NAS KBs
NAS KBs
Featured
CIFS Access Denied
Troubleshooting CIFS Access Denied.
Troubleshooting CIFS Access Denied.
NFS Access Denied
Troubleshooting NFS Access Denied or Mount Hung.
Troubleshooting NFS Access Denied or Mount Hung.
What is Domain Controller Discovery?
Details about Domain Controller Discovery functionality.
Details about Domain Controller Discovery functionality.
Port Reachability Troubleshooting
Troubleshooting various Port reachability issues.
Troubleshooting various Port reachability issues.
secd.ldap.noServers Resolution Guide
Collection of known secd.ldap.noServers solutions.
Collection of known secd.ldap.noServers solutions.
Packet tracing Resolution guide
Guidance in capturing packet traces in ONTAP and Clients.
Guidance in capturing packet traces in ONTAP and Clients.
Other Resources
- Unable to access SMB shares due to time skew between ONTAP and the Domain ControllerMay, 2024
- What Active Directory environments is ONTAP 9.13.1 fully supported inMay, 2024
- Ports show as degraded after deletion of automatically created broadcast domainMay, 2024
- CIFS access from client fails and EMS logs Nblade.noSmbVerNegotiatedMay, 2024
- How to restore files and directories from a snapshot on ONTAP using the CIFS protocolMay, 2024
- execsOverLimit message found in event logs for NFSv4 clientsMay, 2024
- Slow performance between Client and CIFS Share in ONTAP 9.8 due to Procmon processMay, 2024
- CIFS write speed is slow due to too many access denied errorsMay, 2024
- Cannot activate AES on CIFS VserverMay, 2024
- How does Access Based Enumeration (ABE) work?May, 2024
- How to set up CIFS auditing in ONTAP 9May, 2024
- CIFS access lost due to SECD become unresponsive with lot of closed LDAP port 389 connectionsMay, 2024
- Linux host cannot mount Network File System (NFS) filesystems due to internal firewall softwareMay, 2024
- TrendMicro scanner pool has no virus scanner connection. AV error: 1326May, 2024
- How to upgrade the ONTAP Antivirus ConnectorMay, 2024
- ONTAP Antivirus connector 1.0.6 service intermittently stops with Windows Event ID 1000May, 2024
- Can AES encryption be enabled on a CIFS server?May, 2024
- Unable to access folder with permission error when Share lock existsMay, 2024
- Is it obligatory that NetApp cluster is joined to an Active Directory Domain?May, 2024
- NFS users have permission issues when they belong to more than 16 groupsMay, 2024
- How to capture packet traces tcpdump on ONTAP 9 2 + systems
- How to move files to a NetApp CIFS server using Robocopy to retain Windows ACLs
- Simplified NAS Provisioning using ONTAP System Manager 9.7
- How to manually restore a VMware ESX virtual machine from an NFS volume/datastore snapshot
- FlexCache Simplified with ONTAP System Manager 9.6
- How to configure AD authentication for cluster when CIFS is not licensed
- How to enable jumbo frames in ONTAP 9 and clustered Data ONTAP 8.3
- How to grant and remove access to CIFS shares
- How to set up file level auditing for deleted files
- How to change security styles for volumes or qtrees
#
- "Access denied by server while mounting" when mounting NFS volume from a client within a VM
- "Access denied by server while mounting" with NFS Kerberos
- "access denied by server while mounting" with NFSv 4.1 and 4.2
- "Access denied" error seen by Windows clients as ONTAP maps users to pcuser instead of the appropriate UNIX user
- "Access Denied" to CIFS share of a SnapMirror destination with native Fpolicy enabled
- "Access Denied" when ONTAP does not resolve a user as a member of a NIS group
- "Access Denied" when Windows global group converted to domain local group
- "Access is denied" when trying to access shares via FQDN with CIFS export policies on
- "Broadcast Domain Partitioned" messages for interfaces belonging to the same VLAN
- "Cannot communicate with the scan service" error when trying to scan share path
- "can't find message catalog entry" when enabling AES
- "cifs check" command returns "Warning: Unable to list entries on node" error
- "cifs domain discovered-servers show/reset-servers" command times out
- "cifs domain preferred-dc check" shows DC status 'down' and status details 'Part of domain but does not offer Netlogon service'
- "cifs share show -volume" reports a partial list of shares
- "export-policy netgroup check-membership" is not working, with error: "entry doesn't exist"
- "Incorrect credentials for svm" when trying to authenticate to a data SVM with Domain-Tunnel
- "Internal Server Error" encountered from ONTAP S3 server with group configured
- "LDAP Error: Cannot contact the LDAP server" when attempting to join a SVM to an AD domain
- "ls" or "cd" command goes into hung state while accessing NTFS volume through NFS
- "Nblade.vscanNoScannerConn" error seen after ONTAP upgrade
- "Nblade.vscanVirusDetected" errors in ONTAP logs for files that are not infected
- "nbt.NetBIOSName.nameConflictIF" message shows up after node reboot or cifs restart
- "network connections active show" output doesn't match netstat ouput by nfs protocol
- "Network interface was not created" error with multiple data LIFs created
- "network port broadcast-domain show" reports "error: details not available" for some ports
- "nfs: server hostname not responding, still trying" connecting to ONTAP 9.6 or later in a network with high packet loss
- "password complexity requirements" error while changing cifs local user password
- "Permission Denied" when trying to access an NTFS volume over NFS
- "RPC cannot connect to port mapper. Connection refused" when performing a Mount operation
- "SecD Error: no server available" when enabling AES, because root CA certificate is missing
- "SecD Error: no server available" when modifying AES encryption for CIFS server, because PTR record is missing
- "secd.dns.srv.lookup.failed" because the 'hosts' database of ns-switch only includes 'files'
- "secd.dns.srv.lookup.failed" due to misconfigured DNS domain
- "secd.dns.srv.lookup.failed" due to Netlogon issue
- "secd.ldap.bindDn.missing" alert seen in EMS logs after ONTAP upgrade to 9.8 and above
- "secd.nfsAuth.noCifsCred:error" when accessing an NTFS-secured volume via NFS in ONTAP
- "The Access Control List (ACL) Structure is invalid" when updating permissions
- "The document is locked for editing by another user" error not presented when a file is opened after another user has the file open
- "The folder (FOLDER) can’t be opened because you don’t have permission to see its contents." on MacOS SMB clients
- "the program ... cannot determine whether the computer is joined to domain"
- "This operation is not supported for the system volume" error when attempting to resize CIFS auditing staging volume
- "Vserver API missing vserver parameter" when configuring Netwrix with ONTAP 9
- "vserver audit create" returns error: Failed to create audit configuration for Vserver. Reason: One or more aggregates do not have staging volumes.
- "vserver cifs domain discovered-servers show" doesn't return any DC
- "Windows cannot access share Check the spelling" when CIFS is not allowed on the data LIF
- “Permission denied” is reported during copy file with “cp -p” command
- 3rd party firewall on Active Directory is blocking ports 389 and 445
- 401 unauthorized error seen on AV connector while trying to poll
- 7MTT aborts transfer while creating baseline with Error "Transfer failed"
- 7mtt reports 'Failed to create a domain entry for "AD-DOMAIN", Reason: duplicate entry.'
- 'df' command hangs for NFSv3 clients in ONTAP 9
- 'dns check' results in timeout failure, but no dns issues
- 'Lookup of Kerberos realm failed. entry doesn't exist' in System Manager
- 'ls' command hangs for NFSv4 clients in ONTAP 9
- 'Previous versions' not available on Flexgroup DP volume
- 'vifmgr.bcastDomainPartition' reported in EMS logs when not all ports in a broadcast-domain can reach one another
- 'Vserver audit create' generates EMS Error: wafl.vol.create.clusterVolOnCFOaggr
A
- A audit log filename doesn't correspond to local time zone
- A CIFS share writes failure or is inaccessible due to insufficient space on the volume
- A domain account is disabled and the local user requires a password change
- A file lock is detected on a volume that is only used for NFS, and giveback fails with vetoes
- A large amount of evtx affecting consolidation speeds, resulting in MDV volume depletion and inability to access CIFS
- A Linux client creates additional mount points when accessing the .snapshot directory via NFS
- A machine account is deleted in AD
- A TMP Excel file remains when creating Microsoft Office documents
- A user or group that is a member of local "BUILTIN\Administrators" group does not get assigned predefined default privileges
- A user whose usage has exceeded the user quota limit
- About the CIFS server name when joining both the old and new NETAPP to the AD domain when replacing NETAPP
- Absolute path symlinks in ONTAP 9
- Access and performance problems from the end user
- Access by NETBIOS Alias fails
- Access CIFS share with Kerberos fails due to missing spn
- Access denied after migration with SID History
- Access Denied attempting to access files or directories in Snapshots
- Access denied by FPolicy server synchronous response
- Access denied by server while mounting with NFS Kerberos in trusted domain
- Access denied error message reported with a CIFS random file access followed by success upon multiple retries
- Access denied error reported while accessing CIFS share on target after snapmirror replication
- Access denied in applying SACLs using the Windows Security tab
- Access denied on CIFS share due to CIFS SVM not being joined to the domain
- Access denied on mount when using export policies with netgroups because DNS lacks PTR record
- Access denied when acessing file used for group policy update
- Access denied when attempting to read or take ownership in Unix security style
- Access denied when installing/upgrading ONTAP Antivirus Connector on Windows
- Access denied while specific accessing files within a CIFS share
- Access is denied by UNIX permissions while checking parent's modebits during delete
- Access of a CIFS share on a Flexcache volume might fail (permission denied)
- Access to CIFS share failed due to snapmirror relationship stuck in Quiesced state
- Access to CIFS share fails with"Authentication failed with DC DC-Server. Not retriable. (Status: 0xc0000064)"
- Access to CIFS share has high latency and intermittently fails
- Access to data is lost after NetApp hardware has been physically relocated to a new location
- Access to files is not possible when LIF is hosted on newly added nodes of the Cluster
- AccessDenied error for PutObject operation for ONTAP S3 multiprotocol
- Accessing a CIFS server via hostname fails with the error: Key table entry not found (KRB5_KT_NOTFOUND)
- Accessing a CIFS share with a local user
- Accessing an NFS nested volume, the system mounts all volumes in the junction path
- Accessing files on CIFS share fails with Access denied error
- AD (DC) reports "Windows Event ID 2889 (LDAP SimpleBind requests)" for all Vservers
- AD based LDAP server not able to resolve few unix users due to configuration issue
- AD/LDAP Authentication failing when node becomes unresponsive but not down
- add or modify permission from security tab fails with error "cannot determine whether the computer named “cifs-server” is joined to a domain"
- Added CVO instance to Active Directory and none of NFS exports can be accessed
- Adding a CIFS preferred-DC fails with "RPC Error" in ONTAP
- Adding a user to a local group fails with "'LocalGroup'" not found
- Adding ACL conditional entry is failing with error "a device attached to the system is not functioning"
- Adding CIFS group member fails if it has a different security identifier
- Adding Hundreds of File Extensions to Native FPolicy Prevents Excel from Saving File
- Adding NFS datastore to ESXi host fails with: "NFS connection limit exceeded"
- Adding preferred-dc fails with Error: command failed: Invalid domain controller
- Adding user from System Manager fails with "The user name should be shorter than 17 characters"
- Additional NFS mount created when accessing snapshot directory from Linux host
- Admin user unable to access to SMB Share
- Administrators are unable to configure CIFS auditing in Windows
- Admins cannot login to Admin SVM with AD account
- Adobe InDesign fails to export to PDF on MacOS
- adt.stgvol.missing and vserver audit repair fail because aggregate is not home
- AES encryption enable fails due to insufficient access rights error
- AES encryption is enabled but only RC4 can be seen
- AFF-A400 NFS LIFs down after updating to ONTAP 9.10.1 or greater
- After a change to name-mapping rules, CIFS user is still getting "access denied"
- After a reboot of a cifs client server we have the cifs mount point has failed
- After a storage failover/giveback VSCAN cannot connect
- After a test failover, the ports in the LACP ifgrps do not reliably come back online
- After changing Client specification in Export policy from the System Manager NFS access is lost
- After changing CUBIC to NewReno, why did it return to default after rebooting?
