NFS access temporarily denied when accessing an NTFS volume with trusted domain users
Applies to
- ONTAP 9
- NFS
- NTFS filesystem
- S4U2Self
- Trusted domains
Issue
- NFS access temporarily denied when:
- Accessing an NTFS filesystem via NFS
- With a mapped windows user that is a member of a trusted domain
- That access files with ACEs containing local groups for the domain where the SVM is joined
- And successful access would depend on these ACEs
- As per SECD log, SECD tries resolving the credentials of the mapped user the SVM will attempt to contact a KDC and use S4U2Self