メインコンテンツまでスキップ

LDAP クライアントでの UNIX ユーザ名の変換が正しくないために失敗する

Views:
7
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:

環境

  • ONTAP 9
  • LDAPスキーマ
  • Windows AD LDAP

問題

ONTAP でディレクトリストアとして Microsoft Active Directory LDAP を使用すると、 UNIX ユーザクレデンシャルを取得できません。
 
::>set advanced
::*>vserver services access-check authentication show-creds -node <node> -vserver <svm> -unix-user-name <unix-user>
 
SecD ログに次のエラーが表示されます
[kern_secd:info:15834] Error: Get user credentials procedure failed
[kern_secd:info:15834] [ 38] Retrieved CIFS credentials via S4U2Self for full Windows user name 'test@NTAP.LOCAL'
[kern_secd:info:15834] [ 88] Trying to map 'NTAP\TEST' to UNIX user 'test' using implicit mapping
[kern_secd:info:15834] [ 101] Hostname found in Name Service Cache
[kern_secd:info:15834] [ 101] Resolved LDAP servers: 10.10.10.130. Vserver: 2
[kern_secd:info:15834] [ 101] Failed to initiate Kerberos authentication. Trying NTLM.
[kern_secd:info:15834] [ 102] Successfully connected to ip 10.10.10.130, port 3268 using TCP
[kern_secd:info:15834] **[ 109] FAILURE: User 'test' not found in UNIX authorization source LDAP.
[kern_secd:info:15834] [ 109] Entry for user-name: test not found in the current source: LDAP. Entry for user-name: test not found in any of the available sources
[kern_secd:info:15834] [ 112] Trying to map user to the default UNIX name 'pcuser'
[kern_secd:info:15834] [ 116] Using a cached connection to dc01.ntap.local
[kern_secd:info:15834] [ 118] User 'pcuser' not found in UNIX authorization source LDAP.
[kern_secd:info:15834] [ 118] Entry for user-name: pcuser not found in the current source: LDAP. Entry for user-name: pcuser not found in any of the available sources
[kern_secd:info:15834] [ 118] Name mapping for Windows user 'NTAP\TEST' failed. Mapped UNIX user 'pcuser' does not exist
CUSTOMER EXCLUSIVE CONTENT

Registered NetApp customers get unlimited access to our dynamic Knowledge Base.

New authoritative content is published and updated each day by our team of experts.

Current Customer or Partner?

Sign In for unlimited access

New to NetApp?

Learn more about our award-winning Support