由于DC上的证书已过期且未知、secd.ldap.noServers事件
适用场景
- ONTAP 9
- Lightweight Directory Access Protocol（轻量目录访问协议）(LDAP)
- Domain Controller（域控制器）(DC)
问题描述
- 在EMS中、可以观察到以下事件：
secd.ldap.noServers: None of the LDAP servers configured for Vserver (SVM1) are currently accessible via the network for LDAP service type (Service: LDAP (Active Directory), Operation: SiteDiscovery)- 在尝试TLS身份验证时、我们会在SecD日志中看到以下错误：
Wed May 08 2024 13:57:27 +01:00 [kern_secd:info:14596] | [000.227.466] debug: LDAP TLS Alert generated is 'fatal:certificate expired'Mon May 27 2024 12:46:08 +01:00 [kern_secd:info:14423] | [000.052.789] debug: LDAP TLS Alert generated is 'fatal:unknown CA'Mon May 27 2024 12:46:08 +01:00 [kern_secd:info:14423] | [000.052.893] info : Additional info: error:0A000086:SSL routines::certificate verify failed (unable to get issuer certificate) { in ldapInitialize() at src/connection_manager/secd_connection.cpp:2406 }