NFS Access denied because LDAP server is not providing group list
Applies to
- ONTAP 9
- NFS
- LDAP
Issue
- NFS client user gets
Access deniedwhen attempting to access files on a Unix security-style volume - User is a member of a group that has access to the files
getxxbyy getgrlistintermittently only displays the user's Primary GID, with no Auxiliary GIDs-
::*> vserver services name-service getxxbyyy getgrlist -node node-1 -vserver svm1-username user1 -show-source true Source used for lookup: Unknown pw_name: user1 Groups: 111 111
-
- Packet trace between ONTAP and LDAP server during
getgrlistshows that- ONTAP sends the LDAP server a request for the list of groups that the user is a member of
- The LDAP server's reply is empty
