Security Daemon (SecD) fails to find local unix user by UID and name
Applies to
- ONTAP 9.3P5 and prior
- Clustered Data ONTAP 8
Issue
- Security Daemon (SecD) fails to find or translate some unix users by UID and name
- Newly created local unix users are also affected by the issue
- The affected unix users are unable to mount and access data
- Number of users against ONTAP version limits - all well within
Cluster1::> set advanced
Cluster1::*> vserver services name-service unix-group max-limit show
Limit Current Count
-------------- --------------
16384 344
Cluster1::*> vserver services name-service unix-user max-limit show
Limit Current Count
-------------- --------------
16384 864
- Details of the defined unix user:
Cluster1::*> unix-user show -vserver SVM01 -user NewUser
Vserver: SVM01
User Name: NewUser
User ID: 1234
Primary Group ID: 321
User's Full Name:
- Translate fails for both the unix name and UID
Cluster1::*> diag secd authentication translate -node NODE01 -vserver SVM01 -uid 1234
Vserver: SVM01 (internal ID: 8)
Error: Acquire UNIX credentials procedure failed
[ 0 ms] Entry for user-id: 1234 not found in the current source:
FILES. Entry for user-id: 1234 not found in any of the available sources
**[ 0] FAILURE: Unable to retrieve UNIX username for UID 1234
Error: command failed: Failed to resolve User ID '1234' to a user name. Reason: "SecD Error: object not found".
Cluster1::*> diag secd authentication translate -node NODE01 -vserver SVM01 -unix-user-name NewUser
Vserver: SVM01 (internal ID: 8)
Error: Acquire UNIX credentials procedure failed
[ 0 ms] Entry for user-name: NewUser not found in the current
source: FILES. Entry for user-name: NewUser not found in
any of the available sources
**[ 0] FAILURE: Unable to retrieve UID for UNIX user NewUser
Error: command failed: Failed to resolve user name to a UNIX ID. Reason: "SecD Error: object not found"
- Unix user credential show fails
Cluster1::*> diag secd authentication show-creds -node NODE01 -vserver SVM01 -unix-user-name NewUser
Vserver: SVM01 (internal ID: 8)
Error: Acquire UNIX credentials procedure failed
[ 0 ms] Entry for user-name: NewUser not found in the current
source: FILES. Entry for user-name: NewUser not found in
any of the available sources
**[ 0] FAILURE: Unable to retrieve UID for UNIX user NewUser
Error: command failed: Failed to resolve user name to a UNIX ID. Reason: "SecD Error: object not found".