CIFSの作成が「certificate verify failed」というエラーで失敗する

最後の更新
PDFとして保存

Views:: 38

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nas<a>2009153443</a>

Last Updated:

環境

ONTAP 9
CIFS
LDAPS
証明書SSL

問題

証明書の確認に失敗したLDAPSを使用してSVMに参加できないというエラー

::> vserver cifs security show -vserver svm1 -fields use-ldaps-for-ad-ldap
 vserver use-ldaps-for-ad-ldap
 ------- ---------------------
 svm1   true

::> vserver cifs create -vserver svm1 -cifs-server cifs01 -domain example.com
 Error: Machine account creation procedure failed
 [ 26699] Successfully connected to ip 192.168.0.20, port 636 using TCP
 [ 27040] Required certificate with CA Certificate1 Racine is not installed
 [ 27042] Unable to start LDAPS: Can't contact LDAP server
 [ 27042] Additional info: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
 [ 27042] Unable to connect to LDAP (Active Directory) service on dc.example.com (Error: Can't contact LDAP server)
 [ 27042] FAILURE: Unable to make a connection (LDAP (ActiveDirectory):EXAMPLE.COM), result: 7642

Secd ログ：

debug: LDAP TLS Alert generated is 'fatal:unknown CA'