由于无法访问DNS、无法从CIFS共享上的安全选项卡修改权限
适用场景
- ONTAP 9.
- CIFS
- DNS
问题描述
- 无法从Windows资源管理器上的"安全"选项卡修改CIFS共享上的权限、收到以下错误消息。
The program cannot open the required dialog box because it cannot determine whether the computer named “cifs-server” is joined to a domain. Close this message, and try again.
dns check对于、Vserver显示服务器已关闭且操作超时。
cluster::*> dns check -vserver vs_name
Name Server
Vserver Name Server Status Status Details
-------- ------------ ------------ ----------------------------
Vs_name 10.2.x.y down Operation timed out.
Vs_name 10.2.x.z down Operation timed out.
2 entried were displayed.
- 未添加首选DC。
access-check对于Windows、用户无法提取详细信息、并显示错误""Unable to contact DNS
cluster::*> vserver services access-check authentication show-creds -vserver vs_name -win-name domain\username -node node1
Vserver : vs_name (internal ID: x)
Error: Get user credentials procedure failed
[ 0 ms] Using cached S-1-x-21-xxxxx-xxx-xxx-xxx
x to 'domain\username' mapping
[ x00x] Failed to connect to 10.2.x.y for DNS via Source Address
10.2.x.yy: Operation timed out
[ x00x] Failed to connect to 10.2.x.z for DNS via Source Address
10.2.x.yy: Operation timed out
**[ x00x] FAILURE: Unable to contact DNS to discover domain
** controllers.
[x00x] Unable to make a connection (LDAP (Active
Directory):domain), result: 6812
[x00x] Could not get credentials for windows user 'username'
or SID 'S-1-x-21-xxxxx-xxx-xxx-xxx'
Error: command failed: Failed to get user credentials. Reason: "Unable to contact DNS"
- 在与DNS服务器超时相关的事件日志显示中会出现以下错误。
9/21/2023 13:27:32 node-01 ERROR secd.dns.server.timed.out: DNS server 10.2.x.y did not respond to vserver = vs_name within timeout interval.
9/21/2023 13:26:01 node-01 ERROR secd.dns.server.timed.out: DNS server 10.2.x.z did not respond to vserver = vs_name within timeout interval.
9/21/2023 13:25:37 node-01 ERROR secd.cifsAuth.problem: vserver (vs_name) General CIFS authentication problem. Error: User authentication procedure failed
9/21/2023 13:25:02 node-01 ERROR secd.dns.srv.lookup.failed: DNS server failed to look up service (_ldap._tcp.domain.com) for vserver (vs_name) with error (Operation timed out).