- After changing domain tunnel SVM - authentication for cluster administration is broken
- After creating a file on Windows, why the owner is root and the group is bin on Linux?
- After DC IP change EMS logs *.noServers
- After deleting CIFS share and Junction Path volume offline fails with error
- After enabling AES on DC, CIFS cannot connect via hostname
- After enabling audit on SVM, NFS access is not possible
- After enabling LDAP sign and seal EMS logs secd.ldap.noServers
- After enabling management access NFS mount fails
- After file's created by cifs client, the user and group are showing "Nobody" from NFS client
- After headswap, LIFs are not reachable on new ports
- After LIF migration, CIFS authentication fails on the destination node
- After MetroCluster site failover, Hyper-V Virtual Machines gets disconnected
- After migrating data to a new cluster DNS forwarding is not working
- After migrating from 7-mode to ONTAP 9, files are locked via NLM indefinitely
- After migrating VSM root volume CIFS shares are not accessible
- After migration from EMC to NetApp the shares are not accessible due to missing permissions
- After migration, CIFS is inaccessible using DNS name (IP address works)
- After mounting CIFS share on Rocky Linux, mount hangs/dies
- After node reboots, LACP ports are down and switch ports are in 'Link Flap error-disable' state
- After ONTAP node reboot at least one NFS share isn't mountable anymore
- After ONTAP reboot, LIFs are inaccessible when static ARP entries are present
- After ONTAP upgrade CIFS shares not available
- After ONTAP upgrade FPolicy blocks all traffic
- After ONTAP upgrade not able to access to CIFS Share of an specific CIFS Server
- After ONTAP upgrade, LIF home port changed to IFGRP member port
- After ONTAP upgraded CIFS volume backups are failing on Rubrik
- After overwriting a file, the owner of that file has changed to the overwriting user
- After reboot only one client able to maintain IPSEC tunnel at a specific time due to Libreswan configuration issue
- After removing a domain trust in AD, nfs access is broken
- After taking a volume offline and back online the permissions are not working as expected
- After updating the IP address range LIF is inaccessible
- After upgrade of Linux Host kernel, copy over NFS is very slow
- After upgrade, receiving Nblade.CifsOperationTimedOut errors due to offline ls volumes
- After upgrading ONTAP 9.8P13 to 9.10.1P7 data could not be accessed
- After upgrading to ONTAP 9.7 getting "fileid changed" or "stale file handle on client"
- AIX client cannot connect over NFSv4
- AIX client gives IO error when doing a mkdir
- AIX client is unable to lock a file that was previously locked by the same client
- AIX host not able to mount NFSv3 exports when largesend/bypass_mtu is enabled on client
- AIX NFS client unable to access the snaphots with error "A file or directory in the path name does not exist"
- Alert EMS Message - secd.dc.out.of.pipe.instances
- Alerts "Vserver "NetApptest" has no virus scanner connection" ONTAP 9
- All CIFS clients cannot open or create new file with open file reach Max limitation
- All CIFS clients lose access to shares, despite having sessions
- All Cifs sessions on a TCP stream are reset after an session logoff on one cifs session
- All CIFS shares are not accessible via NTLM on ONTAP 9.6
- All cifs shares not accessible in vserver when there is no DNS A host record available for cifs server name
- All extensions are not shown in vserver fpolicy scope show
- All member ports of Multimode LACP ifgrp shows down
- All open files not being seen on MMC
- All users get "Permission denied." when accessing volume over NFS
- All windows users able to access shares which should be restricted
- An ifgrp is in a partial state with one port down
- An ifgrp will not come up after replacing the network switch for its member ports
- An rsync copy of a volume is larger than expected on the destination
- Anonymous Logons with the Guest account seen in Computer Management
- Anonymous User is squashed to root by RO Access Rule and '-anon' option setting
- Ansible can't read special characters in SVM Clone
- Ansible is not able to connect to ONTAP
- Anti-ransomware Protection not detecting new file extensions on a volume
- Antivirus/Vscan setup and troubleshooting for ONTAP
- Any impact on the CIFS server for Microsoft 365 Apps deprecate Basic Authentication?
- Any methods to confirm which client opens files?
- API call /api/protocols/nfs/export-policies fails
- API call for CIFS 'get' function returns an output that does not match with CLI status
- Application accessing CIFS share may fail when setting an atime of -2 on a file
- Application CATIA changes randomly share access via DFS
- Application could not be initialized due to no locks being available
- Application error: Allocation has failed due to insufficient access authority
- Application fails to create library using NFS mountpoint on Flexvol
- Application receives All Paths Down alert every 5minutes
- Application reports fatal error due to setting of v3-64bit-identifiers to true
- Application server unable to access file path and fails with error connection failed
- Application times-out or fails due to client terminating CIFS session
- Application unable to access cifs shares and failing with error failed to connect
- Application unable to connect to CIFS share due to unsupported SMB version
- Applying security descriptors fails even when ignoring broken symlinks
- Are CIFS shares automatically deleted after a volume is deleted?
- Are export-policy rules necessary for CIFS access?
- Are folders named .Trash-xxxx created by ONTAP?
- Are hard links on CIFS shares supported in ONTAP?
- Are local users and groups and Workgroup mode supported in ONTAP?
- Are Local Users and Groups Supported for CIFS/SMB in ONTAP?
- Are NAS protocols affected by libexpat?
- Are POSIX ACLs supported by ONTAP?
- Are PTR records required for LDAP servers secured with LDAP Signing or Sealing?
- Are SMB Continuous Availability (CA) Shares supported for Citrix SMB shares?
- Are SMB Continuous Availability (CA) Shares supported for Normal File Directories?
- Are there alternative was to create the cifs server machine account outside of having ONTAP create it?
- Are there any parameters or options that control communication between NAS and AD?
- Are there S3-specific steps to decommission a storage node?
- Are v*-64bit-identifiers necessary when creating a Flexgroup volume for CIFS shares
- ARP broadcast storm: Information and Effects
- Attempting to disable AES encryption results in failure with Kerberos Error: KDC has no support for encryption type
- Attempting to mount FlexCache path gives "mount.nfs: Connection timed out"
- Audit consolidation does not run and no audit events are generated
- Audit log not rotating every 5 minutes
- Audit log rotation based on schedule does not work
- Audit log size rotation is not working
- Audit rotation not working
- AUTH_SYS Extended Groups changes for NFS authentication for ONTAP 9
- Authentication issues after upgrading domain controller to Server 2016
- Authentication via Windows Defender Credential Guard results in access denied
- Authorization failed returned while testing with restricted user
- Auto mount isn't working but able to manually mount NFS
- AUTO-ARCHIVED: Can you exclude folders from triggering events in Fpolicy configuration?
- Automatic DNS switchover not happening during SVM DR
- AV connect not accepting the credentials - Error 401 Unauthorized
- AV Connector (AVSHIM) fails to register the Virus Scan Engine with the error: Registration failure: ScanType != SCANTYPE_rpc_cluster
- AV Connector 1.0.4 reports underlying connection was closed
- AV connector fails to poll with error 403 forbidden after Vscan server upgrade
- AV Connector fails with 401 Unauthorized
- AV Connector install fails with "encryption type request is not supported by the KDC"
- AV Connector not sending statistic information
- AV Connector reports (401) Unauthorize while testing
- AV Connector running on the AV server does not have a registered scan-engine to it
- AV connector should try to connect to LIFs on dedicated network
- AV scanning Engines are 100 percent because of ONTAP AV Connector
- AVconnector collecting logs when TraceLevel is set to 0
- AV-connector fails to test connection to 1 SVM due to DNS configuration
- AWS Datasync cannot follow cifs symlinks
- Axway CFT application will not start after system patching and reboot
B
- Backup application unable to backup all files on a CIFS share due to lack of permissions
- Backup of clone volume using CIFS is slow due to Vscan
- Backup software cannot authenticate to CIFS Server
- Backups failing even though user is part of BUILTIN\Backup Operators group for ONTAP 9
- Best practices for NAS audit
- Best Practices for Network Configuration with NetApp Storage Systems
- BGP Peer status is down
- Blocked port causes joining SVM to Domain to fail: KDC Unreachable
- Broadcast domain partitioned error reported in EMS logs
- Broadcast Domain status warnings in ONTAP Pre-upgrade check
- Broadcast domain unreachable after switch suspends VLAN
- Broadcast storm impacting network after ONTAP upgrade to 9.8
C
- CA Share access lost during Ontap Upgrade due to incorrect configuration
- Can "vserver nfs connected-clients show" be used to check per qtree connection?
- Can a CIFS server be created in ONTAP without joining the CIFS server to a domain?
- Can a CIFS server belong to multiple domains?
- Can a CIFS volume be presented like a LUN for local access?
- Can a client accidentally deleted file without backup/snapshots be recovered?
- Can a filer belong to muliple domains?
- Can AES encryption be enabled on a CIFS server?
- Can an interface group (IFGRP) be modified after it is created?
- Can auditing monitor logon/logoff events for CIFS/SMB shares and NFS exports?
- Can Azure AD Kerberos authentication for hybrid identity be used with Fabric attached storage?
- Can be configured an e-mail notification for Native FPolicy File Blocking events?
- Can Cadence EDA tool (32bit) support Flexgroup with enable 64-bit file identifiers
- Can CDP (CDPD) and LLDP be disabled on cluster, storage, ha ports?
- Can CIFS auditing be used to return hostname in audited events?
- Can DES encryption for Kerberos-based communication be disabled on a CIFS server?
- Can enabling CID statistics cause latency?
- Can FLexCache be configured on a subdirectory of a volume?
- Can Fpolicy restrict a share to only PST files and prevent their deletion
- Can GPO change CIFS audit settings?
- Can I create a CIFS server in workgroup without the need for local users?
- Can I delete files from snapshots from a client in a volume with snap-dir true?
- Can I proceed with ONTAP upgrade when Hyper-V is in use, if the validation report advises "Stop all unprotected CIFS workload"?
- Can I set specific default permissions of the files created on NFS shares?
- Can I set UNIX style permissions from an NFS mount on an NTFS qtree?
- Can I use the name "netlogon" for a share name?
- Can Jumbo frames be seen in IFSTAT when interface MTU is set to 1500?
- Can LDAP be configured and added without disruption to cluster operations
- Can multiple LIFs, VLANs for SMB and NFS be on the same SVM?
- Can NAS audit logs be forwarded to a syslog server or an external path or email?
- Can not create CIFS share c$, not permitted
- Can NTFS and UNIX permissions be used at the same time on a Mixed Mode volume?
- Can OKTA be used to authenticate CIFS users and control permissions
- Can ONTAP account for the bytes written for each client?
- Can ONTAP alert of PII being added to files or filenames, or prevent it?
- Can ONTAP be a DFS root?
- Can ONTAP CIFS clients survive a LIF migrate?
- Can ONTAP CLI list files in a CIFS share or volume?
- Can ONTAP drop TCP packets with the SYN and FIN flag set?
- Can Oplocks be configured by Username?
- Can RC4 encryption for Kerberos-based communication be disabled?
- Can RPC port 111(portmap) be disabled in ONTAP?
- Can space usage, without space saving mechanisms, be viewed on a NAS client?
- Can SVM support multiple fpolicy configurations from different vendors
- Can the CIFS audit log naming convention for consolidated files be changed?
- Can the client re-prompt for username/password after CIFS permission is denied
- Can the congestion control in ONTAP be configured?
- Can the existing LIF data-protocol type be modified?
- Can the file support bypassing virus scan if the maximum file size is exceeded?
- Can the ONTAP AV Connector use Group Managed Service Accounts?
- Can the ONTAP Qtree security style be set differently than the Volume Security style?
- Can the same VLAN be included in multiple IPSpaces simultaneously?
- Can the user used for AD authentication be removed from the domain admin group
- Can the volume language be changed after creation in ONTAP?
- Can UNIX groups be mapped to Windows domain groups?
- Can use NFS client UID as export policy rule to configure mount permission
- Can users other than Domain Administrators access Microsoft Management Console(MMC)
- Can VSCAN be used scanning CIFS servers from different domains?
- Can vscan be used with any volume security style?
- Can vscan paths-to-exclude include wildcards?
- Can we automate vscan jobs to pause and resume jobs from the Netapp end
- Can we create domain trust relationship using only domain name-mapping-search command ?
- Can we enable UNIX/POSIX tags in ONTAP on a CIFS server ?
- Can we find unused CIFS shares in cluster which doesn't have any IO or sessions for an extended amount of time using commands?
- Can we list out files and folders in a volume with System Manager?
- Can XCP be used to move data to/from an S3 bucket?
- Can you delete a CIFS server from an SVM with NFS exports without impacting them?
- Can you forward CIFS Auditing to splunk?
- Can you use the same remote ID for two policies in IPSEC Pre-Shared Key PSK
- Cannot access CIFS share after moving CIFS server computer account to new Active Directory OU
- Cannot access CIFS share because domain isn't available
- Cannot access CIFS shares if the SVM root volume is offline
- Cannot access CIFS widelink
- Cannot access NFS from ESXi after service disruption
- Cannot access share due to ACE rule blocking
- Cannot access symlink files in a folder through windows explorer
- Cannot activate AES on CIFS Vserver
- Cannot add Active Directory Domain when firewall is present
- Cannot be overwritten when restricted by -file-operations create,rename in fpolicy
- Cannot change security permissions on a share
- Cannot connect to CIFS server by IP
- Cannot copy long filenames from snapshot back to original location using Windows Previous Versions on ONTAP
- Cannot create CIFS server because DNS is not reachable
- Cannot create datastore on ESXi host from a NFSv4 volume on new SVM
- Cannot delete SVM due to existing CIFS server
- Cannot determine if CIFS server is joined to the domain
- Cannot edit SACLs for UNIX security style volumes
- Cannot enable auditing for vServer - Final consolidation is in progress
- Cannot enable Fpolicy due to "CIFS server does not exist" in ONTAP 9
- Cannot enable Fpolicy due to "CIFS server does not exist" when CIFS events are monitored
- Cannot enable Vscan in a MetroCluster - No scanner pool is active on the Vserver
- Cannot execute mv, rm, ls command normally when nfs mount NAS from Linux client
- Cannot find tested FPolicy solutions on the Interoperability Matrix Tool (IMT). Where to find compatibility information for FPolicy solutions?
- Cannot FPolicy Enable or Disable due to FPolicy configuration replication process failure
- Cannot login to CLI using domain account
- Cannot migrate CIFS server to new domain
- Cannot modify a scanner pool on an administrative Vserver
- Cannot modify CIFS server name after 7MTT - Unable to contact DNS
- Cannot mount SMB share in Linux client after ONTAP upgrade
- Cannot perform backups for Rubrik
- Cannot ping a specific gateway from 1 node
- Cannot provision FlexCache volume because it is in use by another FlexCache operation
- Cannot refresh or update ONTAP Select utility after changing IP
- Cannot see lock information if folder name contains a comma
- Cannot set DACLs on a file
- Cannot set up Quest Change Auditor for Fpolicy
- Cannot unjoin node from cluster because "this operation deletes all failover targets"
- Cannot write files or sub-folders to share with multiple users
- Can't access files on NTFS volume from linux client with read-only user
- Can't create files or change to directory on a NAS volume
- Can't direct connect ESXI server to storage with NAS protocols
- Can't disable kerberos interface without credentials
- Can't restore data to C.POSIX volumes
- Capturing packet traces in ONTAP and clients - Resolution Guide
- Certain CIFS users are unable to access CIFS shares by IP address
- Certain unix users with many groups unable to access data in ONTAP 9
- CFM packets sent by ONTAP on a VLAN are including two VLAN headers
- CH OUT of ORDER SEND from Oracle DB
- Change node management IP fail with Duplicate IP address
- Changing default-site fails because LDAP security is misconfigured
- Changing ownership with CHOWN fails because the user is not owner and the change ownership mode is restricted
- Changing Standard Browser IE to Chrome results in pblk Exhaustion
- Child directories do not get the group of the containing directory
- CHMOD in Mixed Mode gives permission denied error
- CHOWN returns invalid user on a NFSv4.x mounted exports
- CIFS Access - Authentication - Resolution Guide
- CIFS Access - Authorization - Resolution Guide
- CIFS access delay occurs after removing old DC server from AD environment
- CIFS Access Denied
- CIFS access denied errors in ONTAP 9 after enabling SMB encryption
- CIFS Access Denied on RDP clients when "Restricted Admin" mode is enabled
- CIFS Access Denied When Clients Access CIFS Share through Azure Load Balancer
- CIFS access denied when user domain group scope is domain local
- CIFS access denied: The requested permissions are not granted by the ACE
- CIFS access failing due to AD Domain discovery issue
- CIFS access failing error messages: No servers found in DNS
- CIFS access fails with "The account is not authorized to log in from this station"
- CIFS access failure after NS-SWITCH configuration change
- CIFS access from client fails and EMS logs Nblade.noSmbVerNegotiated
- CIFS access impacted when files locks remain after user sessions close
- CIFS access is lost after demote/promote domain controllers with KRB5KRB_AP_ERR_MODIFIED
- CIFS access lost after enabling AES encryption on the SVM
- CIFS access lost after MetroCluster switchover due to Vscan scanner pool unavailability
- CIFS access lost due to failing CIFS domain discovery
- CIFS access lost due to SECD become unresponsive with lot of closed LDAP port 389 connections
- CIFS access not possible due to SECD lack of memory
- CIFS Access over Node 1 slower than over node 2
- Cifs access slow after upgrading or migrating McAfee Vscan to ENSSP 2.0
- CIFS access slow due to lnk files in a root or subdirectory of a volume
- CIFS access slow or failing with Veritas Fpolicy due to zero window replies
- CIFS access to a Qtree fails with client reporting "catastrophic error: 8000FF"
- CIFS access using the format ".\user" fails with 0xC0000466
- CIFS access via local user fails with error secd.cifsAuth.problem
- CIFS AD connection is being sourced from the iSCSI LIF
- CIFS and NFS client access issue to Netapp storage
- CIFS and NFS not accessible from different network
- CIFS audit logs are generating high amount of space usage in Splunk
- CIFS audit staging volume got full due to the adtconsolidation process not starting after Takeover Giveback
- CIFS auditing does not work as expected due to missing SACLs
- CIFS authentication error: KRB5KDC_ERR_ETYPE_NOSUPP
- CIFS Authentication Errors
- CIFS authentication failed due to disallowed NTLM authentication
- CIFS authentication fails after "cifs domain password change"
- CIFS authentication fails due to bad kerberos ticket from DC. Error: Response is incorrectly signed
- CIFS authentication fails due to missing data SVM's service-policy entries
- CIFS authentication fails with "Authentication failed with DC domain. Not retriable. (Status: 0xc000006a)"
- CIFS authentication problem with NT Error (0x103) due to slow netlogon response
- cifs check fails - SecD Error: no connections available due to dc timeouts
- CIFS client access fails on ONTAP 9.2+ after CIFS password reset
- CIFS client connections to share hang with error Nblade_CifsOperationTimedOut_1 for commandName SMB2_COM_SESSION_SETUP
- CIFS client repeatedly resets its connection after negotiate protocol response
- CIFS client unable to access a CIFS share mapped to a directory below a UNIX volume with error Access Denied
- CIFS client unable to write to a specific folder
- CIFS clients are unable to access any CIFS shares of a CIFS server
- CIFS clients cannot access the snapshot directory in ONTAP 9
- CIFS clients disconnected when nblade.smbsignaturemismatch events observed in EMS
- CIFS clients experience a high latency due to CommVault FPolicy
- CIFS clients experience high latency due to fpolicy external engine configuration
- CIFS clients no longer able to connect to share in Google Cloud Volumes
- CIFS clients unable to write to newly created share
- CIFS command fails with 'Kerberos Error: Incorrect net address'
- CIFS copy slows or stalls at the end of a file copy
- CIFS create fails with "FAILURE: Unable to set machine account attribute" due to certificates on DC
- CIFS create fails with "FAILURE: Unable to set machine account attribute" due to permissions
- CIFS create output indicates that the SVM is attempting to reach the wrong DC(s)
- CIFS create/modify access to Flexcache fails with Internal Error
- CIFS created sparse files increase the used space
- CIFS creation fails with error "certificate verify failed"
- CIFS creation fails with KDC Unreachable due service policy misconfiguration
- CIFS creation fails with LDAP Error The user has insufficient access rights
- CIFS creation fails with LDAP error: a constraint violation occurred
- CIFS creation fails with LDAP error: Object class violation
- CIFS creation from ONTAP System Manager failed with "Failed to create the Active Directory machine account. Reason: An account by this name already exists."
- CIFS data is not accessible after deletion of audit destination path
- CIFS disconnect while copying data when encryption is enabled and NULL sessions are created
- CIFS Disconnects from Windows host with error "Too many creds on single session"
- CIFS discovered servers KERBEROS type never shows OK status
- CIFS domain of local group members change after adding members from trusted domains
- CIFS domain password schedule Q&A
- CIFS domain password schedule stops working after the Disaster recovery test
- CIFS dynamic home directories are not accessible after failover to DR
- CIFS file copy fails with invalid argument error
- CIFS File move or rename operation fails (This item is no longer located in 'path') due to firewall
- CIFS file share not accessible after moving to a different office location
- CIFS GPO update job fails with errors
- CIFS Group Policy Complete Refresh unsuccessful: Fetch failed, attribute missing
- CIFS Guest user on ONTAP can access directories which are permitted for Domain Users only
- CIFS high latency with FPolicy EAGAIN errors
- CIFS impact after decommissioning Active Directory domain controllers
- CIFS inaccessible after enabling SMB signing
- CIFS inaccessible after moving to a different datacenter with a different IP range
- CIFS is inaccessible due to incorrect route selection
- CIFS is inaccessible with KRB5KRB_AP_ERR_SKEW due to NTP rejected
- CIFS latency due to Trend Micro AV scan issues
- CIFS latency issues, due to DC/LDAP Server becoming unresponsive
- CIFS latency spikes induced by Vscan (Trellix) debug logging
- CIFS local authentication - NTLMSSP_AUTH procedure fails
- cifs modify fails with KDC unreachable due to timeouts
- CIFS mount fails with mount error(115) Operation now in progress
- CIFS Multichannel client connects to 1 lif of the two available
- CIFS ops timeout accessing shares
- CIFS or NFS cannot be added to data-protocol field of a NAS LIF
- CIFS outage due to Kerberos error KRB5KRB_AP_ERR_MODIFIED
- CIFS outage on CA (Continuesly Available) shares during Azure Freeze Event
- CIFS password change fails silently leading to secd: secd.kerberos.preauth:error after Microsoft April 2022 Hotfixes
- CIFS password change or reset modifies msDS-SupportedEncryptionTypes value in AD
- CIFS password reset failed due to DNS misconfiguration
- CIFS Performance Degraded due to Network issue
- CIFS permission denied even with SeBackupPrivilege or SeRestorePrivilege
- CIFS scan requests by vscan server rejected with error "0x14"
- CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED)
- CIFS Server Administrative Status shows down for vserver
- CIFS server create fails with error OU not found for ONTAP 9
- CIFS server create fails with port 445 failed Operation timed out error
- Cifs server creation failed with Error "The NetBIOS name cannot be longer than 15 characters."
- CIFS server creation fails "Error: Machine account creation procedure failed"
- CIFS server creation fails because user does not use supported encryption type
- CIFS server creation fails due to DNS errors
- CIFS server creation fails due to no response for LDAP addRequest sent by Ontap
- CIFS server creation fails with "Failed to create the Active Directory machine account "XXXXXX". Reason: general failure"
- CIFS server creation fails with an error reason LDAP Error Local error occurred
- cifs server deletion failed with Error "Local domain "S-1-5-21-XXXX-XXXX-XXXX" not found"
- CIFS server join to domain fails with user from trusted domain
- CIFS server machine account deleted from Active Directory
- CIFS server object missing msDS_SupportedEncryptionTypes impacted by CVE-2022-37966 patch
- CIFS Server shows up as a Windows 2000 server
- CIFS sessions close due to idle timeout for Linux and other SMB clients
- CIFS setup error "Could not set filer password in domain: (0x3c) Connection timed out."
- CIFS Setup fails with "AUTH: notice - Could not establish LDAP security context"
- CIFS share access attempt results in client prompting for username/password
- CIFS share access fails after changing SVM LIFs to new VLAN
- CIFS share access fails due to misconfigured share level permissions
- CIFS share access fails due to moved or deleted directory
- CIFS share access fails with error "We can't sign you in with this credential because your domain isn't available"
- Cifs share access is very slow due to high load on vscan server
- CIFS share access slow and noticed error Nblade.vscanBadIPPrivAccess in ems
- CIFS share access slowness with FPolicy EAGAIN errors
- CIFS share access very slow with 2000ms+ ping times
- CIFS share appears to be empty but volume contains data
- CIFS share contains a 'loop' in the folder tree, due to a Unix symbolic link
- CIFS share create fails with error: The specified path does not exist in namespace
- CIFS share inaccessible after enabling AES encryption on the SVM
- CIFS share inaccessible after expanding audit volume
- CIFS share inaccessible after LIF migration with secd.cifsAuth.problem
- CIFS share inaccessible due to MDV volume missing on aggregate
- CIFS share inaccessible due to missing network interface service-policy entries
- CIFS Share inaccessible error "Unable to start TLS: Connect error" when LDAPS is disabled on DC.
- CIFS share inaccessible in Microsoft Windows File Explorer, but mounted drive works
- CIFS share inaccessible via DFS
- CIFS share inaccessible with EMS error "secd.dns.srv.lookup.failed"
- CIFS share inaccessible with Secd error: secd.cifsAuth.noNameMap for ONTAP 9
- CIFS share is inaccessible due to no ACEs on the CIFS share
- CIFS share is not accessible after switching over to a new CIFS server
- CIFS share is not accessible because volume is not mounted
- CIFS share is only accessible by a limited number of users
- CIFS share is unavailable after configuring symlink\widelink
- CIFS share is visible but not accessible when export policy for CIFS is enabled
- CIFS share latency with vscan enabled
- CIFS share latency with Vscan enabled during a data migration
- Cifs share not accessible because its incorrectly configured as homedirectory.
