メインコンテンツまでスキップ
Effective December 3 - NetApp adopts Microsoft’s Business-to-Customer (B2C) identity management to simplify and provide secure access to NetApp resources. For accounts that did not pre-register (prior to Dec 3) access to your NetApp data may take up to 1 hour as your legacy NSS ID is synchronized to the new B2C identity. To learn more, Read the FAQ and Watch the video.

Realm モード - Open Directory を使用した CIFS 認証問題

Views:
2
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
cifs
Last Updated:

環境

  • ONTAP 9
  • CIFS
  • AppleConnect
  • Apple Open Directory の略
  • Kerberos Realm モード

問題

  • Kerberos Realm 認証は成功しましたが、ユーザが CIFS 認証に失敗しています
  • SecD ログで CIFS 認証が失敗し、次のエラーが発生する:
    • Error: Lookup of CIFS account name procedure failed
    • CIFS Name Lookup via LSAR_LOOKUP_NAMES - Client Ip = 17.234.60.105 User = APPLECONNECT\netapp_user
    • Could not find Windows name 'APPLECONNECT\netapp_user'
    • FAILURE: Unexpected state: Error 6915 at file:src/authorization/secd_cifs_authorization.cpp func:handleNfsV4NameToSid line:424
    • SECD の詳細:

debug:  lookup for vserverId 3, name APPLECONNECT\netapp_user
ERR  :  RESULT_ERROR_SECD_ENTRY_NOT_FOUND:6915 in handleNfsV4NameToSid()
debug:  Not a special mode-bit name.
debug:  Not an NfsV4 name
ERR  :  RESULT_ERROR_SECD_ENTRY_NOT_FOUND:6915 in handleNfsV4NameToSid()
debug:  Not an NFSv4 regular name.
debug:  Cifs server is not joined to DOMAIN (Type 3). Not looking up the SID in DC.
ERR  :  RESULT_ERROR_SECD_USER_NOT_FOUND:6909 in getSidFromName()
info :  Could not find Windows name 'APPLECONNECT\netapp_user'
ERR  :  RESULT_ERROR_SECD_USER_NOT_FOUND:6909 in secd_rpc_auth_name_to_sid_1_svc()

 

CUSTOMER EXCLUSIVE CONTENT

Registered NetApp customers get unlimited access to our dynamic Knowledge Base.

New authoritative content is published and updated each day by our team of experts.

Current Customer or Partner?

Sign In for unlimited access

New to NetApp?

Learn more about our award-winning Support