secd.netlogon.noServers error seen with DNS timeout
Applies to
- ONTAP 9
- CIFS
- DNS
Issue
- Error
secd.netlogon.noServers
reported in logs as ONTAP is not able to perform srv lookup for domain. - CIFS is not accessible during this time
- EMS reports intermittently:
[node1: secd: secd.dns.server.timed.out:error]: DNS server 10.x.x.x did not respond to vserver = svm01 within timeout interval.
[node1: secd: secd.dns.srv.lookup.failed:error]: DNS server failed to look up service (_ldap._tcp.dc._msdcs.naslab.local) for vserver (svm01) with error (Operation timed out).
[node1: secd: secd.netlogon.noServers:EMERGENCY]: None of the Netlogon servers configured for Vserver (svm01) are currently accessible via the network.
[node1: secd: secd.cifsAuth.problem:error]: vserver (svm01) General CIFS authentication problem. Error: User authentication procedure failed CIFS SMB2 Share mapping - Client Ip = 10.x.x.x [ 0 ms] Login attempt by domain user 'domain/user1' using NTLMv2 style security [ 2014] Failed to connect to 10.x.x.x for DNS via Source Address 10.x.x.x: Operation timed out **[ 5351] FAILURE: Unable to contact DNS to discover domain controllers. [ 5351] Unable to make a connection (NetLogon:naslab.local), result: 6812 [ 5357] CIFS authentication failed
- Verify if DNS server is reachable and able to respond
::> vserver service name-service dns check -vserver vs_name
::*> vserver services access-check dns srv-lookup -vserver vs_name -node node-01 -lookup-string <lookup_string>
- Packet trace collected shows no response received from DNS server when doing DNS lookup.