Outdated netgroup cache entry leads to NFS mount denial via export policy
Applies to
- ONTAP 9
- NFS
- Netgroups
Issue
- One or more NFS clients may get access denied while attempting to mount a path
- When checking the netgroup membership of an impacted client with the
getxxbyyy netgrpcheck
command, the client shows as a member of the netgroup - When checking the cached netgroup membership of an impacted client with the
cache netgroups members show
command, the client is not listed and/or the cached data is otherwise incorrect - The create time of the cache entry indicates that the cache was created prior to any changes that may have occurred with respect to the netgroup's member list