"SecD错误：无可用服务器"、因为文件中的主机名与对等证书中的CN不匹配
适用场景
- ONTAP 9
- DNS
- Active Directory
- CIFS
- StartTLS
问题描述
- 无法重置CIFS密码
::>cifs password-reset -vserver svm1
Error: command failed: Password update failed. Reason: SecD Error: no server available
- EMS显示CIFS密码重置失败、因为主机名与CN不匹配
::> event log show -source secd
12/31/2023 12:00:00 cluster1-01 ERROR secd.unexpectedFailure: Unexpected SecD failure in Vserver "svm1". Details: Error: CIFS server password reset procedure failed
...
[ 1] Successfully connected to ip 10.20.30.40, port 389 using TCP
[ 18] Unable to start TLS: Connect error
[ 18] Additional info: TLS: hostname (server1) does not match CN (server1.domain.com) in peer certificate
[ 18] Unable to connect to LDAP (Active Directory) service on server1
[ 18] No servers available for MS_LDAP_AD, vserver: 5, domain: domain.com
**[ 18] FAILURE: Unable to make a connection (LDAP (Active Directory): domain.com), Result: RESULT_ERROR_SECD_NO_SERVER_AVAILABLE
- 在DNS服务器中，IP
10.20.30.40的PTR记录解析为主机名server1.domain.com，它与DC对等证书中的CN匹配PS> nslookup 10.20.30.40
Server: server1.domain.com
Address: 10.20.30.40
Name: server1.domain.com
Address: 10.20.30.40