メインコンテンツへスキップ

AD内で一部のSIDが見つかりません。解決できません

Views:
77
Visibility:
Public
Votes:
0
Category:
cloud-volumes-ontap-cvo
Specialty:
cloud<a>2009349203</a>
Last Updated:

環境

  • Cloud Volumes ONTAP(CVO)
  • Active Directory ( AD )
  • CIFS
  • NFS

問題

  • ADで一部のSIDが見つかりません。解決できません。
  • そのCVOではNFSは使用されていませんが、EMSログに次の情報が表示されます。
11/1/202211:15:07  EAZNACVO01SP-01 ERROR         secd.nfsAuth.problem:vserver (svm1) General NFS authorization problem. Error: Get usercredentials procedure failed

**[ 5728] FAILURE: Timed out waiting for a LSA connection after 5 seconds

[  5728] Unable to make a connection (LSA:XX.XXX.XXXXX.COM), result: 7015

[  5732] Could not find Windows SID'S-1-5-21-XXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXXX'

  • SecDログには、次のような多くのエラーが表示されます。

[kern_secd:info:9554] .------------------------------------------------------------------------------.
[kern_secd:info:9554] |                                 RPC FAILURE:                                 |
[kern_secd:info:9554] |                      secd_rpc_auth_get_creds has failed                      |
[kern_secd:info:9554] |                        Result = 0, RPC Result = 6909                         |
[kern_secd:info:9554] |                   RPC received at Sat Nov  5 15:45:01 2022                   |
[kern_secd:info:9554] |------------------------------------------------------------------------------'
[kern_secd:info:9554] Failure Summary:
[kern_secd:info:9554] Error: Get user credentials procedure failed
[kern_secd:info:9554]   [ 50 ms] Using a cached connection to XXXXXXX.XX.XX.XXXXX.com
[kern_secd:info:9554]   [   105] Could not find Windows SID 'S-1-5-21-XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX'
[kern_secd:info:9554] **[   105] FAILURE: Unexpected state: Error 6909 at file:src/utils/secd_cifs_utils.cpp func:lookupSid line:561
[kern_secd:info:9554] **[   106] FAILURE: Error case not correctly journaled
[kern_secd:info:9554] Details:

  • Sktraceログには、次のような多くのエラーが表示されます。

2022-11-10T15:45:35Z 316493109266443      [4:0] NBLADE_Chk:  n0xb5888a: src/Protocols/Cifs/Support/Smb2Utils.cpp:1249 rt=7303
2022-11-10T15:45:35Z 316493109270220      [4:0] NBLADE_Chk:  n0xb50aea: src/Protocols/Cifs/SmbRequests/Smb2SetInfoCmd.cpp:745 rt=7303
2022-11-10T15:45:35Z 316493109271894      [4:0] NBLADE_Chk:  n0xb4e047: src/Protocols/Cifs/SmbRequests/Smb2SetInfoCmd.cpp:243 rt=7303

  • また、特定のEMSログエントリが表示された場合、要求数によってドメインコントローラが過負荷になる可能性があります。

|                                 RPC FAILURE:                                 |
|                      secd_rpc_auth_get_creds has failed                      |
|                        Result = 0, RPC Result = 7015                         |
|                   RPC received at Wed Nov  9 15:16:25 2022                   |
|------------------------------------------------------------------------------
Failure Summary:
Error: Get user credentials procedure failed
**[  5487] FAILURE: Timed out waiting for a LSA connection after 5 seconds
   [  5487] Unable to make a connection (LSA:XXXXXXX.XX.XX.XXXXX.com), result: 7015
   [  5491] Could not find Windows SID 'S-1-5-21-XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX'
Details:
| [000.000.011]  debug:  Worker Thread 34510491136 processing RPC 153:secd_rpc_auth_get_creds(caller: NBLADE_CIFS) with request ID:8924 which sat in the queue for

|[000.000.020]デバッグ:クライアントIPが要求に見つかりました:{in secd_rpc_auth_get_creds_1_svc_secd()at src/authorization/secd_rpc_authorization.cpp:1443}

