升级ONTAP后、无法以LDAP用户身份登录
适用场景
- ONTAP 9及更高版本
- CIFS
- CVO
- 域控制器
问题描述
- 在ONTAP升级9.13.1P9后、无法以LDAP用户身份登录
- 在生成"
secd.conn.auth.failure
"消息之前显示"secd.ldap.noServers:EMERGENCY
"消息
secd.conn.auth.failure:notice]: Vserver (svm001) could not make a connection over the network to server (ip 10.4.62.140, port 445). Error: Operation timed out ().
secd: secd.lsa.noServers:EMERGENCY]: None of the LSA servers configured for Vserver (svm001) are currently accessible via the network.
- EMS日志:
secd: secd.unexpectedFailure:error]: Unexpected SecD failure in Vserver "svm001". Details: Error: Lookup of CIFS account name procedure failed
[31570 ms] TCP connection to ip 10.x.x.x, port 445 failed: Operation timed out.
[ 31571] Unable to connect to LSA service on domainl.com (Error: RESULT_ERROR_SPINCLIENT_UNABLE_TO_RESOLVE_SERVER)
[ 33573] TCP connection to ip 10.x.x.x, port 445 failed: Operation timed out.
[ 33574] Unable to connect to LSA service on domain.com (Error: RESULT_ERROR_SPINCLIENT_UNABLE_TO_RESOLVE_SERVER)
[ 35576] TCP connection to ip 10.x.x.x, port 445 failed: Operation timed out.
[ 35577] Unable to connect to LSA service on domain.com (Error:RESULT_ERROR_SPINCLIENT_UNABLE_TO_RESOLVE_SERVER)
**[ 35577] FAILURE: Unable to make a connection (LSA:MYL.COM), Result: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE
[ 35578] Could not find Windows name 'Domain\User'
[ 35578] CIFS name lookup failed [ 35578] Retry requested, but the retry window (7000 ms) has expired; giving up.
- 已将域发现模式设置为all