从 AD 环境中删除旧 DC 服务器后发生 CIFS 访问延迟
适用场景
- ONTAP 9.1
- CIFS
- 已从 Active Directory ( AD )环境中删除域控制器( DC )
问题描述
- CIFS 访问延迟
secd.conn.auth.failure:error
在 EMS 日志中:
Tue Mar 16 15:45:17 JST [xxx-xxx: secd: secd.conn.auth.failure:error]: Vserver (xxyyyy) could not make a connection over the network to server (ip 10.xx.xx.151, port 88) via interface xx.xx.xx.x. Error: Operation timed out.
vserver cifs domain discovered-servers show
并且CIFS-DOMAIN-DISCOVERED-SERVER.XML
不会显示KERBEROS
SVM的Type条目secd.log
指示许多 secd 身份验证条目在队列中保留超过 10 秒:
Tue Mar 16 2021 09:05:33 +09:00 [kern_secd:info:7051] | [000.000.015] debug: Worker Thread 34638722560 processing RPC 151:secd_rpc_auth_extended with request ID:23652 which sat in the queue for 18 seconds. { in run() at src/server/secd_rpc_server.cpp:2067 }