Search the VMware Knowledge Base (KB)
View by Article ID

"Errors in Active Directory operations" error adding the ESX/ESXi host to an Active Directory domain (1026538)

  • 50 Ratings

Symptoms

  • Cannot add the ESX/ESXi host to an Active Directory domain
  • Adding the ESX/ESXi host to an Active Directory domain fails
  • You see the error:

    Errors in Active Directory operations

  • If netlogond is enabled on the host, you see entries similar to these in the netlogond.log:

    20100820075107:0xf7c74b90:DEBUG:[LWNetSrvGetCurrentDomain() /build/mts/release/bora-234910/likewise/esxi-esxi/src/linux/netlogon/server/api/lwnet-pstore.c:83] Error at /build/mts/release/bora-234910/likewise/esxi-esxi/src/linux/netlogon/server/api/lwnet-pstore.c:83 [code: 136]


    Note: For more information on enabling netlogond, see Enabling logging for Likewise agents on ESXi/ESX (1026554).


Resolution

This issue may occur when the network firewall is blocking the required ports.
 
To resolve this issue, ensure that the following ports (both UDP and TCP) are open for communication between the ESX/ESXi host and Active Directory:
  • Port 88  - Kerberos authentication
  • Port 123 – NTP
  • Port 135 - RPC
  • Port 137 - NetBIOS Name Service
  • Port 139 - NetBIOS Session Service (SMB)
  • Port 389 - LDAP
  • Port 445 - Microsoft-DS Active Directory, Windows shares (SMB over TCP)
  • Port 464 - Kerberos - change/password changes
  • Port 3268- Global Catalog search
Note: This issue may also occur if you have entered the user credentials in the <domain\username> format. This issue is resolved in ESXi 5.0 and later.
 
To workaround this issue on earlier ESX/ESXi versions, enter the user credentials in the <username> or <username@fqdn_of_the_domain> format.

Tags

active-directory-users  active-directory-logs

See Also

Update History

05/19/2011 - Added additional cause and resolution

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 50 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)




Please enter the Captcha code before clicking Submit.
  • 50 Ratings
Actions
KB: