Post ONTAP Upgrade secd.nfsAuth.noCifsCred is observed more frequently
Applies to
- ONTAP 9.x
- NFS, CIFS
- Export-Policy
Issue
- No Access or Mount Hung issue observed.
- Volume is NTFS sec style with CIFS share and is exported via NFS.
- Name-mapping is correctly in place.
- Issue is only reported for root user.
- Below error is seen in EMS logs
secd.nfsAuth.noCifsCred:vserver (SVM1) NFS authorization cannot retrieve CIFS credentials. Error: Getuser credentials procedure failed [ 4 ms] Determined UNIX id 0 is UNIX user'root' [ 4] UNIX user 'root' mapped to Windows user 'Domain\User' [ 4] Usingcached 'Domain\Use' SID mapping.
[ 29] Successfullyconnected to ip 10.1.x.x, port 88 using TCP
[ 38] Could not getcredentials via S4U2Self based on full Windows username 'User'. Continuing toLDAP.
[ 40] Using a cachedconnection to Cluster.XXXXX.YYY
[ 44] Could not getcredentials via LDAP for Windows user 'User' based on SID'S-1-5-21-xxxxx-xxxxx-xxxx-xxx'
**[ 44] FAILURE:Could not get credentials for Windows user 'User' or SID'S-1-5-21-xxxxx-xxxxx-xxxx-xxx'