メインコンテンツまでスキップ

SVMが誤ったLIFを使用してネームサーバ(DNS / DC / LDAP)と接続しているとCIFS共有にアクセスできない

Views:
194
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas<a>2009233954</a>
Last Updated:

環境

ONTAP 9.2-9.10

問題

  • ONTAPのアップグレードまたはLIFの移行後、 WindowsクライアントからIPアドレスを使用してCIFS共有にアクセスできない、およびSVMでDNSチェックが失敗します。
  • SVMには複数のLIFがあり(それぞれ異なるネットワーク上の各LIF)、デフォルトルートは両方のLIFに対して同じメトリックを使用して設定されます。
  • SVMの複数のLIFが存在しない場合、ネットワーク内のDNS / LDAP / DCサーバとの通信に使用できるLIFは1つだけです。
  • イベントログには、DNSおよびLDAPへの接続に失敗し、「Operational timed out」というエラーが表示されます。
  • ストレージがDNSに接続してドメインコントローラを検出し、ユーザを認証できないため、CIFS認証に失敗しました。
  • ログ
7/11/2022 10:20:26 node-02 ERROR secd.cifsAuth.problem: vserver (vserver1) General CIFS authentication problem. Error: User authentication procedure failed
CIFS SMB1 Share mapping - Client Ip = 10.1.10.x
[ 0 ms] Login attempt by domain user 'Domain/user1' using NTLMv2 style security
[ 2003] TCP connection to ip 10.1.2.x, port 389 failed: Operation timed out.
[ 2003] LDAP search for the "dnsHostName" attribute(s) within base "" (scope: 0) using filter "(objectClass=*)" failed with error: Can't contact LDAP server
[ 4004] TCP connection to ip 10.1.2.x, port 389 failed: Operation timed out.
[ 4004] LDAP search for the "dnsHostName" attribute(s) within base "" (scope: 0) using filter "(objectClass=*)" failed with error: Can't contact LDAP server
[ 6005] TCP connection to ip 10.1.2.x, port 389 failed: Operation timed out.
[ 6005] LDAP search for the "dnsHostName" attribute(s) within base "" (scope: 0) using filter "(objectClass=*)" failed with error: Can't contact LDAP server
[ 8009] Failed to connect to 10.1.2.x for DNS via Source Address 10.1.1.x: Operation timed out
[ 9010] Failed to connect to 10.1.2.x for DNS via Source Address 10.1.1.x: Operation timed out
**[ 9012] FAILURE: Unable to contact DNS to discover domain controllers.
[ 9013] Unable to make a connection (NetLogon:DOMAIN.COM), result: 6812
[ 9015] CIFS authentication failed
[ 9015] Retry requested, but the retry window (7000 ms) has expired; giving up.

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.