| [000.000.027]  debug:  Setting thread context. VServerId = 3 (name='svm1'), Protocol = CIFS, lifId = 0  { in setThreadContext() at
| [000.000.035]  debug:  secd_rpc_auth_get_creds_1_svc called with vserverid = 3  { in secd_rpc_auth_get_creds_1_svc_secd() at
| [000.000.039]  debug:  Getting creds for VserverId: 3  { in secd_rpc_auth_get_creds_1_svc_secd() at src/authorization/secd_rpc_authorization.cpp:1450 }
| [000.000.078]  debug:  Not a CIFS SID.  { in handleCifsFakedSidToName() at src/authorization/secd_cifs_authorization.cpp:813 }
| [000.000.087]  debug:  Not an NfsV4 SID.  { in handleNfsV4SidToName() at src/authorization/secd_cifs_authorization.cpp:1067 }
| [000.000.100]  debug:  Looking for LSA cache (key: "XX.XXX.XXXXX.com") in vserver 3  { in getConnectionCache() at
| [005.486.707]  ERR  :  Timed out waiting for a LSA connection after 5 seconds { in grab() at src/connection_manager/secd_connection_cache.cpp:111 }
| [005.486.714]  ERR  :  RESULT_ERROR_SECD_CONNECTION_WAIT_TIMEOUT:7015 in grab() at src/connection_manager/secd_connection_cache.cpp:112
| [005.486.731]  ERR  :  RESULT_ERROR_SECD_CONNECTION_WAIT_TIMEOUT:7015 in getConnection() at src/connection_manager/secd_connection_manager.cpp:598
| [005.486.738]  ERR  :  Unable to make a connection (LSA:XXXXXXX.XX.XX.XXXXX.com), result: 7015 { in getConnection() at
| [005.490.363]  debug:  Vserver's operational state: running  { in isVserverRunning() at src/configuration_manager/secd_configuration_manager.cpp:2765 }
| [005.490.383]  debug:  Logged secd.lsa.noServers to EMS  { in logEmsEventForLsaError() at src/utils/secd_ems_utils.cpp:559 }
| [005.490.389]  ERR  :  RESULT_ERROR_SECD_CONNECTION_WAIT_TIMEOUT:7015 in getLsaConnection() at src/connection_manager/secd_connection_manager.cpp:105
| [005.490.394]  ERR  :  RESULT_ERROR_SECD_CONNECTION_WAIT_TIMEOUT:7015 in getNameFromSid() at src/authorization/secd_cifs_authorization.cpp:650
| [005.490.401]  info :  Could not find Windows SID 'S-1-5-21-XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX' { in getNameFromSid() at
| [005.490.413]  ERR  :  RESULT_ERROR_SECD_CONNECTION_WAIT_TIMEOUT:7015 in secd_rpc_auth_get_creds_1_svc_secd() at src/authorization/secd_rpc_authorization.cpp:155
| [005.490.430]  debug:  SecD RPC Server sending reply to RPC 153: secd_rpc_auth_get_creds  { in secdSendRpcResponse() at src/server/secd_rpc_server.cpp:2153 }
| [005.490.467]  ERR  :  RESULT_ERROR_SECD_CONNECTION_WAIT_TIMEOUT:7015 in getFailureCode() at src/utils/secd_thread_task_journal.cpp:348
| [005.492.747]  debug:  Vserver's operational state: running  { in isVserverRunning() at src/configuration_manager/secd_configuration_manager.cpp:2765 }
| [005.492.765]  debug:  Logged unhandled NFS auth failure code '7015' to EMS using the EMS_secd_nfsAuth_problem EMS  { in logEmsEventWithJournalForNfsAuthError()

  • NFSを介して共有されるCIFS共有でのユーザ名のマッピングが原因で、データ移行時のレイテンシが高く、スループットが遅い。ユーザマッピングとACLのチェックによってLDAPサーバが過負荷になる

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.

 

  • この記事は役に立ちましたか?