SAML 認証の設定が「 Invalid host 」エラーで失敗します

最後の更新
PDFとして保存

Views:: 17

Visibility:: Public

Votes:: 0

Category:: ontap-system-manager

Specialty:: OM

Last Updated:

環境

ONTAP System Manager 9.3 以降
Security Assertion Markup Language （ SAML ）

問題

SAML 認証を設定してクラスタの短縮名を使用して「ホストシステム」を追加すると、次のエラーが発生します。

Web UI エラー：
Invalid host specified for parameter -sp-host. Specify an address or fully qualified domain name that corresponds to a LIF with role cluster_mgmt.

クラスタ sysmgr.log: 00000030.0000e4ff 072b772e Mon Nov 16 2020 17:15:26 -05:00 [kern_sysmgr:info:11804] 10.x.x.x|admin|UsageRecord :ocsm.mfa.idp.configure.request accessed 00000030.0000e50a 072b772e Mon Nov 16 2020 17:15:27 -05:00 [kern_sysmgr:info:11804] 10.x.x.x|admin|INFO|1605564067879|Mon Nov 16 2020,17:14:49.533||[MFA]Configuring MFA IdP... 00000030.0000e50b 072b772e Mon Nov 16 2020 17:15:27 -05:00 [kern_sysmgr:info:11804] 10.x.x.x|admin|INFO|1605564067879|Mon Nov 16 2020,17:14:49.534||[security-saml-sp-create-async]API request start: security-saml-sp-create-async 00000030.0000e50c 072b772e Mon Nov 16 2020 17:15:27 -05:00 [kern_sysmgr:info:11804] 10.x.x.x|admin|INFO|1605564067879|Mon Nov 16 2020,17:14:49.596||[security-saml-sp-create-async]API response received: security-saml-sp-create-async 00000030.0000e50d 072b772e Mon Nov 16 2020 17:15:27 -05:00 [kern_sysmgr:error:11804] 10.x.x.x|admin|ERROR|1605564067879|Mon Nov 16 2020,17:14:49.597||[security-saml-sp-create-async]security-saml-sp-create-async failed: Invalid host specified for parameter "-sp-host". Specify an address or fully qualified domain name that corresponds to a LIF with role "cluster_mgmt". (13001) 00000030.0000e50e 072b772e Mon Nov 16 2020 17:15:27 -05:00 [kern_sysmgr:error:11804] 10.x.x.x|admin|ERROR|1605564067879|Mon Nov 16 2020,17:14:49.597||UsageRecord :ocsm.mfa.visit accessed 00000030.0000e50f 072b772e Mon Nov 16 2020 17:15:27 -05:00 [kern_sysmgr:info:11804] 10.x.x.x|admin|INFO|1605564067879|Mon Nov 16 2020,17:14:49.598||[security-saml-sp-get]API request start: security-saml-sp-get 00000030.0000e510 072b772e Mon Nov 16 2020 17:15:27 -05:00 [kern_sysmgr:error:11804] 10.x.x.x|admin|ERROR|1605564067879|Mon Nov 16 2020,17:14:49.597||UsageRecord :ocsm.mfa.configure.failure accessed 00000030.0000e511 072b772e Mon Nov 16 2020 17:15:27 -05:00 [kern_sysmgr:info:11804] 10.x.x.x|admin|INFO|1605564067879|Mon Nov 16 2020,17:14:49.617||[security-saml-sp-get]API response received: security-saml-sp-get 00000030.0000e512 072b772e Mon Nov 16 2020 17:15:27 -05:00 [kern_sysmgr:error:11804] 10.x.x.x|admin|ERROR|1605564067879|Mon Nov 16 2020,17:14:49.618||[security-saml-sp-get]security-saml-sp-get failed: entry doesn't exist (15661) 00000030.0000e514 072b772e Mon Nov 16 2020 17:15:27 -05:00 [kern_sysmgr:error:11804] 10.x.x.x|admin|ERROR|1605564067879|Mon Nov 16 2020,17:14:49.618||[MFA]Failed to get MFA details. 00000030.0000e515 072b772e Mon Nov 16 2020 17:15:27 -05:00 [kern_sysmgr:error:11804] 10.x.x.x|admin|ERROR|1605564067879|Mon Nov 16 2020,17:14:49.597||UsageRecord :ocsm.mfa.IdPnotconfigured accessed 00000030.0000e516 072b772e Mon Nov 16 2020 17:15:27 -05:00 [kern_sysmgr:info:11804] 10.x.x.x|admin|INFO|1605564067879|Mon Nov 16 2020,17:14:49.618||[MFA]MFA is not configured 00000030.0000e517 072b772e Mon Nov 16 2020 17:15:27 -05:00 [kern_sysmgr:error:11804] 10.x.x.x|admin|ERROR|160
クラスタ mgwd.log: 00000030.0000e502 072b772e Mon Nov 16 2020 17:15:26 -05:00 [kern_mgwd:info:2311] 0x81f078e00: 8503e80000000029: ERR: saml_ui: get_lif_role:src/saml/saml_ui.cc:227 Failed to get a lif; Error entry doesn't exist.