无法创建具有 LDAP 错误的计算机帐户，发生本地错误

适用于

• ONTAP 9
• Active Directory 服务器
• CIFS 服务器
• LDAP 签名或密封

问题

• 尝试为 SVM 创建 Active Directory 或 CIFS 服务器时失败，并显示以下错误：

Error: command failed: Failed to create the Active Directory machine account "SVMAD". Reason: LDAP Error: Local error occurred.

• EMS 事件也可从显示遇到问题的域控制器的尝试中观察到，例如本示例中的"olddc1"：

[cluster-01: secd: secd.conn.auth.failure:notice]: Vserver (svmad) could not authenticate over the network to server (olddc1). Error: Local error ().

[cluster-01: secd: secd.unexpectedFailure:debug]: vserver (svmad) Unexpected failure. Error: Machine account creation procedure failed

Loaded the preliminary configuration.
Successfully connected to ip 10.100.1.100, port 88 using TCP
Successfully connected to ip 10.100.1.100, port 389 using TCP 
Entry for host-address: 10.100.1.100 not found in the current source: FILES. Ignoring and trying next available source  Successfully connected to ip 10.100.1.100, port 88 using TCP **
FAILURE: Unable to SASL bind to LDAP server using GSSAPI: Local error  
Additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Server not found in Kerberos database)  
Unable to connect to LDAP (Active Directory) service on olddc1.demo.netapp.com (Error: Local error)  
Unable to make a connection (LDAP (Active Directory):DEMO.NETAPP.COM), result: 7643 
Retry requested, but the retry window (7000 ms) has expired; giving up.