アーカイブ済み：ONTAP 9.12.1P2へのアップグレード後にCIFS共有を使用できない

最後の更新
PDFとして保存

Views:: 33

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nas<a>アーカイブ</a><a>：2009549229</a>

Last Updated:

原題はAndre Knaup

アーカイブの理由： https://kb.netapp.com/on-prem/ontap/...s/CONTAP-81008に複製

環境

ONTAP 9.12.1P2
ONTAP 9.12.1P1
CIFS / SMB
LDAP

問題

単純なSASLバインド中に、ONTAPはDNSサーバに接続してノード名を解決します。これにより、LDAP SASLバインドの遅延や失敗が発生する可能性があります。

EMS ログのエラー：

[?] Fri Apr 21 07:31:37 +0300 [node_01: secd: secd.dns.server.timed.out:error]: DNS server 10.10.XX.XX did not respond to vserver = vserver_1 within timeout interval.

[?] Fri Apr 21 07:31:41 +0300 [node_01: secd: secd.ldap.sasl.bind.delayed:error]: LDAP SASL bind taking longer time on server "10.110.10.41" for Vserver "vserver_1".

[?] Fri Apr 21 07:31:48 +0300 [node_01: secd: secd.ldap.sasl.bind.delayed:error]: LDAP SASL bind taking longer time on server "10.110.10.42" for Vserver "vserver_1".

[?] Fri Apr 21 07:31:55 +0300 [node_01: secd: secd.ldap.sasl.bind.delayed:error]: LDAP SASL bind taking longer time on server "10.110.10.43" for Vserver "vserver_1".

[?] Fri Apr 21 07:31:55 +0300 [node_01: secd: secd.ldap.noServers:EMERGENCY]: None of the LDAP servers configured for Vserver (vserver_1) are currently accessible via the network for LDAP service type (Service: LDAP (Active Directory), Operation: ADgetClaimName).

SECD ログには、ONTAPがDNSへのクエリを実行して domain.corp.testdomain.com おり、DNSサーバにDNSレコードがないために失敗していることが示されています。

ERR  :  LDAP SASL bind taking long time(6 secs)  { in ldapSaslBindGssapi() at src/connection_manager/secd_connection.cpp:653 }

debug:  Vserver's operational state: running  { in isVserverRunning() at src/configuration_manager/secd_configuration_manager.cpp:2807 }

debug:  Logged secd.ldap.sasl.bind.delayed to EMS  { in logEmsEventForLdapError() at src/utils/secd_ems_utils.cpp:534 }

ERR  :  RESULT_ERROR_LDAPSERVER_SASL_BIND_TIMEOUT:7660 in ldapSaslBindGssapi() at src/connection_manager/secd_connection.cpp:661

ERR  :  RESULT_ERROR_LDAPSERVER_SASL_BIND_TIMEOUT:7660 in ldapSaslBind() at src/connection_manager/secd_connection.cpp:1129

ERR  :  RESULT_ERROR_LDAPSERVER_SASL_BIND_TIMEOUT:7660 in ldapConnectAD() at src/connection_manager/secd_connection.cpp:1255

ERR : RESULT_ERROR_LDAPSERVER_SASL_BIND_TIMEOUT:7660 in connect() at src/connection_manager/secd_connection.cpp:2517

info : Unable to start LDAPS: (null) { in connect() at src/connection_manager/secd_connection.cpp:2647 }

debug: LDAP TLS Alert generated is 'warning:close notify'

info :  Unable to connect to LDAP (Active Directory) service on domain.corp.testdomain.com { in addFailedConnectionJournal() at src/connection_manager/secd_connection_manager.cpp:553 }

ERR  :  RESULT_ERROR_LDAPSERVER_SASL_BIND_TIMEOUT:7660 in makeConnectionAttempt() at src/connection_manager/secd_connection_manager.cpp:1033