers (DCs) to use for LDAP queries and Netlogon authentication (for example, dc1.example.com). When you use this flag, the specified FQDN overrides the system's default discovery of DCs for the joined domain. When you specify multiple FQDNs in order of preference, Qumulo Core uses only one DC at a time and falls back to the remaining DCs if one of the FQDNs becomes unreachable.