AD Service throws an error

[phillxnet (Philip Guyton)]

@maz First off; welcome to the Rockstor community forum.

I’m not up much on AD stuff myself (although @Flyer is) but I can hopefully provide a few pointers. Bear in mind that I may have this wrong though but these doc pointers and history may help anyway.

Rockstor currently uses the Winbind approach I believe:

How Rockstor used to work with Active Directory

This is the old implementation which is not valid as of 3.8-9. It’s retained here for reference. For current implementation, please see this post. This is a wikified post documenting the internal implementation details of AD configuration in Rockstor. Please feel free to update/edit this post to make it better. This will serve as our reference document to help developers make Rockstor work flawlessly with AD. ##User story and implementation summary User should be able to add their Rockstor sy…

the above actually states how it used to work as then for a bit the AD system was switched to sssd which I personally was quite exited about:

Rockstor Active Directory(AD) integration implementation

This is a wikified post documenting the implementation of Active Directory integration in Rockstor. It was done differently before version 3.8-9 using winbind as described here. This new approach uses sssd and is a much simpler and recommended one as per RHEL/CentOS documentation. ##User story and implementation summary User should be able to add their Rockstor system to their Active Directory domain controller. We use realmd, which provides and simple way to discover and join Active Directory…

this was of major interest to me and I became much more interested in this area myself. However soon there after (3.8-11.15) I believe this subsystem was reverted back to using windbind, so I again have little interest myself as I think the sssd route is really the one we should be using but as you can see from @suman’s comment upon having to revert back there is a will to return to the sssd approach:

Dev log for upcoming 3.8-12 [Latest: 3.8-11.18]

3.8-11.15 is now available! This is a special one where we fixed two issues that have been painful to many users. AD integration has been broken in a few different ways with our sssd approach. It looks great in theory and I am open to bringing it back again, but many users ran into issues including Rockstor dropping off the domain, id mapping issues and windows ACLs. So, we are bringing back the winbind approach. We’ve tested it quite a bit and encourage everyone to do the same. It has bee…

So ultimately at the time it was the best decision from a pragmatic point of view but I am myself only interested in working on sssd in this area so I was hoping at one point to be able to help with bringing back the sssd approach (possibly along side the winbind approach as an either/or type thing); it was quite a nice patch set as well (by @suman) as I remember it. However I have had my hands full with other Rockstor issues so haven’t gotten around to even looking at it.

Hope that helps and really @Flyer, and of course @suman, are the folks on the dev side for AD functionality.

Your reported error looks like we have a parsing bug of some sorts however. But I’m not going to be able to look into this myself for a little while I’m afraid. Hopefully the above and other contributions to this thread may well help get you sorted until what ever has gone wrong on the Rockstor side is pinned down and resolved.