Skip to main content
NetApp Knowledge Base

CIFS shares inaccessible when vserver is using incorrect lif to connect with name servers(DNS/DC/LDAP)

  1. Last updated
  2. Save as PDF
Views:
1,350
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:

Applies to

ONTAP 9.2-9.10

Issue

  • After ONTAP upgrade or LIF migration, CIFS shares not accessible using IP address from Windows clients and also dns check fails on vserver.
  • SVM has multiple LIFs (each LIFs on different network) and default route is configured with same metric for both LIFs.
  • Out of multiple LIFs present in SVM, only one LIF is allowed to communicate with DNS/LDAP/DC server in network.
  • Event logs indicate connection to DNS and LDAP failed with error “operational timed out”.
  • As storage is unable to contact DNS to discover domain controllers to authenticate the user, CIFS authentication failed.
  • Logs:
7/11/2022 10:20:26 node-02 ERROR secd.cifsAuth.problem: vserver (vserver1) General CIFS authentication problem. Error: User authentication procedure failed
CIFS SMB1 Share mapping - Client Ip = 10.1.10.x
[ 0 ms] Login attempt by domain user 'Domain/user1' using NTLMv2 style security
[ 2003] TCP connection to ip 10.1.2.x, port 389 failed: Operation timed out.
[ 2003] LDAP search for the "dnsHostName" attribute(s) within base "" (scope: 0) using filter "(objectClass=*)" failed with error: Can't contact LDAP server
[ 4004] TCP connection to ip 10.1.2.x, port 389 failed: Operation timed out.
[ 4004] LDAP search for the "dnsHostName" attribute(s) within base "" (scope: 0) using filter "(objectClass=*)" failed with error: Can't contact LDAP server
[ 6005] TCP connection to ip 10.1.2.x, port 389 failed: Operation timed out.
[ 6005] LDAP search for the "dnsHostName" attribute(s) within base "" (scope: 0) using filter "(objectClass=*)" failed with error: Can't contact LDAP server
[ 8009] Failed to connect to 10.1.2.x for DNS via Source Address 10.1.1.x: Operation timed out
[ 9010] Failed to connect to 10.1.2.x for DNS via Source Address 10.1.1.x: Operation timed out
**[ 9012] FAILURE: Unable to contact DNS to discover domain controllers.
[ 9013] Unable to make a connection (NetLogon:DOMAIN.COM), result: 6812
[ 9015] CIFS authentication failed
[ 9015] Retry requested, but the retry window (7000 ms) has expired; giving up.

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.