失敗: DNS にアクセスしてドメインコントローラを検出できません
環境
- ONTAP 9
- CIFS / SMB
問題
- 一部の処理では、ONTAPがActive Directoryドメインコントローラに接続する必要があります。
次に例を示します。
- ADマシンアカウントの作成
- ローカルグループへのADユーザアカウントの追加
- AD DCに接続するための前提条件として、ONTAPはAD DCを検出するためにDNSサーバに接続する必要があります。
ONTAPがDNSサーバに接続できない場合は処理が失敗し、ONTAPはFAILURE: Unable to contact DNS to discover domain controllers
EMSとSECDに次のように記録します。
次に例を示します。
Error: Lookup of CIFS account name procedure failed
**[ 7061] FAILURE: Unable to contact DNS to discover domain controllers.
[ 7062] Unable to make a connection (LSA:AHN.ORG), Result: RESULT_ERROR_DNS_CANT_REACH_SERVER
[ 7064] Could not find Windows name 'AHN\APPVNS'
[ 7064] CIFS name lookup failed
[ 7065] Retry requested, but the retry window (7000 ms) has expired; giving up.
Error when creating - Failed to create the Active Directory machine account "SVM1".
Reason: SecD Error: no server available
Details: Error: Machine account creation procedure failed
[ 0 ms] Trying to create machine account 'SVM1' in 'DOMAIN.COM' for Vserver 'SVM1'
[ 2009] Failed to connect to 1.2.3.4 for DNS via Source Address 1.2.3.5: Operation timed out
[ 4019] FAILURE: Unable to contact DNS to discover domain controllers.
[ 4019] Unable to connect to any (0) domain controllers.
[ 4019] 'NisDomain' configuration not available
[ 4019] NIS configuration not found for Vserver 4
[ 6029] Failed to connect to 1.2.3.6 for DNS via Source Address 1.2.3.5: Operation timed out
[ 6029] Unable to contact DNS to discover domain controllers.
[ 8039] Failed to connect to 1.2.3.7 for DNS via Source Address 1.2.3.5: Operation timed out
[ 8039] Unable to contact DNS to discover domain controllers.
[ 10049] Failed to connect to 1.2.3.8 for DNS via Source Address 1.2.3.5: Operation timed out
[ 10049] Unable to contact DNS to discover domain controllers.
[ 10049] No servers available for MS_LDAP_AD, vserver: 4, domain: DOMAIN.COM.