某些Vserver上无法访问CIFS共享
适用场景
- ONTAP 9
- CIFS/SMB
问题描述
- 尝试通过FQDN或IP访问Vserver上的CIFS共享时、操作会失败
- 其他Vserver可以正常工作
- 在
ems.logs中、我们会发现secd.cifsAuth.noNameMap错误：
[Node-01: secd: secd.cifsAuth.noNameMap:error]: vserver (svm1) CIFS name to UNIX name mapping problem. Error: User authentication procedure failed CIFS SMB2 Share mapping - Client Ip = 10.10.10.7 [ 4035] User 'DOMAIN\user' authenticated using NTLMv2 security **[ 4035] FAILURE: CIFS authentication failed
- 在
secd.log中：
...
debug: IP qualifier is not present in NameMapping config { in getIpqPresentInNameMappingConfig() at src/configuration_manager/secd_configuration_manager.cpp:4796 }
ERR : RESULT_ERROR_SECD_CONFIGURATION_NOT_FOUND:6943 in query() at src/configuration_manager/secd_configuration_sources.cpp:9032
ERR : RESULT_ERROR_SECD_CONFIGURATION_NOT_FOUND:6943 in getNmSwitch() at src/configuration_manager/secd_configuration_manager.cpp:2670
ERR : RESULT_ERROR_SECD_CONFIGURATION_NOT_FOUND:6943 in getAppropriateWindowsToUnixMapping() at src/name_mapping/secd_name_mapping.cpp:692
ERR : RESULT_ERROR_SECD_CONFIGURATION_NOT_FOUND:6943 in mapNameWindowsToUnix() at src/name_mapping/secd_name_mapping.cpp:1366
ERR : RESULT_ERROR_SECD_CONFIGURATION_NOT_FOUND:6943 in mapName() at src/name_mapping/secd_name_mapping.cpp:2170
ERR : RESULT_ERROR_SECD_TRANSIENT_MAPPING_FAILURE:7037 in mapName() at src/name_mapping/secd_name_mapping.cpp:2189
ERR : RESULT_ERROR_SECD_TRANSIENT_MAPPING_FAILURE:7037 in secdGetUnixCredsForWindowsUser() at src/authentication/secd_rpc_auth.cpp:1143
ERR : RESULT_ERROR_SECD_TRANSIENT_MAPPING_FAILURE:7037 in secdLoadUnixCredsFromContext() at src/authentication/secd_rpc_auth.cpp:336
ERR : RESULT_ERROR_SECD_TRANSIENT_MAPPING_FAILURE:7037 in secdLoadResponseFromContext() at src/authentication/secd_rpc_auth.cpp:534
ERR : RESULT_ERROR_SECD_TRANSIENT_MAPPING_FAILURE:7037 in secd_rpc_auth_extended_1_svc_secd() at src/authentication/secd_rpc_auth.cpp:1768
ERR : CIFS authentication failed { in secd_rpc_auth_extended_1_svc_secd() at src/authentication/secd_rpc_auth.cpp:1789 }
debug: Domain name: DOMAIN { in secdLoadWindowsDomainNameInfo() at src/authentication/secd_rpc_auth.cpp:898 }
debug: SecD RPC Server sending reply to RPC 151: secd_rpc_auth_extended { in secdSendRpcResponse() at src/server/secd_rpc_server.cpp:2289 }
ERR : RESULT_ERROR_SECD_TRANSIENT_MAPPING_FAILURE:7037 in getFailureCode() at src/utils/secd_thread_task_journal.cpp:348
debug: Vserver's operational state: running { in isVserverRunning() at src/configuration_manager/secd_configuration_manager.cpp:2814 }
ALERT: sending EMS. Logging the RPC to secd.log { in shouldLogInEms() at src/utils/secd_ems_utils.cpp:263 }
debug: Logged secd.cifsAuth.noNameMap to EMS { in logEmsEventWithJournalForCifsAuthError() at src/utils/secd_ems_utils.cpp:1270 }