Here's a summary of what I had to do to fix this problem:
John> I'm having a problem getting an F760 with NFS/CIFS running John> OnTap 6.3.1 to actually talk to our Win2K domain properly. John> I'm assuming it's a priv problem on the PDC side, but I don't John> know enough of how to fix it.
John> Basically, whenever I try to run 'cifs setup', it fails at the John> end with the following message:
John> Could not create Active Directory account for the filer: No John> such object CIFS could not create server machine account.
John> But I'm supposed to have the privs with my account to add this John> machine into ActiveDirectory.
John> Has anyone else run into stuff like this? And does anyone John> have any hints on what I need to do on the Windows PDC to give John> myself the privs I need to get this done?
Basically I tried dropping back to 6.2R2 and doing 'cifs setup' and it still didn't work. I then dropped all the way back to 5.3.7, though I had to disconnect my DS14 shelf for this to work. Luckily, I had an FC8/9 shelf on there for the root volume already.
Anyway, once I was running 5.3.7, I was able to do the 'cifs setup' and join the NT/Win2k domain without any problems. I then upgraded back to 6.3.1 and I'm still part of the domain.
As far as I know, I have the full privs needed to add a host into the ActiveDirectory stuff, and I would authenticate properly as myself when I tried to run cifs setup under 6.3.1, but it would fail with permission denied errors.
Since we were in a bit of a rush to get this system setup and deployed, I don't have access to it again to try some other suggestions from NetApp, which mostly involve turning on logging and access tracing so I can see what's causing the access denied problems.
Thanks for all the suggestions people had, I wish some of them had worked.
John John Stoffel - Senior Unix Systems Administrator - Lucent Technologies stoffel@lucent.com - http://www.lucent.com - 978-399-0479