由于节点-02 上的 DNS 通信失败，在 tkeover 期间 CIFS 身份验证失败

最后更新
另存为PDF

Views:: 23

Visibility:: Public

Votes:: 0

Category:: fas-systems

Specialty:: nas

Last Updated:

适用于

ONTAP 9
CIFS

问题描述

从 node-01 到 node02 的控制器接管后，由于无法与 DNS 服务器进行通信，导致 node-02 上的 CIFS 身份验证失败
这导致 CIFS 服务中断

示例：

9/1/2025 08:54:09 node-02 ERROR secd.cifsAuth.problem: vserver (svm1) General CIFS authentication problem. Error: User authentication procedure failed

CIFS SMB2 Share mapping - ClientIp=10.xxx.xxx.xxx

[0ms] Login attempt by domain user 'DOMAIN\User1' using NTLMv2 style security

[2006] Failed to connect to 10.xxx.xxx.xxx for DNS via Source Address 192.xxx.xxx.xxx: Operation timed out

[3013] FAILURE: Unable to contact DNS to discover domain controllers.

[3014] Unable to make a connection (NetLogon: DOMAIN.COM), Result: RESULT_ERROR_DNS_CANT_REACH_SERVER

[3015] CIFS authentication failed

ERROR secd.dns.server.timed.out: DNS server 10.xxx.xxx.xxx did not respond to vserver=svm1 within timeout interval.

ERROR secd.dns.srv.lookup.failed: DNS server failed to lookup service (_ldap._tcp.dc._msdcs.DOMAIN.COM) for vserver (svm1) with error (Operation timed out).