Permissions required for adding XenServer 7.1 LTSR to Active Directory

[Josh Berry1709154003]

Hi,

 

I am trying to configure RBAC on my new XenServer pools, but am having problems enabling it.

 

For reference, I am doing this via the "Users" tab in XenCentre, and then clicking "Join Domain". It only asks me for the domain, and username and a password.

 

Though trial and error I have come to the conclusion that the user I have been given by my domain administrator is missing some key privileges. They will not give me an account with full domain admin permissions (which works as I got them to test it), so I am trying to work out exactly what permissions the AD user requires.

 

The documentation just says "Enter Active Directory credentials with sufficient privileges to add servers to the domain you want to join", which is not exactly useful. Is there any specific documentation on *exactly* what permissions the user requires within Active Directory?

 

Thanks

Josh

[Alan Lantz]

The users don't need any permissions. You are just authenticating them. At least that is how I read it.

Permissions you assign are permission into XenServer.

 

--Alan--

 

[Josh Berry1709154003]

I think I worded it badly. I mean the AD user that is used to add XenServer into Active Directory ... what does it need to do in AD? Add Computers, update DNS records, etc

[Tobias Kreidl]

I think you need to OK the connection on the AD side by connecting from the XS host with an authentication password, but it's been ages since dealing with that hence I do not recall exactly..