跳转到主内容

ONTAP 9.6 及更高版本:在 NS-switch 中使用 NIS 时,对 NTFS 安全卷的 NFS 访问失败,但未配置

Views:
15
Visibility:
Public
Votes:
0
Category:
not set
Specialty:
not set
Last Updated:

适用于

ONTAP 9.6+

问题

  • 尽管unknown UID已知 UNIX UID ,但 NFS 对 NTFS 安全卷的名称映射仍会失败
  • 示例 EMS 日志 
    • secd.nfsAuth.noNameMap: vserver (vserver) Cannot map UNIX name to CIFS name. Error: Get user credentials procedure failed 
    • [ 11] Mapping an unknown UID to default windows user
    • [ 11] Unable to map '123'. No default Windows user defined.
    • **[ 11] FAILURE: Name mapping for UNIX user '123' failed. No mapping found
  • 示例 secd 日志显示因 NS-switch 中的 NIS 而导致的瞬时 NIS 错误,但未配置 NIS
    • ERR  :  Configuration for NIS is disabled/not found { in SecdCbNsJournal() at src/utils/secd_ns_utils.cpp:91 }
      info :  Source: NIS unavailable. Entry for user-id:123 not found in any of the available sources { in SecdCbNsJournal() at src/utils/secd_ns_utils.cpp:95 }
      debug:  nswrapper::getpwuid_r() returned error code=2, files_err=5, nis_err=19, ldap_err=5, dns_err=0  { in getUserInfoViaLibC() at src/utils/secd_ns_utils.cpp:448 }
      ERR  :  nswrapper::getpwuid_r() has a transient error  { in getUserInfoViaLibC() at src/utils/secd_ns_utils.cpp:454 }
      ERR  :  RESULT_ERROR_SECD_LIBC_TRANSIENT_ERROR:7035 in getUserInfoViaLibC() at src/utils/secd_ns_utils.cpp:455
      ERR  :  RESULT_ERROR_SECD_LIBC_TRANSIENT_ERROR:7035 in _getUserPasswdInfo() at src/authorization/secd_unix_authorization.cpp:738
      ERR  :  RESULT_ERROR_SECD_LIBC_TRANSIENT_ERROR:7035 in _getUserInfo() at src/authorization/secd_unix_authorization.cpp:485
      ERR  :  RESULT_ERROR_SECD_LIBC_TRANSIENT_ERROR:7035 in getCredsFromUserIdViaLibc() at src/authorization/secd_unix_authorization.cpp:112

      debug:  Logged secd.nfsAuth.noNameMap to EMS  { in logEmsEventWithJournalForNfsAuthError() at src/utils/secd_ems_utils.cpp:1236 }
  • NS 交换机配置的数据库组和 / 或使用 NIS 的 passwd
    • ::> vserver services ns-switch show -vserver vserver1
                      Source
      Vserver      Database     Order
      --------------- ------------   ---------
      vserver1     hosts      files,
                      dns
      vserver1     group      files,
                      nis
      vserver1     passwd      files,
                      nis
      vserver1     netgroup     files
      vserver1     namemap     files
  • NIS 未配置示例
    • ::> vserver services nis-domain show -vserver vserver1
      There are no entries matching your query.

       
  • 本地 UNIX 用户配置的示例
    • ::> vserver services unix-user show -vserver vserver -id 123
              User       User   Group  Full
      Vserver     Name       ID    ID    Name
      -------------- --------------- ------ ------ --------------------------------
      vserver1     root       123   123
  • 未配置本地 UNIX 组示例
  • ::> vserver services unix-Group  show -vserver vserver1 -id 123
    There are no entries matching your query.

     

 

CUSTOMER EXCLUSIVE CONTENT

Registered NetApp customers get unlimited access to our dynamic Knowledge Base.

New authoritative content is published and updated each day by our team of experts.

Current Customer or Partner?

Sign In for unlimited access

New to NetApp?

Learn more about our award-winning Support