Trusted domain users getting permission denied when trying to access NFS when LDAP is used
Applies to
- ONTAP 9
- NFS
- CVO
- Lightweight Directory Access Protocol (LDAP)
Issue
- Users in multiple domains do not have the same access level to file shares via NFS.
- Users in one domain (Domain1) can access ONTAP file system from Linux hosts but users from different domain (Domain2) get a permission denied when trying to access file share via NFS.
- LDAP query for the users from domain (Domain2) are failing with below error message:
FSXID00000000000000::*> getxxbyyy getpwbyname <user1> -node <nodename> -vserver <vservername>
(vserver services name-service getxxbyyy getpwbyname)
Error: command failed: failed to resolve user1. Reason: entry not found for "username: user1".