Domain group users are unable to access the system Ontap via SSH/GUI due to AD authentication issues
↵
Applies to
- ONTAP 9
- CIFS
- Security login
Issue
Domain group users are unable to access the NetApp ONTAP system via SSH or GUI (HTTPS), despite the group being added to the security login configuration of the admin SVM (Storage Virtual Machine).
Affected users receive an "Access Denied" error upon attempting login.
- The domain group is correctly configured in the security login for both SSH and HTTPS.
- The corresponding Active Directory (AD) group object exists and is valid.
- The domain tunnel is properly configured.
- Direct user access works when individual domain users are added explicitly to the security login.
