AD用户无法通过SSH或HTTP连接到ONTAP
适用场景
- ONTAP 9
- Active Directory
问题描述
- AD用户或组的身份验证超时
- DC上端口88的所有UDP流量均超时、而端口88的TCP流量正常工作
- secd日志将故障指示为
RPC TOOK TOO LONG
以及所有已记录的请求sat in the queue
数秒
[kern_secd:info:92928] .------------------------------------------------------------------------------.
[kern_secd:info:92928] | RPC TOOK TOO LONG: |
[kern_secd:info:92928] | RPC used 28 seconds (max is 23) |
[kern_secd:info:92928] | and likely caused the client to timeout |
[kern_secd:info:92928] .------------------------------------------------------------------------------.
[kern_secd:info:92928] | RPC SUCCESS: |
[kern_secd:info:92928] | secd_rpc_ontap_admin_cifs_auth_basic has succeeded |
[kern_secd:info:92928] | Result = 0, RPC Result = 0 |
[kern_secd:info:92928] | RPC received at Thu Dec 8 00:25:48 2022 |
[kern_secd:info:92928] |------------------------------------------------------------------------------'
[kern_secd:info:92928] | [000.000.005] debug: Worker Thread 34509862656 processing RPC 155:secd_rpc_ontap_admin_cifs_auth_basic(caller: MGMT_PAM) with request ID:62477 which sat in the queue for 20 seconds. { in run() at src/server/secd_rpc_server.cpp:2343 }