ONTAP 集群上的 LDAP 身份验证检查失败

最后更新
另存为PDF

Views:

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: NAS

Last Updated:

此知识库是通过脚本生成的，可能包含格式问题。有关准确内容，请参阅 WIP 编辑器。WIP 编辑器。

适用于

ONTAP 9
LDAP/LDAPS

问题

ONTAP 集群上的 LDAP 身份验证验证失败。
LDAP 用户无法成功进行身份验证。
对已配置的 LDAP 服务器的 LDAP 连接检查报告失败。
用户查找和身份验证请求失败。
示例错误输出：

cluster::*> ldap check -vserver svm01
          Vserver: svm01
Client Configuration Name: LDAP_config
        LDAP Status: down
    LDAP Status Details: Error: Validate the Ldap configuration procedure failed
[ 13 ms] Resolved LDAP servers: 10.xx.xx.xx, 10.xx.xx.xx.
      Vserver: 2
**[ 177] FAILURE: Could not authenticate as
** 'user@domain.COM': Cannot find KDC for
**      requested realm (KRB5_REALM_UNKNOWN)
[ 2182] TCP connection to ip 10.xx.xx.xx, port 636 failed:
      Operation timed out.
[ 2183] Unable to start LDAPS: Can't contact LDAP server
[ 2183] Unable to connect to LDAP (NIS & Name Mapping) service on <server> (Error: Can't contact LDAP server)
[ 2193] Could not authenticate as 'user@domain.COM':
      Cannot find KDC for requested realm (KRB5_REALM_UNKNOWN)
[ 4193] TCP connection to ip 10.xx.xx.xx, port 636 failed: Operation timed out.
[ 4195] Unable to start LDAPS: Can't contact LDAP server
[ 4195] Unable to connect to LDAP (NIS & Name Mapping) service on
<server> (Error: Can't contact LDAP server)
[ 4196] No servers available for LDAP_NIS_AND_NAME_MAPPING,
      vserver: 2, domain: .
[ 4196] Unable to make a connection (LDAP (NIS & Name Mapping):),
     Result: RESULT_ERROR_SECD_NO_SERVER_AVAILABLE
  LDAP DN Status Details: No LDAP DN configured