Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PF v13.1 Only the latest cluster was joined to the domain #8147

Open
JeGoi opened this issue May 14, 2024 · 1 comment
Open

PF v13.1 Only the latest cluster was joined to the domain #8147

JeGoi opened this issue May 14, 2024 · 1 comment
Assignees

Comments

@JeGoi
Copy link
Contributor

JeGoi commented May 14, 2024

Describe the bug
When join a new node the previous node is losing the access to the AD.
This was like a loop, each new node was the only one that get access to the AD.

Temp fix
First be sure that the node as the right name on the AD and is under computers/ (The case is important) And do not move it from there)
After that, use the same password in clear for all nodes to join.
Otherwise, only the latest node will have access to the db.

Expected behavior
Have all nodes connected to the AD successfully.

Additional context
Add any other context about the problem here.

@stgmsa stgmsa self-assigned this May 14, 2024
@stgmsa
Copy link
Contributor

stgmsa commented May 14, 2024

It's because when joining another node, in version 13.1 it uses the "machine password hash" as the original password
e.g.
we have a cluster of 3 node, node A B and C
when joining node A, the machine account password was "A", but when it switch to B, we added an account but changed the password to nt_hash("A").
Thus, here's a temporary solution:

  1. go to each of the cluster member, re-join the machine by the following steps
  2. go to node 1 admin UI (or redirect the web UI from node 1)
  3. policy and access control -> domains -> change the machine account to %h (should be %h by default)
  4. type in the clear text machine account password
  5. type in the Domain Controller 's Admin user and admin password
  6. save settings

then do the same steps on other two nodes. (make sure using the same machine account password
we'll fix this by a patch soon and port it to all impacted releases soon

@JeGoi JeGoi closed this as completed May 14, 2024
@JeGoi JeGoi reopened this May 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants