由于过时的 preferred-dc 导致 secd.ldap.noServers

最后更新
另存为PDF

Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用于

ONTAP 9
CIFS/SMB

问题描述

来自 EMS 日志的错误：

Sun Feb 29 00:39:15 +0200 [node-01: secd: secd.ldap.noServers:debug]: None of the LDAP servers configured for Vserver (vserver_name) are currently accessible via the network for LDAP service type (Service: LDAP (Active Directory), Operation: SiteDiscovery).

Sun Feb 29 00:44:25 +0200 [node-01: secd: secd.conn.auth.failure:debug]: Vserver (vserver_name) could not make a connection over the network to server (ip XX.XX.10.10, port 389). Error: Connection refused (Service: LDAP (Active Directory), Operation: SiteDiscovery).

Sun Feb 29 00:44:25 +0200 [node-01: secd: secd.conn.auth.failure:debug]: Vserver (vserver_name) could not authenticate over the network to server (DC071). Error: Can't contact LDAP server (Service: LDAP (Active Directory), Operation: SiteDiscovery).

要显示所有 DC：

::> cifs domain discovered-servers show -vserver vserver_name

Node: node-01

Vserver: vserver_name

Domain Name Type Preference DC-Name DC-Address Status

--------------- -------- ---------- --------------- --------------- ---------

OLD.DOMAIN.COM MS-LDAP adequate DC071 XX.XX.10.10 unavailable

trusted.local MS-LDAP preferred CIFS1.DOMAIN.COM 10.11.1.10 undetermined

trusted.local MS-LDAP preferred CIFS2.DOMAIN.COM 10.11.1.11 OK

trusted.local MS-DC preferred CIFS1.DOMAIN.COM 10.11.1.10 undetermined

trusted.local MS-DC preferred CIFS2.DOMAIN.COM 10.11.1.11 undetermined

要识别受信任的域：

::> vserver cifs domain trusts show -node node-01 -vserver vserver_name

Node: node-01

Vserver: vserver_name

Home Domain Trusted Domain

--------------------- -----------------------------------

DOMAIN.COM CIFS1.DOMAIN.COM,

CIFS2.DOMAIN.COM,

OLD.DOMAIN.COM