Horizon Daas Tenant admin platform发布桌面时进度到90%卡死，发布失败

【问题描述】

租户管理平台发布桌面时，进度卡在90%，一段时间后，提示发布失败，报错：
DaaSAgent, Failed to join domain .(54b). Error: 指定的域不存在，或无法联系。
或：When a Tenant admin is expanding a pool, the tasks fail at 90% because the domain join step fails.
如下图：

【问题分析】

1）登录后台发布失败桌面虚拟机，系统报错：请求加入域失败，错误代码1355；
2）登录都发布失败的桌面虚拟机，查看sysprep日志，C:\Windows\System32\sysprep\Panther\setuperr.log.；你可能看到一下报错信息：
2010-11-30 14:16:51, Error [DJOIN.EXE] Unattended Join: NetJoinDomain failed error code is [2202]
2010-11-30 14:16:51, Error [DJOIN.EXE] Unattended Join: Unable to join; gdwError = 0x89a
2010-11-30 12:36:41, Error [DJOIN.EXE] Unattended Join: NetJoinDomain failed error code is [1355]
2010-11-30 12:36:41, Error [DJOIN.EXE] Unattended Join: Unable to join; gdwerror = 0x54b
2010-11-30 10:46:53, Error [DJOIN.EXE] Unattended Join: NetJoinDomain failed error code is [1326]
2010-11-30 10:36:53, Error [DJOIN.EXE] Unattended Join: Unable to join; gdwerror = 0x52e

Error 1326: Logon failure: unknown user name or bad password. Typically this error signifies a bad username or password mis-match.
Error 1355: The specified domain either does not exist or could not be contacted. Typically this error signifies network, DNS, or WINS issues.
Error 2202: You specified an invalid user name or group name.Typically this error signifies an invalid (incorrect format) username is being used. This can happen if you use a third party utility that creates the unattended.xmlfile used by sysprep.
3）查看C:\Windows\Panther\UnattendGC下的setuperr.log和setupacct.log日志，
4）查看C:\Windows\debug\NetSetup.LOG日志，改日志可提供详细的关于域加入的信息，以帮助进一步排查问题，搜索NetpDoDomainJoin字段定位，如下所示：
11/30/2010 14:09:48:654 NetpDoDomainJoin
11/30/2010 14:09:48:654 NetpMachineValidToJoin: SERVER01
11/30/2010 14:09:48:654 OS Version: 6.1
11/30/2010 14:09:48:654 Build number: 7600 (7600.win7_rtm.090713-1255)
11/30/2010 14:09:48:701 SKU: Windows Server 2008 R2 Enterprise
11/30/2010 14:09:48:701 NetpDomainJoinLicensingCheck: ulLicenseValue=1, Status: 0x0
11/30/2010 14:09:48:701 NetpGetLsaPrimaryDomain: status: 0x0
11/30/2010 14:09:48:701 NetpMachineValidToJoin: status: 0x0
11/30/2010 14:09:48:701 NetpJoinDomain
11/30/2010 14:09:48:701 Machine: SERVER01
11/30/2010 14:09:48:701 Domain: domain.com\dc1.domain.com
11/30/2010 14:09:48:701 MachineAccountOU: (NULL)
11/30/2010 14:09:48:701 Account: domain.com\domain1\addwks
11/30/2010 14:09:48:701 Options: 0x23
11/30/2010 14:09:48:701 NetpLoadParameters: loading registry parameters…
11/30/2010 14:09:48:701 NetpLoadParameters: DNSNameReRequired not found, defaulting to ‘1’ 0x2
11/30/2010 14:09:48:701 NetpLoadParameters: DomainCompatibilityMode not found, defaulting to ‘0’ 0x2
11/30/2010 14:09:48:701 NetpLoadParameters: status: 0x2
11/30/2010 14:09:48:701 NetpValidateName: checking to see if ‘domain.com’ is valid as type 3 name
11/30/2010 14:09:48:810 NetpCheckDomainNameIsValid [ Exists ] for ‘domain.com’ returned 0x0
11/30/2010 14:09:48:810 NetpValidateName: name ‘domain.com’ is valid for type 3
11/30/2010 14:09:48:810 NetUseAdd to \dc1.domain.com\IPC$ returned 87
11/30/2010 14:09:48:810 NetUseAdd bad parameter is 5
11/30/2010 14:09:48:810 NetpJoinDomain: status of connecting to dc ‘\dc1.domain.com’: 0x89a
11/30/2010 14:09:48:810 NetpJoinDomainOnDs: Function exits with status of: 0x89a
11/30/2010 14:09:48:810 NetpDoDomainJoin: status: 0x89a
通过上述日志还可以初步判断相关的网络问题，来判断是否可正常连接到域。
5）登录到 primary tenant appliance（TA）
查询确认域控信息和端口，执行以下命令：
psql -U admin -d fdb -c ‘select port, directory_server_ips from domain;’
对查出的相关端口检测，确保通信正常：
telnet
端口不通：telnet: Unable to connect to remote host: Connection refused

如果网络不通，请先排查网络问题
6）如果日志报username, password or permissions问题，请先确认加入域的认证信息正确；
6.1>请尝试手动加入域；
6.2>如手动加入域失败，修改密码后重试；
7）确人域的安全上下文和后缀正确：
登录TA的fabric database执行:
psql -U admin -d fdb -c ‘select name, context, domain_suffix from domain’;
如果查出的与实际不匹配，执行：
psql -U admin -d fdb -c -update domain set =’’ where name=’<value from 2b>’;
来更i性能域控信息，然后再尝试扩展桌面池。
成功后截图图下：