having configured a vCSA, I’ve been struggling to add it to my sub-domain. as it turned out, you need to login to the appliance directly (root/vmware) and run the following command:
/opt/likewise/bin/domainjoin-cli join <domain> <domainadmin>
you’ll be prompted to deliver the password necessary for the account. also the <domainadmin> does not need to be in the “domain admins” group. the account just needs rights to join computers to the domain.