secd.lsa.noServers、由于未知用户(krb5kdc_ERR_C_ORY_NOKNOKN)
适用场景
- ONTAP 9
- Domain Controller（域控制器）(DC)
问题描述
- 域用户向域控制器进行身份验证失败
- 持续显示"无一个LSA服务器..." 在：
EMS.LOG
4/24/2023 02:04:07 Node-01A EMERGENCY secd.lsa.noServers: None of the LSA servers configured for Vserver (<vserver_name>) are currently accessible via the network.
- 检查Vserver身份验证失败：
::*> vserver services access-check authentication get-dc-info -node <node_name> -vserver <vserver_name>Command failed : RPC call to SecD failed. RPC: "SecD Error: no server available". Reason: ""EMS.LOG在执行后中观察到的错误get-dc-info：
Thu Apr 06 12:18:30 +0100 [<node_name>: secd: secd.unexpectedFailure:debug]: vserver (<vserver_name>) Unexpected failure. Error: Get DC Info procedure failed [6 ms] Unknown user (KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN) [6] Failed to initiate Kerberos authentication. Trying NTLM. [7] Successfully connected to ip 10.1.1.1, port 389 using TCP [14] Unknown user (KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN) [14] Failed to initiate Kerberos authentication. Trying NTLM. [16] Unable to connect to LDAP (Active Directory) service on maindc1.main.dc.controller.local (Error: Invalid credentials) [22] Unknown user (KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN) [22] Failed to initiate Kerberos authentication. Trying NTLM. [23] Successfully connected to ip 10.1.1.1, port 389 using TCP [31] Unknown user (KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN) [31] Failed to initiate Kerberos authentication. Trying NTLM. [33] Unable to connect to LDAP (Active Directory) service on maindc2.main.domain.controller.local (Error: Invalid credentials) [33] No servers available for MS_LDAP_AD, vserver: 5, domain: main.domain.controller.local.**[33] FAILURE: Unable to make a connection (LDAP (Active Directory):MAIN.DOMAIN.CONTROLLER.LOCAL), result: 6940- 域控制器上确实存在CIFS服务器用户