由于查询MSDS-PrincipalName时LDAP超时、无法访问CIFS共享

最后更新
另存为PDF

Views:: 4

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: cifs<a>ONTAP 9</a><a>LDAP</a><a>2008858303</a><a>MSDS-PrincipalName</a><a>用于翻译</a>

Last Updated:

适用场景

LDAP
ONTAP 9

问题描述

用户无法访问CIFS共享。
LDAP身份验证超时并出现错误：result_error_ldapServer_inappropriate_matching和result_error_scd_connection_wait超时。

SECD日志：

 Searching LDAP for the "sAMAccountName" attribute(s) within base "dc=us,dc=netapp,dc=com" (scope: 2) using filter: (&(objectClass=User)(msDS-PrincipalName=netapp\test_user$)) { in searchLdap() at src/utils/secd_ldap_utils.cpp:312 } info : LDAP search for the "sAMAccountName" attribute(s) within base "dc=us,dc=bank-dns,dc=com" (scope: 2) using filter "(&(objectClass=User)(msDS-PrincipalName=us\test_user$))" failed with error: Inappropriate matching { in searchLdap() at src/utils/secd_ldap_utils.cpp:394 } info : Additional info: 0000216B: AtrErr: DSID-03140525, #1: ^I0: 0000216B: DSID-123456789, problem 1004 (WRONG_MATCH_OPER), data 0, Att 90749 (msDS-PrincipalName){ in searchLdap() at src/utils/secd_ldap_utils.cpp:397 } ERR : RESULT_ERROR_LDAPSERVER_INAPPROPRIATE_MATCHING:7617 in searchLdap() at src/utils/secd_ldap_utils.cpp:400 ERR : searchLdap: LDAP Error: (18): 'Inappropriate matching': ERR : RESULT_ERROR_LDAPSERVER_INAPPROPRIATE_MATCHING:7617 in getLdapMappedUnixUserName() at src/name_mapping/secd_ldap_name_mapping.cpp:195 ERR : RESULT_ERROR_LDAPSERVER_INAPPROPRIATE_MATCHING:7617 in mapNameViaLdap() at src/name_mapping/secd_name_mapping.cpp:546 ERR : RESULT_ERROR_LDAPSERVER_INAPPROPRIATE_MATCHING:7617 in getAppropriateWindowsToUnixMapping() at src/name_mapping/secd_name_mapping.cpp:786