- CIFS share not accessible by user even with share permission Everyone - full control
- CIFS share not accessible due to Native FPolicy blocking access
- CIFS share not accessible for users with error Check the spelling of the name
- CIFS share not accessible using local user of vserver
- CIFS share not accessible with error "Check the spelling of the name"
- CIFS share not accessible with Network error
- CIFS share not accessible: Network path not found
- CIFS share not serving data because the Audit Log Destination is full
- CIFS share permission denied and no admin user
- CIFS share slow access due to FPolicy server without Read/Write EAGAIN
- CIFS share slow access due to Windows Preview Pane
- CIFS share unavailable via hostname for some clients
- CIFS shares access may fail and EMS displays error "cifsMaxSessPerUsrConn"
- CIFS Shares are unavailable
- CIFS shares become inaccessible after cluster admin account password is changed
- CIFS shares don't connect due to default unix user setting
- CIFS shares in ONTAP 9 are accessible only by hostname
- CIFS shares inaccessible "FAILURE: Pass-through authentication request failed"
- CIFS shares inaccessible and secd.dns.srv.lookup.failed:error
- CIFS shares inaccessible due to invalid characters in share name
- CIFS shares inaccessible SECD error "Path was incompletely processed"
- CIFS shares inaccessible when vserver is using incorrect lif to connect with name servers(DNS/DC/LDAP)
- CIFS shares inaccessible with domainfo PDBBROKEN status
- CIFS shares inaccessible with the error "Element not found"
- CIFS shares inaccessible, "no route to host", and secd.dns.srv.lookup.failed
- CIFS shares intermitently inaccessible due to NULL user session request by client
- CIFS shares not accessible after ONTAP upgrade due to Port hung
- CIFS shares not accessible because lif is not responding on port 445
- CIFS shares not accessible when client is in same subnet as one of the data lif in vserver
- CIFS shares not displaying in Windows Explorer
- CIFS shares not visible after SnapMirror replication because of $ symbol
- CIFS shares unavailable after upgrade to ONTAP 9.12.1P2
- CIFS shares unavalable due to 'BROKEN' connection to Domain Controller due to NBT/NetBIOS over TCP settings
- CIFS shares were accidently deleted
- CIFS STATUS_INTERNAL_ERROR due to object store unavailable
- CIFS subfolder lost ACL permissions and cannot be accessed nor seen
- CIFS SVM is experiencing issues contacting DNS after upgrade
- CIFS Timeouts due to SPINNP_ERR_DELAY when LIF is hosted on specific node
- CIFS traffic slow traversing WAN
- CIFS user attempts to map home directory but encounters "no such file or directory"
- CIFS user in trusted domain unable to authenticate
- CIFS user sometimes not getting access to files/directories with UNIX style security
- CIFS user unable to access Mixed volume because "No mapping found"
- CIFS users are unable to access share with mixed security
- CIFS users are unable to delete folders and files from Flexcache share
- CIFS users are unable to write on unix volume due to incorrect name-service "group" database configuration
- CIFS users facing high latency after DC upgrade CVE-2022-38023
- CIFS users get "access denied" when accessing folders from snapshot
- CIFS users get "Access denied" when trying to list a path under a share through Windows command prompt or powershell
- CIFS users getting permission denied with NIS showing Could not connect to server
- CIFS users unable to access files blocked by network security devices
- CIFS users unable to access share due to insufficient share level permissions
- CIFS users unable to access shares over LIF due to duplicate IP address
- cifs users-and-groups local-group show-members fails to show all groups
- CIFS Vserver not providing service due to lack of credentials
- CIFS with LDAP Start-TLS or LDAPS fails "Required certificate with CA xxxx is not installed"
- CIFS write speed is slow due to too many access denied errors
- cifs.replay.failure due to Non-UTF-8 characters
- CIFS/ NFS access lost after switch upgrade
- CIFS/NFS authentication/name service failures from SecD due to memory pressure with LDAPS or StartTLS
- CIFS/NFS inaccessible due to offlined aggrs and LS mirrors on the SVM root volume
- CIFS/SMB is not accessible because authentication fails when secd.kerberos.clockskew is seen in EMS
- CIFS/SMB is not accessible because authentication fails when the DNS alias/CNAME is not configured as an SPN
- CIFS/SMB share not accessible by the client application
- CIFS: Error for server \\HOST: CIFS Session Setup Error STATUS_ACCESS_DENIED
- Cisco ACI Fabric reports error multiple MACs using the same IP address
- Citrix Virtual Desktop end-users lose access to their profile folder and home folder
- Client and server RST seen when examining packet traces
- Client authentication fails with secd.kerberos.tktnyv in EMS
- Client computer account is denied access based on share level ACLs
- Client hangs when running indirect access operations against FlexGroup volumes in ONTAP 9
- Client not showing CIFS Share content
- Client receives "mount.nfs: Protocol not supported" attempting to mount with NFSv4 in ONTAP 9
- Client receives "Protocol not supported" attempting second NFS mount on local path
- Client reports "NFS server not responding" but no issues seen on the storage end
- Client reports NFS server not responding, still trying intermittently without sending any packet
- Client unable to access CIFS shares: Many simultaneous new CIFS connections
- Client unable to reach LIF using https, port 443
- Clients are experiencing multiple intermmitent I/O error when running the batch job
- Clients are observing high latency when Vscan is enabled due to the Vscan servers being overloaded
- Clients intermittently disconnecting from NAS shares/exports
- Clients using NFS over IPSEC reporting NFS not responding error due to packet drops
- Clients using NTLM when Kerberos is expected in ONTAP
- Cloud Insights Workload Security Fpolicy Best Practice and Recommendations
- Cloud Sync relationship fails after physical move of source
- Cloud-init unable to identify NAS shares after reboot of VM's from Azure
- Cluster interconnect session failed with CSM_IDLE_SESSION_TIMEOUT
- Cluster Management interface operationally down in “network interface show”
- Cluster Management LIF unreachable after upgrade from ONTAP 9.5 to 9.7
- Cluster Management unreachable due to incomplete LDAP configuration
- Cluster peer unavailable alerts cpeer.addr.warn.host:alert
- Cluster SVM unable to authenticate with Active Directory LDAP
- Cluster SVM unable to reach NIS server: EMS error ypbind: nis.server.not.available
- Cluster Switch health monitor is reporting 'Invalid SNMP Setting' in 9.8 and later
- Cluster switch log collection feature disabled after takeover and giveback or reboot
- Cohesity backup job fails returns SMB2_STATUS_INTERNAL_ERROR
- Cohesity Cloud Data Services backups fails with Netapp Error 111: Can't connect to host (err=111)
- Cohisity files backup fails with no such file or directory
- Cold data not tiered to cloud after SnapMirror
- Command "cifs domain password schedule" fails with "secd.kerberos.preauth"
- Command cifs users-and-groups privilege show does not list default privilege of cifs user
- Command to enforce encryption for communication with DC's fails
- Commands like ls or find slow or hang from Linux NFS client
- Common EMS messages for Vscan
- Common reasons "vserver cifs create" fails when trying to join Active Directory - Resolution Guide
- Communication issues between Ontap and Veeam Backup
- CommVault Archival/Backups are extremely slow
- Commvault client loses connectivity to SMB shares
- Commvault Intellisnap backups fail with Error 60002
- Commvault MediaAgent: Cannot connect to array:[ip-address] using array management credentials
- Commvault MediaManager reports Access Path on MediaAgent for MountPath is offline
- CommVault not recognising a CIFS share as having Sparse File support
- Configure domain-tunnel when only the management port has access to the DC
- Configure ONTAP NFS to recognize new group memberships more rapidly
- Configuring on-access scanning for ONTAP
- Configuring on-demand scanning for ONTAP
- Configuring Varonis FPolicy using mutual-auth
- Connecting CIFS shares via MMC results in error You do not have permissions to see list of shares for Windows client
- Connection fails between ONTAP AV connector 1.0.5 and Trend Micro ServerProtect 6.00
- Connection test failure from ONTAP Antivirus Connecter to cluster management LIF
- Connection timed out due to ONTAP not receiving ARP replies
- Connection to ONTAP CIFS Server via Kerberos not working from MobileIron client
- Connection to the FPolicy server is broken ( reason: "Select Timed out." )
- Connection with ONTAP AV Connector fails (STATUS_INVALID_WORKSTATION)
- Connection with ONTAP AV Connector fails with Error 401
- Consecutive cluster takeover initiate LIFs down with error: vifmgr.lifdown.noports:alert
- Constant of warning messages from Linux clients after configuring NFSv4 idmapping
- Container fails to deploy with Read-only file system errors
- Copy of backup files to CIFS share fail with error "File is too large for destination file system"
- Copy of multiple files to the CIFS share path is very slow
- Copyed file inherit parent directory's Unix permission
- Copying a large file to a FlexGroup volume results in "Error 0x8007054F: An internal error occurred."
- Copying data to CIFS shares is slow
- Copying file using NFS, creates file with 0 Bytes size and error: operation not permitted
- Copying large file at the time deleting other large file fails with insufficient disk space
- Copying, pasting, renaming files failing due to 0xC00002EA STATUS_CANNOT_MAKE
- Crawling NFS export with SailPoint FAM fails with error Got no exported file systems
- CRC errors seen after upgrading to ONTAP 9.7P5
- Creating CIFS server after deleting an old one fails with "Reason: duplicate entry"
- Creating a file larger then 16TB fails on 9.12.1P2
- Creating a local CIFS group fails with "Reason: duplicate entry."
- Creating CIFS Vserver fails with the message "Error: Machine account creation procedure failed" due to no valid route on ONTAP 9
- Creating CIFS Vserver fails with the message "Error: Machine account creation procedure failed" due to unreachable DNS on ONTAP 9
- Creating intercluster LIF causes SSH to node management to fail
- Creating scanner pools, applying scanner policy, and managing pools for ONTAP
- Creation of new files on CIFS share fails with Error 0x8000FFFF: Catastrophic failure
- Credentials failing when enabling AES
- Credentials pop-up appears when MAC client tries to access the CIFS share.
- CVO CIFS share is inaccessible due to the GCP FTD firewall
D
- Data access is affected due to duplicate IP address
- Data Insight performance issue
- Data LIF is unreachable after data switch replacement
- Data LIF unavailable after changing IP
- Data migration to ONTAP fails because we cannot set permissions
- Data ports not listed in device discovery show output when using CDP version 2
- Date Accessed changes automatically for files and folders In windows explorer
- DC connection fails with error "KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN" causing CIFS issue
- DC denies log on for a user due to bad password, with ONTAP CIFS as client
- DC time is greater than 5 minutes different than ONTAP time
- DDNS - Dynamic DNS - Resolution Guide
- DDNS delete operation failed
- Decrypt integrity check failed is observed after SVM DR failover for ONTAP
- Deduplicated data is shown even if all storage efficiency setting is set as false
- Defendx Fpolicy frequently turns off
- DefendX quota software has connection issues with ONTAP Storage
- Delay in clients seeing newly written NFS files
- Delayed Service Failover in Windows Server Failover Cluster when using CIFS volume as shared storage
- Delayed Write Failed and SMB disconnects seen with SMB multichannel enabled
- Deleted volume can be mounted on a specific path by client
- Deleting file fails on using SMB Folder Redirection
- Denied access to NTFS volume because AD Account is locked or disabled or expired
- Despite having rights to change permissions, inherited ACEs cannot be modified
- Device information present in network device-discovery output after lldp is disabled
- DFS links do not work on MAC OS client, with ONTAP 9.5 and symlinks enabled
- DFS namespaces with targets pointing to folders within CIFS shares cannot be seen by Mac OS clients
- diag secd cache clear command no longer supports cache name nis-group-membership
- Directory listing on volume fails with Invalid argument
- Directory listing shows more space used than NFS quota allows
- Disable NTLMV1 enforce NTLMV2 protocol with lm-compatibility-level
- Disabled AD account still has CIFS access
- Discrepancies seen in security group membership
- Display Security info of a flexcache junction path fails with "Operation not supported."
