LDAP制約違反が発生したというエラーでCIFSドメインの変更が失敗する
環境
- ONTAP 9
- CIFS
問題
- CIFSドメインの変更が次のエラーで失敗します。
UPL_INDCORPCLUSTER::*> cifs modify -vserver corpfiler07 -cifs-server CORPFILER07 -domain CORP.AD -status-admin up
In order to create an Active Directory machine account for the CIFS server, you must supply the name and password of a Windows account with sufficient privileges to
add computers to the "CN=Computers" container within the "CORP.AD" domain.
Enter the user name: P_CORP_WIN1_L3P@corp.ad
Enter the password:
Error: Machine account creation procedure failed
[ 72654] Loaded the preliminary configuration.
[ 72743] Successfully connected to ip 119.43.96.10, port 88 using
TCP
[ 73197] Successfully connected to ip 119.43.96.10, port 389 using
TCP
**[ 73216] FAILURE: Could not create account
** 'cn=CORPFILER07,CN=Computers,dc=CORP,dc=AD': an LDAP
** constraint violation occurred, which may indicate the
** supplied user has insufficient privilege to add an
** account in the specified organizational unit
Error: command failed: Failed to create the Active Directory machine account "CORPFILER07". Reason: LDAP Error: The user has insufficient access rights.
- SecDログには次のエラーが表示されます。
00000023.007ea5fa 04e3b38b Wed Apr 17 2024 16:09:13 +05:30 [kern_secd:info:13692] **[ 43437] FAILURE: Could not create account 'cn=CORPFILER07,CN=Computers,dc=CORP,dc=AD': an LDAP constraint violation occurred, which may indicate the supplied user has insufficient privilege to add an account in the specified organizational unit