SVM unable to communicate with name servers because lif does not have required service policies applied

Last updated

Jul 30, 2024
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 274

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nas

Last Updated:: 7/30/2024, 6:17:10 PM

Applies to

ONTAP 9
CIFS

Issue

Not able to ssh using domain credentials and getting below error message:

2/23/2024 19:50:08 node1 ERROR secd.cifsAuth.problem: vserver (vs1) General CIFS authentication problem. Error: Ontap admin cifs authentication basic procedure failed [ 6 ms] TCP connection to ip 10.xx.yy.yy, port 88 failed: Network is unreachable. [ 10] TCP connection to ip 10.xx.zz.zz, port 88 failed: Network is unreachable. [ 12] TCP connection to ip 10.11.xx.yy, port 88 failed: Network is unreachable. [ 15] TCP connection to ip 10.22.xx.yy, port 88 failed: Network is unreachable. **[ 17] FAILURE: Could not authenticate as 'user1@domain.com': Cannot contact any KDC for requested realm (KRB5_KDC_UNREACH) [ 20] Kerberos authentication failed. Trying NTLM [ 20] Login attempt by domain user 'domain\user1' using NTLMv2 style security [ 26] Failed to connect to 10.xx.yy.yy for DNS: Network is unreachable [ 27] Failed to connect to 10.xx.zz.zz for DNS: Network is unreachable [ 27] Failed to connect to 10.11.xx.yy for DNS: Network is unreachable [ 29] Unable to contact DNS to discover domain controllers. [ 29] Unable to make a connection (NetLogon:local.DOMAIN.COM), Result: RESULT_ERROR_DNS_CANT_REACH_SERVER [ 32] Ontap-admin-login-cifs failed

Domain tunneling is configured:

cluster::> security login domain-tunnel show Tunnel Vserver: vs1

Tunnelled data svm not able to reach DNS or modify to new servers:

cluster::> vserver services name-service dns check -vserver vs1 Vserver Name Server Status Status Details ------------- --------------- ------------ -------------------------- vs1 down Network is unreachable. 10.xx.yy.yy vs1 down Network is unreachable. 10.xx.zz.zz vs1 down Network is unreachable. 10.11.xx.yy 3 entries were displayed.

cluster::> dns modify -vserver svm1 -domains domain.com -name-servers 10.1.2.3,10.1.2.4
Error: command failed: Failed to verify the specified DNS configuration.
       10.1.2.3: Network is unreachable.
       10.1.2.4: Network is unreachable.
       Verify that the network configuration is correct and that DNS servers are available. Specify "-skip-config-validation" to
       skip the configuration validation