- DNS alerts showing on EMS logs after upgrade to 9.11 or above
- DNS check fails and returns with timeout but there is no impact
- DNS check on Admin/Cluster vserver does not work on all nodes
- DNS Create and PREFDC add fails with error "Network is unreachable" for DNS servers with IP xx.xx.xx.127
- DNS create fails due to network unreachability
- DNS create fails with Error "The DNS specified does not exist or cannot be reached" due to no valid route on ONTAP 9
- DNS create fails with operation timed out error
- DNS delegation stopped working correctly after AD configuration change
- DNS error for previously added trusted domain which is unreachable from SVM
- DNS fails during DC Discovery
- DNS is down - No logon servers available - Host is Down
- DNS load balancing fails after a brief LIF state transition
- DNS lookup for site SRV records fail because the site does not contain any servers
- DNS not responding due to firewall blocking access
- DNS onbox-load-balancer fails to respond when using VIP
- DNS preventing access to CIFS/SMB shares
- DNS record do not get updated after data migration to a new system
- DNS responds that hosts are not found after removing a DNS server from a Vserver
- DNS server timeouts due to stale entry
- DNS timed out error reported due to multiple default gateways with the same metric
- DNS timeouts cause secd.ldap.noServers messages
- DNS timeouts cause secd.ldap.noServers messages every 4 hours
- DNS timeouts due to firewall on one subnet
- DNS timeouts from DNS servers within configured timeout for ONTAP 9
- DNS unreachable after DR cutover in ONTAP 9.11.1 and 9.12.1
- DNS/DC connection timed out when auto revert for LIF set to true and LIF hosted on ifgrp
- Do both UDP and TCP connections count towards the 100,000 connection limit per node?
- Do I need to "modify" the SVM with the correct OU from the Active Directory?
- Do member ports of an IFGRP need to be trunked in ONTAP?
- Do ONTAP SVMs support multiple NFSv4 Domains?
- Do you need a disk sanitization license to sanitize disks in ONTAP 9?
- Do you need to generate legacy licenses when downgrading from ONTAP 9.10.1?
- Does a change in Failover group affect CIFS file IO?
- Does a CIFS server machine account require delegation trusts on Active Directory?
- Does -auth-sys-extended-groups option support Local files name services method?
- Does bootargs set option to allow CIFS user to change ctime backwards affect other ONTAP related features?
- Does changing NFS -idle-connection-timeout value can effect current sessions
- Does changing password on name mapped account affect ONTAP?
- Does CIFS auditing capture file and folder restore from the Previous Versions
- Does CIFS needs to be restarted when disabling or enabling oplocks?
- Does Clustered ONTAP support Non-Unicode SMB requests?
- Does communication between ONTAP and DC happen on windows logout when "cifs-logon-logoff" is set by CIFS auditing?
- Does CVE-1999-1225 affect ONTAP?
- Does CVE-2022-37967 impact ONTAP?
- Does CVE-2022-38023 affect local authentication for CIFS users
- Does CVE-2022-38023 have any impact to ONTAP 9?
- Does CVE-2022-38023 have impact to Domain-Tunnel Authentication
- Does CVE-2022-47939 zero day vulnerability affect ONTAP?
- Does Data ONTAP support FSCTL_FILESYSTEM_GET_STATISTICS calls?
- Does Data ONTAP support kerberos authentication requests across forest trusts?
- Does Data ONTAP support System Security Services Daemon (SSSD) algorithms?
- Does Data ONTAP support Windows NTFS symbolic links?
- Does enabling FIPS cause any issues with NFS/CIFS Protocols?
- Does enabling Windows NFSv3 clients access have any impact?
- Does FlexCache have option to restrict files and directories
- Does Flexgroup volume support Windows NFS client
- Does LIF migration trigger GARP?
- Does modifying the ldap client configuration affect the production
- Does Netapp have any recommendation for sizing of VScan servers?
- Does NetApp support configuring Kerberos Authentication for sending Autosupport?
- Does Netapp Support direct SCP file transfers for CIFS/SMB?
- Does Netapp's share level control and Windows side's file level control not work together?
- Does ONTAP 9.8 no longer create "admin$" share by default?
- Does ONTAP audit file access events via CIFS/NFS?
- Does ONTAP cache the account information used to join CIFS servers to an AD Domain
- Does ONTAP have a single counter manager to track all the CIFS SMB versions used by the NAS clients
- Does ONTAP have the ability to dynamically translate symlinks?
- Does ONTAP have the ability to manually specify a NS record for DNS load balancing?
- Does ONTAP in Cluster-Mode support specifying a user account in the ". \ User" format?
- Does ONTAP log blocked files for Native Fpolicy?
- Does ONTAP prevent web browsers from accessing CIFS share
- Does ONTAP S3 support WORM object lock requests?
- Does ONTAP support CIFS/SMB NDO?
- Does ONTAP support deleting NAS files by timestamp from within ONTAP?
- Does ONTAP support DHCP on management interfaces?
- Does ONTAP support FPolicy for NFS 4.2?
- Does ONTAP support GMSA accounts in Active Directory?
- Does ONTAP support intermediate CA signed certificates for FPolicy connections?
- Does ONTAP support Kerberos armoring?
- Does ONTAP support LDAP authentication using SHA2 hashes?
- Does ONTAP support multiple FPolicy engines?
- Does ONTAP support Perfect Forward Secrecy (PFS)?
- Does ONTAP support port 636 for LDAPS?
- Does ONTAP support Samba clients?
- Does ONTAP support Samba or non-Microsoft AD domain controllers?
- Does ONTAP support SID compression for Kerberos tickets
- Does ONTAP support single-label domains?
- Does ONTAP support SMB multichannel?
- Does ONTAP support SMB3.11 POSIX extensions?
- Does ONTAP supports Azure AD with Oauth2.0?
- Does ONTAP updates its OperatingSystem info of machine account on the AD?
- Does protocol nfs in export-policy rules include nfsv3 and nfsv4?
- Does replacing domain controller impacts CIFS IO?
- Does simultaneous use of DES, RC4, and AES cause disruption?
- Does SMB 3.0 Multichannel feature operate on LIFs across multiple nodes?
- Does the 7MTT support transition of export path with alias on ONTAP 9?
- Does the authentication on AD with ONTAP use the sAMAccountName or the UPN for user account name?
- Does the FPolicy Send Buffer need increased due to EAGAIN in ONTAP 9.8 or higher?
- Does the NAS file system support nanosecond timestamps?
- Does the next data LIF connection retry occur when a Vscan connection can’t be established on a data LIF randomly chosen by AVConnector?
- Does the SMB3 witness protocol provide automatic session revert feature?
- Does updating the NIS servers IP in vserver configuration have any impact to NFS
- Does XCP File Analytics support NFSv4
- Domain controller disables SMB1 protocol and causes issues with NTLM authentication in clustered Data ONTAP
- Domain controller reports "Windows Event ID 5840" in Windows Event Log
- Domain trust is lost, no user mapping is working
- Domain tunnel authentication can cause domain account to be locked
- Domain user fails to login cluster with Domain-Tunnel
- Domain user unable to authenticate to cluster using Domain-Tunnel
- Domain user with Full Control access is not allowed to change permissions on files
- Domain Users cannot see the Snapshots by "Previous Version" tab
- Domain user's not able to login to OnCommand System Manager due to time skew error
- Domain users not able to login to storage using system manager or CLI
- Downgrading from 9.2 may lead to performance issues when big TCP window is needed
- Duplicate IP causes CIFS outage during SVMDR
- duplicate quota rules
- Duplicate route found under "network route active-entry show"
- During cifs setup, create, or password-reset, a failure occurs due to KRB5KDC_ERR_ETYPE_NOSUPP
- During ONTAP upgrades VDI users cannot access ONTAP over CIFS
- During periods of high traffic, what is an acceptable percentage of discarded packets in ONTAP?
