由于DNS错误、CIFS服务器创建失败
适用场景
- ONTAP 9
- OnCommand Workflow Automation (WFA)
- System Manager
问题描述
使用 OnCommand Workflow Automation (WFA)创建支持CIFS的Vserver时、创建CIFS服务器的步骤失败、并显示以下错误：
11:16:33.659 INFO [Setup CIFS service] ### Command 'Setup CIFS service' in 'POWER_SHELL' ###
11:16:42.644 INFO [Setup CIFS service] Using cached cluster connection
11:16:43.191 INFO [Setup CIFS service] Credentials successfully provided for 'DOMAIN.COM'
11:16:43.222 INFO [Setup CIFS service] Creating CIFS server with name 'CIFS1' for Storage Virtual Machine 'vserver1'
11:16:50.660 ERROR [Setup CIFS service] Failed to create the Active Directory machine account "CIFS1". Reason: SecD Error: no server available Details: Error: Machine account creation procedure failed [ 2 ms] Trying to re-use machine account 'CIFS1' in 'DOMAIN.COM' for Vserver 'vserver1' **[ 15] FAILURE: Unable to contact DNS to discover domain ** controllers. [ 15] Unable to connect to any (0) domain controllers. [ 21] Unable to contact DNS to discover domain controllers. [ 27] No servers available for MS_LDAP_AD, vserver: 84, domain: DOMAIN.COM.
使用System Manager创建CIFS服务器失败
Operation Create Cifs Server failed with error Failed to create the Active Directory machine account. Reason: Unable to connect to any domain controllers.
EMS日志：
[NODE-01: secd: secd.unexpectedFailure:error]: Unexpected SecD failure in Vserver "SVM". Details: Error: Machine account creation procedure failed [ 65158] Loaded the preliminary configuration. ** [ 66535] FAILURE: Could not authenticate as 'user@DOMAIN.COM': Cannot find KDC for requested realm (KRB5_REALM_UNKNOWN) [ 66536] Retry requested, but the retry window (7000 ms) has expired; giving up.
检查DNS中新创建的Vserver是否显示：
-
Cluster1::*> dns check -vserver vserver1
Name ServerVserver Name Server Status Status Details
------------- --------------- ------------ --------------------------
vserver1 19.13.0.246 up Response time (msec): 2
vserver1 19.69.0.246 up Response time (msec): 2
2 entries were displayed.
-
- 事件日志包含以下错误：
secd.dns.srv.lookup.failed: DNS server failed to look up service (_ldap._tcp.dc._msdcs.domain.com) for vserver (vserver1 with error (No such process).secd.dns.srv.lookup.failed: DNS server failed to look up service (_ldap._tcp.DOMAIN.COM) for vserver (vserver1) with error (No such process).
- 创建Vserver后、在CLI上手动创建CIFS服务器可以正常工作。