Retour
-
Titre
The dNSHostName attribute for the computer object is blank after joining a server -
Description
After joining a server to Active Directory the dNSHostName attribute is not populated.
The following command should show an entry for dNSHostName:
# /opt/quest/bin/vastool -u host/ attrs host/ dNSHostName -
Cause
The most common cause would be due to performing the join using a ‘delegated’ account.
In windows you can have a non-administrator delegated the rights to only join computer objects to Active Directory.
With no other admin rights.
Note that the default delegation does not give rights to set the dNSHostName attribute (and a couple of others, such as operating system) -
Résolution
There are two options to ensure that the dNSHostName attribute is populated:
WORKAROUND 1:
Join using a user with administrator rights.
WORKAROUND 2:
Run the following command as root on the server to set the attribute after the computer object has been created by the join:
# /opt/quest/bin/vastool -u host/ setattrs host/ dNSHostName <server FQDN>
Replacing <server FQDN> with the correct Fully Qualified Domain Name entry for the server.