ドメインユーザがSystem ManagerまたはCLIを使用してストレージにログインできない
環境
- ONTAP 9
- ドメイントンネル
問題
- クラスタ管理LIFを別のノードに移行したあと、ドメインユーザがSystem ManagerまたはCLIを使用してストレージにログインできない。
- EMSから次のエラーが報告される
[node1: secd: secd.dns.server.timed.out:error]: DNS server 1.1.1.x did not respond to vserver = vs1 within timeout interval.
[node1: secd: secd.dns.srv.lookup.failed:error]: DNS server failed to look up service (_ldap._tcp.dc._msdcs.domain.com) for vserver (vs1) with error (Operation timed out).
[node1: secd: secd.cifsAuth.problem:error]: vserver (vs1) General CIFS authentication problem. Error: Ontap admin cifs authentication basic procedure failed [6354 ms] TCP connection to ip 1.1.1.x, port 88 failed: Operation timed out. [ 8391] TCP connection to ip 1.1.1.x, port 88 failed: Operation timed out. [ 10428] TCP connection to ip 1.1.1.x, port 88 failed: Operation timed out. [ 12465] TCP connection to ip 1.1.1.x, port 88 failed: Operation timed out. **[ 14467] FAILURE: Could not authenticate as 'user@domain': Cannot contact any KDC for requested realm (KRB5_KDC_UNREACH) [ 14467] Kerberos authentication failed. Trying NTLM [ 14467] Login attempt by domain user 'domain/user' using NTLMv2 style security [ 21787] Unable to contact DNS to discover domain controllers. [ 21787] Unable to make a connection (NetLogon:domain.COM), result: 6812 [ 21787] Ontap-admin-login-cifs failed [ 21787] Retry requested, but the retry window (7000 ms) has expired; giving up.