Identity Service Events on multiple StorageGRID storage nodes
Applies to
NetApp StorageGRID
Issue
- Identity Service Events on all the storage nodes running Administrative Domain Controller (ADC) service.
- In StorageGRID UI under Nodes > Node_Name > Events, the last event shows below error(s):
ERROR: Account "xxx" exceeded synchronization threshold". The number of the account (xxx) differ on the nodes. The number of events has exceed the trigger value
- The StorageGRID
bycast-err.log
file located in support log collection and located in/var/local/log
directory shows similar certificate related errors:
Oct 2 05:00:13 node3 idnt[22128]: [synchronize.go:235] ERROR: Failed to connect to LDAP server with error (Unable to begin TLS, please verify your certificate and TLS configuration: LDAP Result Code 200 "Network Error": TLS handshake failed (x509: certificate signed by unknown authority))
Oct 2 05:00:13 node3 idnt[22128]: [synchronize.go:205] ERROR: Account "xxx" exceeded synchronization threshold, err (<nil>) and last error ({key: synchronize_tenant_error, time: 2020-10-02T05:00:13Z, options: map[error_text:Unable to begin TLS, please verify your certificate and TLS configuration: LDAP Result Code 200 "Network Error": TLS handshake failed (x509: certificate signed by unknown authority)]})
Oct 2 05:00:13 node3 idnt[22128]: [synchronize.go:235] ERROR: Failed to connect to LDAP server with error (Unable to begin TLS, please verify your certificate and TLS configuration: LDAP Result Code 200 "Network Error": TLS handshake failed (x509: certificate signed by unknown authority))
Oct 2 05:00:13 node3 idnt[22128]: [synchronize.go:205] ERROR: Account "0" exceeded synchronization threshold, err (<nil>) and last error ({key: synchronize_tenant_error, time: 20