Misconfigured LIF service policies lead to secd.conn.auth.failure with timeout
Applies to
- ONTAP 9
- Active Directory(AD)
- Domain Name service(DNS)
Issue
- Multiple LIFs for vserver on node.
- DNS check fails.
- CIFS access may be impacted on vserver.
Cluster::> dns check -vserver vserver_name -name-server DNS_server IP Vserver: versver_name Name Server: DNS_server IPName Server Status: down Status Details: Operation timed outsecd: secd.conn.auth.failure:notice]: Vserver (vserver_name) could not make a connection over the network to server (ip DNS_server IP, port 389). Error: Operation timed out (Service: LDAP (Active Directory), Operation: SiteDiscovery).[kern_secd:info:9230] | [000.000.066] debug: Setting client info Client IP = 10.140.10.10 { in setThreadContextClientInfo() at src/utils/secd_thread_data_manager.cpp:525 }
[kern_secd:info:9230] | [000.005.437] debug: Got serviceName : _ldap._tcp.dc._msdcs.domain.com { in parseServiceName() at src/server_discovery/secd_service_utilities.cpp:649 }
[kern_secd:info:9230] | [000.005.677] debug: NSLIBC: getaddrinfo(), ../../../../../../src/lib/libc/net/getaddrinfo.c:436, Vsid = 3 Hostname received: DNS IP
[kern_secd:info:9230] | [000.005.694] debug: NSLIBC: getaddrinfo(), ../../../../../../src/lib/libc/net/getaddrinfo.c:436, Vsid = 3 Hostname received: DNS IP
[kern_secd:info:9230] | [002.006.880] info : Failed to connect to DNS IP for DNS via Source Address IP OF LIF DOING DISCOVERY: Operation timed out { in SecdCbNsJournal() at src/utils/secd_ns_utils.cpp:96 }
[kern_secd:info:9230] | [003.007.795] info : Failed to connect to DNS IP for DNS via Source Address IP OF LIF DOING DISCOVERY: Operation timed out { in SecdCbNsJournal() at src/utils/secd_ns_utils.cpp:96 }
[kern_secd:info:9230] | [003.011.004] ERR : RESULT_ERROR_DNS_CANT_REACH_SERVER:6812 in getFailureCode() at src/utils/secd_thread_task_journal.cpp:348