由于在SiteDiscovery期间报告了secd.conn.auth.failure事件、CIFS共享访问问题描述

适用场景

• ONTAP 9
• CIFS
• Active Directory 域
• AutoSupport

问题描述

• 在 ONTAP Vserver上执行定期SiteDiscovery过程期间、 无法在超时期限内访问LDAP服务器、从而导致频繁记录以下事件：

secd: secd.conn.auth.failure:notice]: Vserver (svm1) could not make a connection over the network to server (ip 192.168.1.2, port 389) via interface 192.168.2.3. Error: Operation timed out (Service: LDAP (Active Directory), Operation: SiteDiscovery).

secd: secd.conn.auth.failure:notice]: Vserver (svm1) could not make a connection over the network to server (ip 10.x.x.x, port 445). Error: Operation timed out ().

• 如果EMS日志中出现上述错误、则无法访问CIFS共享。
• EMS中也会出现Netlogon超时错误：

Wed Sep 27 15:37:15 +0800 [cluster: secd: secd.cifsAuth.problem:error]: vserver (vserver1) General CIFS authentication problem. Error: User authentication procedure failed CIFS SMB2 Share mapping - Client Ip = 10..2.2.2   
[  0 ms] Login attempt by domain user 'domain\user1' using NTLMv2 style security 
**[ 20000] FAILURE: Timed out waiting for a NetLogon connection after 20 seconds   
[ 20000] Unable to make a connection (NetLogon:DOMAIN.COM), result: 7015   
[ 20000] CIFS authentication failed   
[ 20000] Retry requested, but the retry window (7000 ms) has expired; giving up.

• Operation timed out如果 未及时收到来自DC的响应，则EMS会报告“”错误，从而可能导致CIFS访问问题。
  • 注意： 如何在ONTAP 9.10+系统上捕获数据包跟踪 可以收集数据包跟踪来确认行为。