使用NFSv4 ACL的NFSv4用户可以挂载、但LS等操作会挂起
适用场景
- ONTAP 9及更高版本
- CVO
- NFS4
问题描述
- 使用NFSv4 ACL的NFSv4用户可以挂载、但LS等操作会挂起
- LDAP服务器10.17.XX.XX：636正在使用中、已为getpwbyuid发出"getxxbyy"命令、ONTAP可以连接到服务器、ONTAP可以绑定、找到UID、但返回的GID值不兼容、从而导致查询失败
- EMS日志：
[?] Wed Mar 19 15:00:18 -0400 [NASC1: secd: secd.cifsAuth.problem:error]: vserver (PDC-AIP) General CIFS authentication problem. Error: User authentication procedure failed CIFS SMB2 Share mapping - Client Ip = 10.17X.1XX.XX ... [ 2] User is not known [ 5] TCP connection to ip 147.17x.12x.15x, port 636 failed: Connection refused. [ 8] Unable to start LDAPS: Can't contact LDAP server [ 8] Unable to connect to LDAP (Active Directory) service on dns-0055-01.lm.Netapp.com (Error: Can't contact LDAP server) [ 10] TCP connection to ip 147.17x.12x.16x, port 636 failed: Connection refused. [ 13] Unable to start LDAPS: Can't contact LDAP server [ 13] Unable to connect to LDAP (Active Directory) service on dns-0055-02.lm.Netapp.com (Error: Can't contact LDAP server) [ 13] No servers available for MS_LDAP_AD, vserver: 9, domain: lm.Netapp.com. **[ 13] FAILURE: Unable to make a connection (LDAP (Active Directory):LM.LMIG.COM), Result: RESULT_ERROR_SECD_NO_SERVER_AVAILABLE [ 13] CIFS authentication failed [ 13] No servers available for MS_LDAP_AD, vserver: 9, domain: lm.Netapp.com. [ 16] IP Address found in Name Service Cache [ 21] Hostname found in Name Service Cache [ 33] Hostname found in Name Service Negative Cache [ 33] Hostname lookup failed with error: Name does not resolve [ 33] Hostname found in Name Service Cache [ 44] TCP connection to ip 147.17x.12x.15x, port 636 failed: Connection refused. [ 47] Unable to start LDAPS: Can't contact LDAP server [ 47] Unable to connect to LDAP (Active Directory) service on dns-0055-01.lm.Netapp.com (Error: Can't contact LDAP server) [ 49] TCP connection to ip 147.17x.12x.16x, port 636 failed: Connection refused. [ 52] Unable to start LDAPS: Can't contact LDAP server [ 52] Unable to connect to LDAP (Active Directory) service on dns-0055-02.lm.Netapp.com (Error: Can't contact LDAP server) [ 54] Successfully connected to...[Please refer to secd log for more detail!]