使用网络组时无法访问NFS挂载点、DNS反向查找失败
适用场景
- ONTAP 9 及更高版本
- NFS
- 网络组
问题描述
- 在导出策略中使用netgroup作为客户端匹配时、NFS挂载失败、客户端上显示以下错误：
mount.nfs: access denied by server while mounting nfs-server-name:/mount-point- 导出策略检查访问失败：
cdot_vsim_9_8::> check-access -vserver vs1 -volume vol1 -client-ip 10.x.2.x -authentication-method sys -protocol nfs3 -access-type read-write
(vserver export-policy check-access)
Policy Policy Rule
Path Policy Owner Owner Type Index Access
----------------------------- ---------- --------- ---------- ------ ----------
/ default vs1_root volume 1 read
/vol1 policy-name vol1 volume 0 denied
2 entries were displayed.- DNS反向查找失败：
cdot_vsim_9_8::*> vserver services name-service getxxbyyy gethostbyname -node node01 -vserver vs1 -hostname hostname.netapp.com
Error: command failed: Failed to resolve hostname.netapp.com. Reason: Unknown host.
- EMS日志和mgwd日志将分别报告以下错误：
Sat Mar 12 10:34:52 +0000 [node01: kernel: protocol.exportCheckFailed:error]: Export access check failed on Vserver vs1 for client 10.x.2.x, trying to access volume vol1, having policy policy-name, via protocol nfs3. Reason: Access denied after export policy evaluation
Sat Mar 12 2022 10:34:52 00:00 [kern_mgwd:info:2131] | [0.16.993] ERR : getaddrinfo(hostname.netapp.com) returned error=8: hostname nor servname provided, or not known files_error = 5, nis_error = 0, ldap_error = 0, dns_error = 0 { in hostMatchLookup() at src/mgmtgwd/nfs/mgwd_exports.cc:2106 }