Unable to add AD or LDAP domains with the vssat command
After you add an AD or LDAP domain, you can verify the configuration with the vssat validateprpl command and for groups with the vssat validategroup command. If a domain is not added successfully, the vssat validation displays The principal or group does not exist. More details are written to the nbatd logs.
Validation of an AD or LDAP user can fail for any of the following reasons:
The connection cannot be established with the AD or LDAP server
Incorrect user credentials were provided
An incorrect user base DN or group base DN was provided
Multiple users or groups exist with the same name under the user base DN or the group base DN
The user or group does not exist
For information about the vssat command, see the NetBackup Commands Reference Guide.