警报EMS消息- secd.dc.out.of.pipe.instances

适用场景

• ONTAP 9及更高版本
• Microsoft Active Directory
• Microsoft Active Directory域控制器(DC)
• NTLM 身份验证

问题描述

• 由于NTLM身份验证失败、CIFS访问失败。
• 可能会显示EMS日志消息：  

  Event Name: secd.dc.out.of.pipe.instances Event Description: This message occurs when the Windows Domain Controller (DC), while responding to an MSRPC request from ONTAP, returns an error indicating that it ran out of pipe instances in the listening state. This can occur when the requests from ONTAP are received by the DC during a timing window, when the limited number of listening pipe instance are already allocated to other requests. Such errors received by ONTAP might result in longer CIFS/NFS authentication and/or access times, potentially resulting in client timeouts.
• PCAP显示域控制器正在发送Error: STATUS_PIPES_NOT_AVAILABLE
•  有关   EMS中secd.dc.out.of.pipe.instances 时间的SECD日志

[kern_secd:info:11767] | [001.524.340] debug: Retrying Smb2NtCreateAndXFile to account for PIPE NOT AVAILABLE error { in Smb2NtCreateAndXFile() at src/Actions/ActionsONTAP.cpp:3094 } [kern_secd:info:11767] | [001.524.484] ERR : Encountered NT error (NT_STATUS_PIPE_NOT_AVAILABLE) for SMB command Create { in LogNtStatusCode() at src/Commands/Commands.cpp:609 } [kern_secd:info:11767] | [001.524.488] ERR : SMB2 response has NT error 0xc00000ac { in ParseSmb2HeaderResponse() at src/Smb2/Smb2Utils.cpp:497 } [kern_secd:info:11767] | [001.524.492] ERR : Encountered NT error (NT_STATUS_PIPE_NOT_AVAILABLE) for SMB command Create { in LogNtStatusCode() at src/Commands/Commands.cpp:609 } [kern_secd:info:11767] | [001.524.495] ERR : RESULT_ERROR_SPINCLIENT_CMD_FAILED:6763 in CheckSmbStatusWrapper() at src/Commands/Commands.cpp:1129

追加信息

• 建议使用以下解决方法作为临时修复方法、直到基本问题得到解决为止：

  • 由于依赖于网络登录管道、请避免使用NTLM身份验证

  • 如果未配置首选DC、请配置多个首选DC以绕过受影响的域控制器

  • 如果所有首选DC都受到影响、请禁用首选DC 

• NetNamedPipeBinding.MaxConnections属性(System.ServiceModel)

• [MS-ERRE0]：NTSTATUS值| Microsoft了解