CIFS access delay occurs after removing old DC server from AD environment
Applies to
- ONTAP 9.1
- CIFS
- Domain Controller (DC) was removed from Active Directory (AD) environment
Issue
- CIFS access delays
secd.conn.auth.failure:error
in EMS log:
Tue Mar 16 15:45:17 JST [xxx-xxx: secd: secd.conn.auth.failure:error]: Vserver (xxyyyy) could not make a connection over the network to server (ip 10.xx.xx.151, port 88) via interface xx.xx.xx.x. Error: Operation timed out.
vserver cifs domain discovered-servers show
andCIFS-DOMAIN-DISCOVERED-SERVER.XML
does not show an entry of which Type isKERBEROS
for SVMsecd.log
indicates that many secd authentication entries remained in queue for more than 10 seconds:
Tue Mar 16 2021 09:05:33 +09:00 [kern_secd:info:7051] | [000.000.015] debug: Worker Thread 34638722560 processing RPC 151:secd_rpc_auth_extended with request ID:23652 which sat in the queue for 18 seconds. { in run() at src/server/secd_rpc_server.cpp:2067 }