域模式—使用开放目录对问题描述进行 CIFS 身份验证

适用场景

• ONTAP 9
• CIFS
• AppleConnect
• Apple Open Directory
• Kerberos 域模式

问题描述

• Kerberos 域身份验证成功，但用户的 CIFS 身份验证失败
• CIFS 身份验证失败，在 secd 日志中显示以下错误：
  • Error: Lookup of CIFS account name procedure failed
  • CIFS Name Lookup via LSAR_LOOKUP_NAMES - Client Ip = 17.234.60.105 User = APPLECONNECT\netapp_user
  • Could not find Windows name 'APPLECONNECT\netapp_user'
  • FAILURE: Unexpected state: Error 6915 at file:src/authorization/secd_cifs_authorization.cpp func:handleNfsV4NameToSid line:424
  • SECD 详细信息:

debug:  lookup for vserverId 3, name APPLECONNECT\netapp_user
ERR  :  RESULT_ERROR_SECD_ENTRY_NOT_FOUND:6915 in handleNfsV4NameToSid()
debug:  Not a special mode-bit name.
debug:  Not an NfsV4 name
ERR  :  RESULT_ERROR_SECD_ENTRY_NOT_FOUND:6915 in handleNfsV4NameToSid()
debug:  Not an NFSv4 regular name.
debug:  Cifs server is not joined to DOMAIN (Type 3). Not looking up the SID in DC.
ERR  :  RESULT_ERROR_SECD_USER_NOT_FOUND:6909 in getSidFromName()
info :  Could not find Windows name 'APPLECONNECT\netapp_user'
ERR  :  RESULT_ERROR_SECD_USER_NOT_FOUND:6909 in secd_rpc_auth_name_to_sid_1_svc()