启用选项auth-sys-extended-groups后、NFS扩展组不起作用

最后更新
另存为PDF

Views:: 41

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nfs<a>2009-201682</a>

Last Updated:

适用场景

ONTAP 9
NFS
LDAP

问题描述

NFS用户的权限被拒绝
已 auth-sys-extended-groups 启用NFS选项
vserver services name-service getxxbyyy getgrlist 仅返回主GID
Secd.log :

info :  LDAP search for the "gidNumber" attribute(s) within base "ou=Group,ou=dom,o=example" (scope: 2) using filter "(&(|(objectClass=groupOfNames)(objectClass=exampleGroupAuxClass))(|(memberUid=user01)(member=cn=user01,ou=Personal,ou=People,ou=dom,o=example))-)"fail { in searchLdap() at src/utils/secd_ldap_utils.cpp:394 }
 info :    Additional info:  { in searchLdap() at src/utils/secd_ldap_utils.cpp:397 }
 ERR  :  RESULT_ERROR_LDAPSERVER_FILTER_ERROR:7648 in searchLdap() at src/utils/secd_ldap_utils.cpp:400
 ERR  : searchLdap: LDAP Error: (-7): 'Bad search filter':