Skip to main content
NetApp Knowledge Base

LDAP client UNIX user name translation fails due to incorrect LDAP schema

Views:
127
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:

Applies to

  • ONTAP 9
  • LDAP schema
  • Windows AD LDAP

Issue

Using Microsoft Active Directory LDAP as a Directory Store, ONTAP fails to retrieve the UNIX user credential.
 
::>set advanced
::*>vserver services access-check authentication show-creds -node <node> -vserver <svm> -unix-user-name <unix-user>
 
SecD log shows the following error
[kern_secd:info:15834] Error: Get user credentials procedure failed
[kern_secd:info:15834] [ 38] Retrieved CIFS credentials via S4U2Self for full Windows user name 'test@NTAP.LOCAL'
[kern_secd:info:15834] [ 88] Trying to map 'NTAP\TEST' to UNIX user 'test' using implicit mapping
[kern_secd:info:15834] [ 101] Hostname found in Name Service Cache
[kern_secd:info:15834] [ 101] Resolved LDAP servers: 10.10.10.130. Vserver: 2
[kern_secd:info:15834] [ 101] Failed to initiate Kerberos authentication. Trying NTLM.
[kern_secd:info:15834] [ 102] Successfully connected to ip 10.10.10.130, port 3268 using TCP
[kern_secd:info:15834] **[ 109] FAILURE: User 'test' not found in UNIX authorization source LDAP.
[kern_secd:info:15834] [ 109] Entry for user-name: test not found in the current source: LDAP. Entry for user-name: test not found in any of the available sources
[kern_secd:info:15834] [ 112] Trying to map user to the default UNIX name 'pcuser'
[kern_secd:info:15834] [ 116] Using a cached connection to dc01.ntap.local
[kern_secd:info:15834] [ 118] User 'pcuser' not found in UNIX authorization source LDAP.
[kern_secd:info:15834] [ 118] Entry for user-name: pcuser not found in the current source: LDAP. Entry for user-name: pcuser not found in any of the available sources
[kern_secd:info:15834] [ 118] Name mapping for Windows user 'NTAP\TEST' failed. Mapped UNIX user 'pcuser' does not exist
CUSTOMER EXCLUSIVE CONTENT

Registered NetApp customers get unlimited access to our dynamic Knowledge Base.

New authoritative content is published and updated each day by our team of experts.

Current Customer or Partner?

Sign In for unlimited access

New to NetApp?

Learn more about our award-winning Support