Skip to main content
NetApp Knowledge Base

CIFS access delay occurs after removing old DC server from AD environment

Views:
430
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:

Applies to

  • ONTAP 9.1
  • CIFS
  • Domain Controller (DC) was removed from Active Directory (AD) environment

Issue

  • CIFS access delays
  • secd.conn.auth.failure:error in EMS log:

Tue Mar 16 15:45:17 JST [xxx-xxx: secd: secd.conn.auth.failure:error]: Vserver (xxyyyy) could not make a connection over the network to server (ip 10.xx.xx.151, port 88) via interface xx.xx.xx.x. Error: Operation timed out.

  • vserver cifs domain discovered-servers show and CIFS-DOMAIN-DISCOVERED-SERVER.XML does not show an entry of which Type is KERBEROS for SVM
  • secd.log indicates that many secd authentication entries remained in queue for more than 10 seconds:

Tue Mar 16 2021 09:05:33 +09:00 [kern_secd:info:7051] | [000.000.015]  debug:  Worker Thread 34638722560 processing RPC 151:secd_rpc_auth_extended with request ID:23652 which sat in the queue for 18 seconds.  { in run() at src/server/secd_rpc_server.cpp:2067 }

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.
  • Was this article helpful?