升级到 ONTAP 9.12.1 或更高版本后，出现许多 secd.rpc.authRequest.blocked 警报
适用于
- ONTAP 9.12.1 或更高版本
- CIFS/SMB
问题
- ONTAP 9.12.1 或更高版本 EMS 报告
secd.rpc.authRequest.blocked
secd: secd.rpc.authRequest.blocked:alert]: Too many CIFS authentication attempts with wrong password from client "x.x.x.x" on Vserver "svm1"
secd: secd_rpc_authRequest_blocked_1:alert]: params: {'clientIP': '10.201.149.XXX', 'userName': 'i45260XX', 'domain': 'd-Domain', 'vserverName': 'svm_XXX'}
或
secd.rpc.authRequest.blocked:Too many CIFS authentication attempts with an invalid password from a client with IP "x.x.x.x", user name "User name" and domain "domain name" on SVM "SVM name".
- 发生上述事件后，会记录大量
secd.cifsAuth.problem
secd: secd.cifsAuth.problem:error: vserver (svm1) General CIFS authentication problem. Error: User authentication procedure failed CIFS SMB2 Share mapping - Client Ip = x.x.x.x **[ 0] FAILURE: CIFS authentication failed
- 错误"
Client (IP: x.x.x.x) blocked due to continuous attempts with wrong password"已记录在secd.log