- During the automatic update by SystemManager, the GUI connection was lost during the update of one node
- During upgrade both controllers are panicking
- Dynamic DNS registration fails
- Dynamic DNS update of fully qualified domain name fails in ONTAP 9
E
- e0M, Service Processor or BMC unreachable on network due to VLAN tagging on switch port
- Empty IPsec policy selectors with quotation marks lead to MGWD panic
- EMS reports message FPolicy configuration replication process failed
- EMS alert "sm.mediator.in.quorum:notice" for SMBC mediator
- EMS alert reported "Nblade.cifsMaxWatchesPerTree: Received too many Change Notify"
- EMS Alert secd.lsa.noServers error on stopped Vservers in a SVMDR relationship
- EMS alert: None of the LDAP servers configured for Vserver are currently accessible
- EMS Error nblade.nfs4SequenceInvalid for ONTAP 9
- EMS error secd.ldap.noServers when using OpenLDAP with LDAPS
- EMS Event "netif.tcp.conn.bad.checksum"
- EMS event "Unable to Acquire Filer Credentials"
- EMS Event maxCID.threshold.exceeded or maxCID.limit.exceeded
- EMS event ReplayCache.ArcBktAllocErr reported frequently
- EMS list error Nblade_CifsOperationTimedOut_1 error with SPINNP_ERR_OFFBOX_VSCAN_REQD
- EMS log reports "Nblade.cifsShrConnectFailed" due to CIFS Share path missing
- EMS log reports "Nblade.cifsShrConnectFailed" error - Resolution Guide
- EMS log reports "Nblade.cifsShrConnectFailed" error due to the volume being offline
- EMS log reports "Nblade.cifsShrConnectFailed" error due to the volume does not have a valid junction path
- EMS log reports AccessCache.NearLimits message
- EMS log reports cacheOverflow:warning
- EMS Logs keep showing errors for user that is not supposed to be accessing the share
- EMS logs show "Read returned error while reading message from FPolicy server"
- EMS Nblade.vscanVirusDetected shows infected file client IP 0.0.0.0
- EMS reports "secd.kerberos.tktexpired" but no any client access failures
- EMS reports "socket.queue.limit.reached" error
- EMS reports 'adtconsolidation: adt.dest.directory.unavail'
- EMS reports secd.conn.auth.failure "could not authenticate over the network" for LDAP
- EMS reports secd.ldap.query.timed.out intermittently with no impact
- EMS reports secd.single.label.domain event
- EMS reports user.group.limit.reached error
- EMS says "wafl.bagofbits.name:warning]: Cannot provide directory entry to NFSv4 client for file ID"
- EMS secd.conn.auth.failure from specific HA Pair or node
- EMS secd.ldap.noServers - Resolution Guide
- EMS secd.lsa.noServers - Resolution Guide
- EMS secd.netlogon.noServers - Resolution Guide
- Enabling AES after applying patch for CVE-2021-42287 results in lost access to CIFS
- Enabling Kerberos on a data LIF fails when using Red Hat Identity Management KDC
- Enabling Kerberos on a data LIF fails with error: Bad encryption type
- Enabling NFS Kerberos on Data LIF fails with error : realm mismatch
- Enabling StartTLS fails withe certificate error "unable to get issuer certificate"
- Enabling the Windows explorer previous versions tab when not present in ONTAP
- Enabling virus scanning on an Vserver for ONTAP
- Encountering PAM failed to authenticate user errors when enabling Varonis FPolicy
- End users unable to save documents
- Enterprise Vault fpolicy server disconnects from SVM intermitently
- Enterprise Vault is unable to communicate to ONTAP due to misconfigured certificate
- Error "Audit failure" reported when trying to change file/folder security settings
- Error "Data ONTAP API Failed :Cannot add "DomainUser" to group "BUILTINadministrators". Reason: duplicate entry. (: 13001)" in ONTAP 9 System Manager
- Error "Device attached to the system is not functioning" seen in the backup application log on IBM Tivoli Storage Manager
- Error "Device attached to the system is not functioning" seen in windows when CIFS server listeners are not active
- Error "Device attached to the system is not functioning" seen in windows when connecting to CIFS share when CIFS server is stopped
- Error "Maximum scans already running" occurs during inactive-data-compression execution
- Error "tcp.conn.inconsistent" reported for LIF
- Error "The file is too large for the destination file system." see on Windows client when attempting to copy a file to a CIFS share
- Error "The specified port is not assigned to Default IPspace" when adding a port to an Interface Group
- Error "Vserver has no virus connection" randomly seen in roughly 10 hour increments in EMS logs: Nblade.vscanNoScannerConn
- Error 0x46a in Anti Virus McAfee error log
- Error 1314: A required privilege is not held by the client
- Error 173: Cannot acquire lock: Error 106: Cannot create tempfile for lock
- Error broken(EPIPE) received seen in EMS when connecting to FPolicy server
- Error during provisioning: no suitable datastores
- Error during XCP migration “LookupAccountSid'
- Error in Windows Event Viewer "Witness Client failed to register with Witness Server"
- Error is presented when attempting to create a new CIFS share
- Error message : wafl.watch.cache.limit.near
- Error message The RPC Server is Unavailable is reported during creation of Windows Server RDS user profile disks
- Error message: Stale Network File System (NFS) file handle
- Error Nblade.nfsConnResetAndClose reported due to failed to Send NLM Response
- Error opening or locking archive file
- Error secd.conn.auth.failure reported for preferred DC during domain discovery
- Error secd.ldap.noServers for trusted domains
- ERROR: Document not saved in Microsoft Office files
- Error: Invalid target port list. All failover group ports must belong to the same broadcast domain
- Error: Loop detected in next() for table mtrace_log
- Error: Nblade.cifsMaxOpenSameFile when CIFS Clients attempt to access files in ONTAP
- Error: Nblade.vscanConnInvalidUser connecting to TrendMicro
- Error: Nblade.vscanConnInvalidUser, however ServerProtect™ and "ONTAP AV Connector" service usernames match privileged user in ONTAP
- Error: 'rpcinfo: can't contact portmapper: RPC: Remote system error - Connection timed' seen connecting to ONTAP
- Error: secd.lsa.noServers: None of the LSA servers configured for a Vserver
- Errors in EMS: Unable to make a connection (LDAP (NIS and Name Mapping)
- Errors in event log with IPv6
- ESXi APDs or poor performance only on ESX but not ONTAP due to duplicate VMKernel IPs
- ESXi datastore goes offline following switch upgrade and LIF failover
- ESXi fails to mount NFS datastore from destination volume after breaking SnapMirror relationship
- ESXi NFS4.1 VMDK inaccessible after takeover
- ESXi NFS mount failed: The mount request was denied by the NFS server
- Even after removing client IP from local netgroup file client still shows part of netgroup
- Event log show error netif.linkErrors
- Event message: secd.nfsAuth.noNameMap
- Events for secd.nfsAuth.problem due to STATUS_TRUSTED_DOMAIN_FAILURE (0xc000018c)
- Excel file not scanned when renamed
- Excluded a volume from Fpolicy but the volume is still monitored
- execsOverLimit message found in event logs for NFSv3 clients
- execsOverLimit message found in event logs for NFSv4 clients
- Expired certificates for SSL/TLS cause secd.ldap.noServers
- Explicit user quota rules for NFS/CIFS accounts with only numbers not correctly handled
- Export policy created from CLI and system manager shows different NFS versions
- Export policy evaluation intermittently fails for hostnames
- Export policy not working as expected for CIFS client on qtree
- export-policy check-access for the volume/qtree shows as "Denied" for R/W operation
- export-policy check-access shows a different level of mount access than is actually given
- External fpolicy server terminated due to multiple default gateways
- External servers unavailable from node and alerts for ipfw.ReachedMaxStates
- Extreme Client latency and/or hang due to shortage of long-term, replay cache buckets
- Extreme latency mounting from RHEL
F
- Facing permission denied error, when clients try to perform writes on qtree
- Facing slowness while opening shares
- Fail to add vserver local administrator to ACE via Windows explorer
- Fail to create VLAN Error: VLAN interface names must adhere to format
- Fail to disable AES encryption on CIFS server
- Fail to enable Kerberos on a data LIF due to unable to connect AD LDAP
- Fail to login ONTAP CLI via SSH with domain-tunnel
- Fail to run command: chown on the Linux client
- Failed connection from Commvault due to RESULT_ERROR_SECLIB_BAD_MARSHAL_FORMAT
- Failed to access files containing special characters on volume with volume language C
- Failed to access NFS share with EMS event secd.conn.auth.failure
- Failed to add second DNS zone in network interface on ONTAP
- Failed to connect SVM LIF to SolarWinds external FPolicy server
- Failed to connect to CIFS share with CIFS server alias - KRB5KRB_AP_ERR_MODIFIED
- Failed to create or modify CIFS server. Reason: duplicate entry. (Error: 13001)
- Failed to create qtree due to no space left on device
- Failed to create the Active Directory machine account Reason: Socket receive error when SMB1 is disabled in AD on ONTAP 9
- Failed to create the machine account with LDAP Error Local error occurred
- Failed to delete CIFS vserver with error KRB5_KDC_UNREACH
- Failed to delete qtree with reason: Qtree contains files
- Failed to enable LDAP session security in a disjoint namespace
- Failed to instantiate ACL error on RHEL when setting NFSv4.1 ACL
- Failed to resolve the security identifier (SID) for the account named "TEST\user". Reason: Bad user 'user' or domain 'TEST'. (Error: 13001)"
- Failed to resolve the SID for the account named "domain/group" while adding security group to cifs share
- Failed to scan File share, 'NoneType' object is not subscriptable
- Failover of the cluster management LIF to the surviving node during a planned takeover is delayed
- Fails to add an audit setting on the CIFS client side
- Fails to create CIFS server with error operation timed out due to missing PTR record
- Fails to get unix credential from NIS server
- Fails to ping ONTAP because Cisco L3 switch doesn't update ARP entry
- Fails to query trusted domain UNIX attributes from the LDAP server global catalog
- Failure to connect CIFS share after modifying qtree name
- Failure to open files with long names in ONTAP
- FAILURE: Unable to contact DNS to discover domain controllers
- fallocate shows as unsupported during benchmarking
- False Alert NFSv4 Is Not Supported For SVMs That Host FlexGroups
- False time skew errors KRB5KRB_AP_ERR_SKEW observed between SVM and DC
- FAQ - User File Operations
- FAQ: FPolicy: Auditing
- FAQ: Using Windows MMC with ONTAP
- Few folders\files from Origin volume is not visible in Flex cache volume
- File access fails due to Vscan server not closing the file after setting delete on close flag
- File copy over CIFS from Red Hat 7.3 to NetApp fails
- File created by CIFS users with an inherited NFSv4 ACL cannot be modified by the same user
- File creation using VI results in a swap file warning
- File extensions added to "File Extensions Not to Scan" are being sent to AV Scanner
- File in mounted snapshot directory cannot be opened in RMAN
- File level operations issue due to quota exceeded event
- File modification and changes without user interventions since data migration
- File name accessed using NFS gets encoded repeatedly
- File not found one second after creation
- File permissions for owner, group reflect as nfsnobody for ONTAP 9
- File property "last access date" does not change when open file in cifs share
- File reappears after being deleted - Resolution Guide
- File reappears after deleting it
- File reappears after deleting it in Windows Explorer
