如果LIF的自动还原设置为true且LIF托管在ifgrp上、则DNS/DC连接超时

最后更新
另存为PDF

Views:: 14

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nas

Last Updated:

适用场景

ONTAP 9

问题描述

当我们手动关闭/启动ifgrp上的所有端口时、或者在接管/交还期间、LIF会成功还原、但使用该LIF的DNS/DC连接会超时一段时间。

EMS日志：

3/14/2022 06:22:11 node-01 ERROR secd.dns.server.timed.out: DNS server 10.200.1.x did not respond to vserver = vserver1 within timeout interval

3/14/2022 06:22:13 node-01 ERROR secd.dns.srv.lookup.failed: DNS server failed to look up service (_ldap._tcp.dc._msdcs.domain.com) for vserver (vserver1) with error (Operation timed out).

3/14/2022 06:22:13 node-01 EMERGENCY secd.netlogon.noServers: None of the Netlogon servers configured for Vserver (vserver1) are currently accessible via the network.

3/14/2022 06:22:13 node-01 ERROR secd.cifsAuth.problem: vserver (vserver1) General CIFS authentication problem. Error: Ontap admin cifs authentication basic procedure failed

[ 0 ms] Login attempt by domain user 'domain\user1' using NTLMv2 style security

[ 5004] Failed to connect to 10.200.1.x for DNS via Source Address 10.141.200.x: Operation timed out

[ 6006] Failed to connect to 10.200.1.x for DNS via Source Address 10.141.200.x: Operation timed out

[ 7007] Failed to connect to 10.201.3.x for DNS via Source Address 10.141.200.x: Operation timed out

**[ 7009] FAILURE: Unable to contact DNS to discover domain controllers.

[ 7009] Unable to make a connection (NetLogon:DOMAIN.COM), result: 6812

[ 7011] Ontap-admin-login-cifs failed

Secd日志：

ERR : Unable to make a connection (NetLogon:OTICS1.IN.OTICS.CO.JP), Result: RESULT_ERROR_DNS_CANT_REACH_SERVER { in getConnection() at src/connection_manager/secd_connection_manager.cpp:680 } ERR : RESULT_ERROR_DNS_CANT_REACH_SERVER:6812 in getNetLogonConnection() at src/connection_manager/secd_connection_manager.cpp:80 ERR : RESULT_ERROR_DNS_CANT_REACH_SERVER:6812 in doAuthenticateWithDC() at src/authentication/secd_seclibglue.cpp:1108 ERR : RESULT_ERROR_DNS_CANT_REACH_SERVER:6812 in doPassThroughAuth() at src/NtlmsspCtx.cpp:1216 ERR : RESULT_ERROR_DNS_CANT_REACH_SERVER:6812 in handleAuthenticateMsg() at src/NtlmsspCtx.cpp:964 ERR : RESULT_ERROR_DNS_CANT_REACH_SERVER:6812 in acceptContext() at src/NtlmsspCtx.cpp:309 ERR : RESULT_ERROR_DNS_CANT_REACH_SERVER:6812 in acceptContext() at src/SpnegoCtx.cpp:261 ERR : RESULT_ERROR_DNS_CANT_REACH_SERVER:6812 in secd_rpc_auth_extended_1_svc_secd() at src/authentication/secd_rpc_auth.cpp:1592 ERR : CIFS authentication failed { in secd_rpc_auth_extended_1_svc_secd() at src/authentication/secd_rpc_auth.cpp:1626 }