Data Object - ActiveVsanDirectoryServerConfig(vim.vsan.ActiveDirectoryServerConfig)

Extends
VsanDirectoryServerConfig
Since
vSAN API vSAN 7.0U1

Data Object Description

The Active Directory server configuration which can be used to communicate and authenticate with a Microsoft Active Directory server.

Properties

Name Type Description
activeDirectoryDomainName*xsd:string

Microsoft Active Directory Domain name which will be used for authentication for Kerberos based NFS share and SMB shares. The active directory domain name should be of the form 'example.com'.
organizationalUnit*xsd:string

Active Directory's Organizational Unit. This is where all file server computer objects will be created. If it is not specified while creating File Service Domain, by default Computers OU will be used. We recommend an OU must be pre-created in Active Directory and default Computers OU should not be used. Best way to get your OU name right is by following below convention: https://support.microsoft.com/en-in/help/909264/naming-conventions-in-active-directory-for-computers-domains-sites-and As best practice for security and manageability, we recommend:
  • Create a dedicated OU for vSAN file service.
  • Create a basic domain user.
  • Mark the OU managed by this domain user.
Note in the case of nested OU, "/" can be used as seperator.
password*xsd:string

Password for the domain user.
username*xsd:string

Username that is used to connect and configure the directory service. This user is required to have sufficient previleges in provided Organizational Unit to:
  • Create and delete Computer Objects.
  • Read and Write ms-DS-PrincipleName.
  • Read and Write uPNSuffixes.

Properties inherited from VsanDirectoryServerConfig
None
Properties inherited from DynamicData
None
*Need not be set
Show WSDL type definition