CIFS shares inaccessible on certain vservers
Applies to
- ONTAP 9
- CIFS/SMB
Issue
- When attempting to access cifs shares on a vserver via fqdn or ip it fails
- Other vservers work with no issues
- In
ems.logswe observesecd.cifsAuth.noNameMaperrors:
[Node-01: secd: secd.cifsAuth.noNameMap:error]: vserver (svm1) CIFS name to UNIX name mapping problem. Error: User authentication procedure failed CIFS SMB2 Share mapping - Client Ip = 10.10.10.7 [ 4035] User 'DOMAIN\user' authenticated using NTLMv2 security **[ 4035] FAILURE: CIFS authentication failed
- In
secd.log:
...
debug: IP qualifier is not present in NameMapping config { in getIpqPresentInNameMappingConfig() at src/configuration_manager/secd_configuration_manager.cpp:4796 }
ERR : RESULT_ERROR_SECD_CONFIGURATION_NOT_FOUND:6943 in query() at src/configuration_manager/secd_configuration_sources.cpp:9032
ERR : RESULT_ERROR_SECD_CONFIGURATION_NOT_FOUND:6943 in getNmSwitch() at src/configuration_manager/secd_configuration_manager.cpp:2670
ERR : RESULT_ERROR_SECD_CONFIGURATION_NOT_FOUND:6943 in getAppropriateWindowsToUnixMapping() at src/name_mapping/secd_name_mapping.cpp:692
ERR : RESULT_ERROR_SECD_CONFIGURATION_NOT_FOUND:6943 in mapNameWindowsToUnix() at src/name_mapping/secd_name_mapping.cpp:1366
ERR : RESULT_ERROR_SECD_CONFIGURATION_NOT_FOUND:6943 in mapName() at src/name_mapping/secd_name_mapping.cpp:2170
ERR : RESULT_ERROR_SECD_TRANSIENT_MAPPING_FAILURE:7037 in mapName() at src/name_mapping/secd_name_mapping.cpp:2189
ERR : RESULT_ERROR_SECD_TRANSIENT_MAPPING_FAILURE:7037 in secdGetUnixCredsForWindowsUser() at src/authentication/secd_rpc_auth.cpp:1143
ERR : RESULT_ERROR_SECD_TRANSIENT_MAPPING_FAILURE:7037 in secdLoadUnixCredsFromContext() at src/authentication/secd_rpc_auth.cpp:336
ERR : RESULT_ERROR_SECD_TRANSIENT_MAPPING_FAILURE:7037 in secdLoadResponseFromContext() at src/authentication/secd_rpc_auth.cpp:534
ERR : RESULT_ERROR_SECD_TRANSIENT_MAPPING_FAILURE:7037 in secd_rpc_auth_extended_1_svc_secd() at src/authentication/secd_rpc_auth.cpp:1768
ERR : CIFS authentication failed { in secd_rpc_auth_extended_1_svc_secd() at src/authentication/secd_rpc_auth.cpp:1789 }
debug: Domain name: DOMAIN { in secdLoadWindowsDomainNameInfo() at src/authentication/secd_rpc_auth.cpp:898 }
debug: SecD RPC Server sending reply to RPC 151: secd_rpc_auth_extended { in secdSendRpcResponse() at src/server/secd_rpc_server.cpp:2289 }
ERR : RESULT_ERROR_SECD_TRANSIENT_MAPPING_FAILURE:7037 in getFailureCode() at src/utils/secd_thread_task_journal.cpp:348
debug: Vserver's operational state: running { in isVserverRunning() at src/configuration_manager/secd_configuration_manager.cpp:2814 }
ALERT: sending EMS. Logging the RPC to secd.log { in shouldLogInEms() at src/utils/secd_ems_utils.cpp:263 }
debug: Logged secd.cifsAuth.noNameMap to EMS { in logEmsEventWithJournalForCifsAuthError() at src/utils/secd_ems_utils.cpp:1270 }