OpenStack:由于"NetApp API 失败"异常,Manila 无法设置共享访问权限
适用于
- OpenStack Manila
- DHSS = False
问题描述
将 Manila 配置为将 SVM 范围的用户用于其共享服务后端时,尝试为共享创建访问权限时会看到以下问题(使用 manila access-allow 命令)
- manila share.log 显示以下 API 异常:
33344: 2024-06-11 11:36:47.019 1360587 ERROR oslo_messaging.rpc.server [req-12345676] Exception during message handling: manila.share.drivers.netapp.dataontap.client.api.NaApiError: NetApp API failed. Reason - 15661:entry doesn't exist
- 在问题的时间戳期间跟踪 API 调用时,您会看到以下 kerberos-config-get-iter API 调用失败:
00000015.006cad50 06cd461e Wed Jul 03 2024 13:22:27 +00:00 [kern_audit:info:3328] 8503e800003f7318 :: ontap:ontapi :: xx.xx.xx.xx:39724 :: xxxxx:manilauser :: <netapp xmlns=http://www.netapp.com/filer/admin version="1.231" vfiler="xxxxx"><kerberos-config-get><interface-name>xxxxx-mgmt</interface-name><desired-attributes><kerberos-config-info><is-kerberos-enabled/></kerberos-config-info></desired-attributes></kerberos-config-get></netapp> :: Pending:
00000015.006cad52 06cd461e Wed Jul 03 2024 13:22:27 +00:00 [kern_audit:info:3328] 8503e800003f7318 :: ontap:ontapi :: xx.xx.xx.xx:39724 :: xxxxx:manilauser :: kerberos-config-get :: Error: entry doesn't exist
- 从 ontap 启用
security audit modify -httpget on -ontapiget on时,可以从mgwd.log检查以下日志
Tue Dec 09 2025 11:20:29 [kern_audit:info:4510] 8503e800000ebc23 :: fas70:ontapi :: xx.xx.xx.xx:43044 :: manila-data-pod1:openstack:openstack :: <netapp xmlns="http://www.netapp.com/filer/admin" version="1.271" vfiler="manila-data-pod1"><kerberos-config-get><interface-name>manila-api-pod1</interface-name><desired-attributes><kerberos-config-info><is-kerberos-enabled/></kerberos-config-info></desired-attributes></kerberos-config-get></netapp> :: Pending:Tue Dec 09 2025 11:20:29 [kern_audit:info:4510] 8503e800000ebc23 :: fas70:ontapi :: xx.xx.xx.xx:43044 :: manila-data-pod1:openstack:openstack :: kerberos-config-get :: Error: entry doesn't exist