CONTP-244584:使用MS Entra ID的SAML身份验证在ONTAP 9 14.1中停止工作
问题描述
- SAML authentication using Microsoft Entra ID stopped working from ONTAP 9.14.1
- While providing the IDP, ONTAP System Manager GUI returns with error:
"The data file wasn't downloaded from the specified IdP URI."
- ONTAP CLI as well as SAML-STATUS-CLUSTER.XML gives error:
"SAML job failed, Reason: Failed to download data from URL https://login.microsoftonline.com/<idp_url>. Reason: Transferred a partial file."
- MGWD.log:
"[kern_mgwd:info:3383] 0x82a2cff00: 8603e8000006ea6c: ERR: URL::URL: download:src/URL.cc:744 Mismatch in curl downloaded file size and remote package size. Remote package size: xxxx B, Curl downloaded file size: yyyy B, Remote file: https://login.microsoftonline.com/<idp_url>, Local file: /mroot/etc/shibboleth/tmp_conf-bb87-6d5f-6860-660c.conf [kern_mgwd:info:3383] 0x82a2cff00: 8603e8000006ea6c: ERR: saml_job_job: download from https://login.microsoftonline.com/<idp_url> to /mroot/etc/shibboleth/tmp_conf-bb87-6d5f-6860-660c.conf (!verify): Transferred a partial file [kern_mgwd:info:3383] 0x8331f7900: 8603e8000006ea74: WARNING: job_manager::job_sched: process_modify:src/job_sched.cc:592 UIID:6165 UUID:xxxxx name:SAML Master Job rc:1 Doing nothing in modify callback for job, since it's pending cleanup"