メインコンテンツまでスキップ
NetApp Response to Russia-Ukraine Cyber Threat
In response to the recent rise in cyber threat due to the Russian-Ukraine crisis, NetApp is actively monitoring the global security intelligence and updating our cybersecurity measures. We follow U.S. Federal Government guidance and remain on high alert. Customers are encouraged to monitor the Cybersecurity and Infrastructure Security (CISA) website for new information as it develops and remain on high alert.

LDAP クライアントでの UNIX ユーザ名の変換が正しくないために失敗する

Views:
29
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:

環境

  • ONTAP 9
  • LDAPスキーマ
  • Windows AD LDAP

問題

ONTAP でディレクトリストアとして Microsoft Active Directory LDAP を使用すると、 UNIX ユーザクレデンシャルを取得できません。
 
::>set advanced
::*>vserver services access-check authentication show-creds -node <node> -vserver <svm> -unix-user-name <unix-user>
 
SecD ログに次のエラーが表示されます
[kern_secd:info:15834] Error: Get user credentials procedure failed
[kern_secd:info:15834] [ 38] Retrieved CIFS credentials via S4U2Self for full Windows user name 'test@NTAP.LOCAL'
[kern_secd:info:15834] [ 88] Trying to map 'NTAP\TEST' to UNIX user 'test' using implicit mapping
[kern_secd:info:15834] [ 101] Hostname found in Name Service Cache
[kern_secd:info:15834] [ 101] Resolved LDAP servers: 10.10.10.130. Vserver: 2
[kern_secd:info:15834] [ 101] Failed to initiate Kerberos authentication. Trying NTLM.
[kern_secd:info:15834] [ 102] Successfully connected to ip 10.10.10.130, port 3268 using TCP
[kern_secd:info:15834] **[ 109] FAILURE: User 'test' not found in UNIX authorization source LDAP.
[kern_secd:info:15834] [ 109] Entry for user-name: test not found in the current source: LDAP. Entry for user-name: test not found in any of the available sources
[kern_secd:info:15834] [ 112] Trying to map user to the default UNIX name 'pcuser'
[kern_secd:info:15834] [ 116] Using a cached connection to dc01.ntap.local
[kern_secd:info:15834] [ 118] User 'pcuser' not found in UNIX authorization source LDAP.
[kern_secd:info:15834] [ 118] Entry for user-name: pcuser not found in the current source: LDAP. Entry for user-name: pcuser not found in any of the available sources
[kern_secd:info:15834] [ 118] Name mapping for Windows user 'NTAP\TEST' failed. Mapped UNIX user 'pcuser' does not exist
Scan to view the article on your device
CUSTOMER EXCLUSIVE CONTENT

Registered NetApp customers get unlimited access to our dynamic Knowledge Base.

New authoritative content is published and updated each day by our team of experts.

Current Customer or Partner?

Sign In for unlimited access

New to NetApp?

Learn more about our award-winning Support