跳转到主内容

NetApp_Insight_2020.png 

安全守护进程( secd )无法按 UID 和名称查找本地 UNIX 用户

Views:
9
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
core
Last Updated:

状态信息

适用于

  • ONTAP 9.2
  • 集群模式 Data ONTAP 8
  • 集群模式 Data ONTAP 8.3
  • ONTAP 9
  • 集群模式 Data ONTAP 8.2
  • ONTAP 9.3
  • 集群模式 Data ONTAP 8.1
  • ONTAP 9.1

问题

安全守护进程( secd )无法按 UID 和名称查找或转换某些 UNIX 用户。
新创建的本地 UNIX 用户也会受到此问题的影响。
受影响的 UNIX 用户无法挂载和访问数据。

用户数量与 ONTAP 版本限制的对比 - 完全在内部。
    ::*> vserver services name-service unix-group max-limit show
   Limit       Current Count
   -------------- --------------
   16384       344
  ::*> vserver services name-service unix-user  max-limit show
   Limit          Current Count
   -------------- --------------
   16384          864


已定义 UNIX 用户的详细信息:
    ::*> unix-user show -vserver SVM01 -user NewUser
    Vserver: SVM01
         User Name: NewUser
          User ID: 1234
   Primary Group ID: 321
   User's Full Name:


UNIX 名称和 UID

    ::*> diag secd authentication translate -node NODE01 -vserver SVM01 -uid 1234
   Vserver: SVM01 (internal ID: 8)
   Error: Acquire UNIX credentials procedure failed
     [  0 ms] Entry for user-id: 1234 not found in the current source:
            FILES. Entry for user-id: 1234 not found in any of the available sources
   **[  0] FAILURE: Unable to retrieve UNIX username for UID 1234
   Error: command failed: Failed to resolve User ID '1234' to a user name. Reason: "SecD Error: object not found".

   ::*> diag secd authentication translate -node NODE01 -vserver SVM01 -unix-user-name NewUser
   Vserver: SVM01 (internal ID: 8)
   Error: Acquire UNIX credentials procedure failed
     [  0 ms] Entry for user-name: NewUser not found in the current
            source: FILES. Entry for user-name: NewUser not found in
            any of the available sources
   **[     0] FAILURE: Unable to retrieve UID for UNIX user NewUser
   Error: command failed: Failed to resolve user name to a UNIX ID. Reason: "SecD Error: object not found"


UNIX 用户凭据显示的转换失败:

::*> diag secd authentication show-creds -node NODE01 -vserver SVM01 -unix-user-name NewUser
Vserver: SVM01 (internal ID: 8)
Error: Acquire UNIX credentials procedure failed
  [  0 ms] Entry for user-name: NewUser not found in the current
           source: FILES. Entry for user-name: NewUser not found in
           any of the available sources
**[     0] FAILURE: Unable to retrieve UID for UNIX user NewUser
Error: command failed: Failed to resolve user name to a UNIX ID. Reason: "SecD Error: object not found".

 

CUSTOMER EXCLUSIVE CONTENT

Registered NetApp customers get unlimited access to our dynamic Knowledge Base.

New authoritative content is published and updated each day by our team of experts.

Current Customer or Partner?

Sign In for unlimited access

New to NetApp?

Learn more about our award-winning Support