CONTAP-34034: Local user authentication fails if DNS or LDAP servers are unreachable
Issue
- CIFS users are not able to access CIFS shares.
- CIFS is joined to domain and users are connecting using local user on vserver.
- However, SECD logs indicate failure in connecting to LDAP server when client is accessing CIFS.
11/13/2023 18:07:37 BIG-NAS-05 ERROR secd.dns.srv.lookup.failed: DNS server failed to look up service (_ldap._tcp.dc._msdcs.big.local) for vserver (DATA2) with error (Operation timed out). 11/13/2023 18:07:29 BIG-NAS-02 ERROR secd.cifsAuth.problem: vserver (DATA1) General CIFS authentication problem. Error: User authentication procedure failed
CIFS SMB2 Share mapping - Client Ip = 192.168.13.103[ 0 ms] Login attempt by domain user '2019-03-DEDI\Dedi.Wahyu' using NTLMv2 style security [ 2002] TCP connection to ip 192.168.210.10, port 389 via interface 10.10.128.154 failed: Operation timed out. [ 2002] LDAP search for the "dnsHostName" attribute(s) within base "" (scope: 0) using filter "(objectClass=*)" failed with error: Can't contact LDAP server [ 4009] Failed to connect to 192.168.210.10 for DNS via Source Address 10.10.128.154: Operation timed out **[ 4009] FAILURE: Unable to contact DNS to discover domain controllers. [ 4010] Unable to make a connection (NetLogon:BIG.LOCAL), result: 6812