- File rename fails with Error 0x8007054f when mandatory vScan enabled
- File stuck in delete pending status on FlexCache origin
- File with Read-only attribute cannot be copied to a Snaplock volume using robocopy
- file-directory apply fails with "no such file or directory"
- file-directory command for cifs share path fails with No such file or directory error
- Filename is created with non-utf-8 code on the utf-8 volume, some multi-byte character is showing garbled
- Files and folders getting deleted in volume path
- Files appear to be missing when accessing a CIFS share
- Files are deleted by "Delete-on-Close" and waiting for someone close the files, but it's not shown on "locks show"
- Files created by root shows as nobody on client when mounting NFSv4 with kerberos
- Files created from Windows client on a UNIX security volume does not have owner according to the name mapping
- Files created in Windows NFS with incorrectly permissions
- Files in CIFS share have future time in date modified field
- Files in folder not getting correct permissions inherited and propagated
- File's mtime and ctime timestamp out of sequence when written on flexgroup volume
- Files on CIFS share open slowly because oplocks are disabled
- Files saved from Microsoft Outlook showing incorrect create or modified date of January 2038
- File's time stamp is incorrectly set to future time
- Files with specific extensions not accessible due to Native FPolicy File Blocking
- Firewall policy mgmt-nfs does not contain portmap rule
- Flexcache volume become full and NFS client requests got hung
- FlexCache volumes for ONTAP 9.5 and higher
- FlexCache with SVM-DR
- Flexgroup stopped serving NFS data after a Node panic or halt
- Flow control administrative setting ignored for cluster ports using RDMA
- Folder appears as a shortcut
- Folder names containing a dot (.) and spaces are not accessible when using Fpolicy native engine
- Folder cannot be seen by CIFS end user
- Folders not display a stop sign after the ONTAP upgrade to 9.12.1P4
- Force CIFS users to be mapped to specific UNIX group
- FPolicy blocks all files including files set as exceptions
- FPolicy causing Nblade.vscanBadIPPrivAccess warnings
- FPolicy connection issue due to EPIPE error
- Fpolicy continuesly disconnects and rarely reconnects
- Fpolicy disconnects with Veritas Data Insights CIFS latency threshold exceeded
- FPolicy doesn't reconnect immediately after TakeOver/GiveBack
- FPolicy EAGAIN errors seen in ONTAP
- FPOLICY EAGAIN Resolution Guide
- FPolicy enable does not result in engine-connect with many policies for ONTAP 9
- Fpolicy Error: "Establish TCP connection returned error", because Data LIF service-policy is missing the data-fpolicy-client service
- FPolicy event isn't generated in a node along with "TCP Connection to FPolicy server failed" in EMS
- FPolicy events have non-sequential ReqID numbers
- FPolicy external-engine is unable to establish a connection with One Identity FPolicy server
- FPolicy fails when ONTAP service account name formatting does not match FPolicy
- FPolicy file blocking for ONTAP 9
- Fpolicy FSM Panics after upgrading to ONTAP 9.13.1 when using schema version 3
- FPolicy is connecting to FPolicy server using an unexpected LIF
- FPolicy is not working, extensions are not getting blocked
- FPolicy notifications are not being sent to FPolicy Server
- Fpolicy reports rename path and original path are same for rename operation
- Fpolicy server cannot connect to a specific SVM
- FPolicy Server disconnected due to disallowed IP in service-policy
- FPolicy server disconnecting with 'SIGPIPE' alerts seen in EMS
- FPolicy server frequently disconnects due to TCP port not Listening
- Fpolicy server not connected due to "no local lif present" on one or more nodes
- FPolicy server not seeing events for files with no file extension
- FPolicy server unable to connect to the ONTAP node because https service is not part of network service-policy assigned to the LIF
- FPolicy servers enabling automatically despite issuing ‘vserver fpolicy disable’ from ONTAP
- FPolicy servers fail to authenticate due to CVE-2022-38023
- FPolicy unable to connect due to 'Mutual-Auth' being configured
- fpolicy.server.disconnect due to SSL handshake failed with Intermedite CA in chain
- FPolicy: What is it and what does it do?
- Free space not displayed correctly on Windows/Linux SMB client
- Frequent disconnection to FPolicy server due to concurrent access from two different collectors
- Frequent Fpolicy server disconnection due to Keep-Alive packet loss
- Frequent nfsConnResetAndClose error due to packet sent using the wrong port
- From which log can confirm that the export policy applies?
G
- Gaps present in-between CHARON.LOG files
- General Vscan troubleshooting for ONTAP
- Get user credentials procedure failed with KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN
- Getting "permission denied" while migrating on-prem to AWS FSX using AWS data sync
- Getting error while creating fpolicy scope; Error - "command failed: Cannot configure an FPolicy scope on an administrative Vserver"
- Getting permission denied due to no execute permissions
- Getting repeated alerts secd.ldap.noServers as Computer object is not available
- getxxbyyy getgrlist display partial UNIX groups with RFC2307bis
- Go Anywhere client is unable to consistently access CIFS/SMB Share
- Group quota cannot be retrieved by NFS on ONTAP Server, from a Linux system
- gunzip operation not permitted in NFS exports folder
H
- HaNotReadyCifsNdo_Alert reported in event log on single node Cluster
- hierynomus / smbj SMB2/SMB3 client library unable to access CIFS share
- High access latency due to FPolicy not sending screen requests
- High CIFS access latency after running on-demand vscan because AV Connector input queue is getting full
- High CIFS latencies with SECD CRIT messages
- High CIFS latency seen due to VSCAN backpressure
- High CIFS Latency with vscan enabled
- High CPU utilization due SecD memory issue
- High CPU utilization on a node when using BranchCache
- High latency accessing a single CIFS share
- High latency after enabling FPolicy due to Fpolicy Server in Remote Site
- High Latency due to Vscan scan-timeout
- High Latency Triggered due to requests created by a single client
- High load of CFM packets dropped after upgrade to ONTAP 9.8
- High NAS latency after upgrade to ONTAP 9.8 and above with FPolicy enabled with Sporadic Workload
- High Network Processing (CPU N-blade) latency and poor performance due to locking
- High number of connections lead to ONTAP firewall error ipfw.ReachedMaxStates causing CIFS and NFS outage
- High number of Microsoft event ID 4670: "Permissions on an object were changed" seen in audit logs
- High number of open nfsv4.x connections due to Storepool resources not release
- High packet loss in the network with switches having different port speeds
- High port utilization being reported for management port e0M on network
- High sustained latency after ONTAP upgrade to 9.8 and above due to FPolicy EAGAIN
- Home directory access fails and EMS logs Nblade.cifsShrConnectFailed
- How and why should a netmask be changed on a LIF?
- How are NFS export-policies evaluated in ONTAP 9?
- How can all directories for a vol/qtree be automatically owned by a certain group
- How can I check in ONTAP if an external service such as netlogon, ldap-ad, lsa, ldap-nis-namemap, or nis is responding slowly?
- How can I easily update the AVCONNECTOR polling service on multiple servers?
- How can I find out who deleted a file or folder?
- How can I identify which clients are mounting volumes via NFS
- How can I remotely update AVCONNECTOR credentials?
- How can I tell pNFS is being used?
- How can nfs client mounting a specific ONTAP volume be identified?
- How do I add a quota rule for a domain user to an existing quota policy?
- How do I check space usage per directory with XCP?
- How do I check whether a port is listening in ONTAP 9
- How do I confirm ONTAP is using LDAPS?
- How do I disable ypbind
- How do I prevent my SVM machine account from getting disabled due to inactivity
- How do I view TCP congestion information in ONTAP
- How do LS mirrors affect NAS access when new volumes are added?
- How do you change DNS to use TCP instead of UDP in ONTAP?
- How do you determine the most specific network route ONTAP 9.2 and later versions will use for network traffic?
- How do you disable Continuous Availability (CA) from a CIFS share?
- How does Access Based Enumeration (ABE) work?
- How does an NFS client determine which NFS version to use when mounting?
- How does an NFS client get evaluated for Access via export-policies
- How does an SMB client identify which authentication style to use?
- How does file locking work between NFS and SMB protocols?
- How does IP fast path function?
- How does KB5008380 Microsoft CVE-2021-42287 Authentication Updates in Enforcement mode impact ONTAP 9 CIFS Operations
- How does LDAP name-mapping work?
- How does ONTAP 9.2 and later versions select a route?
- How does ONTAP generate permissions for NFS and CIFS clients, when the volume security style is not native to the protocol?
- How does the NFSv4 grace periods work?
- How is ADV190023 related to secd.ldap.noServers in the EMS?
- How is Mandatory Locking supported for NFSv4 on ONTAP 9?
- How is ONTAP affected by DORA?
- How is round-robin implemented when using multiple scan servers?
- How is the last accessed date updated on NetApp file servers?
- How is the NIS server selected if we have multiple NIS servers configured on storage
- How long do DNS records remain in the ONTAP's DNS cache?
- How long does it take for the ONTAP to reclaim inode resources
- How long will the IP be blocked when getting secd.rpc.authRequest.blocked alert?
- How ONTAP determines route metric based on media speed
- How ONTAP implements SMB crediting
- How Quotas display with NFS clients "df " output?
- How to access a CIFS share with a computer account
- How to access a share from outside a domain?
- How to access audit logs?
- How to access CIFS from Linux machine using SAMBA
- How to access CIFS shares, when all Active Directory (AD) servers are unusable
- How to access snapshots from NFS clients
- How to access snapshots in an NFS export in ONTAP
- How to activate Central Policy tab after enabling Dynamic Access Control (DAC)
- How to add a domain user to ONTAP's local admin group via System Manager
- How to add a domain user to the built-in local administrators group in ONTAP
- How to add BUILTIN\Administrators to file-level permissions from Windows
- How to add NetApp SNMP MIB to Wireshark
- How to adjust Linux clients to avoid nblade.execsOverLimit:error
- How to administer a SVM with an AD account with no CIFS server configured?
- How to allow anonymous root mount
- How to allow users to manage Microsoft CIFS auditing?
- How To analyze and troubleshoot LIF connectivity issues, in a non-routed network
- How to analyze ping failures scenarios using packet traces?
- How to apply NTFS permissions on a directory where inherited and non-inherited permissions differ for the same user or group
- How to apply NTFS permissions on a directory where inherited and non-inherited permissions differ for the same user or group via PST
- How to audit when a CIFS share is deleted from a client with CIFS Auditing
- How to avoid Windows security pop when accessing CIFS share using a local Windows user
- How to break Common Internet File System Protocol (CIFS) locks from a Windows host
- How to break locks via ONTAP CLI
- How to calculate send buffer for ONTAP 9 FPolicy
- How to capture a packet trace on a Mac
- How to capture client-side packet trace from SUSE LINUX
- How to capture packet traces in ONTAP pre-9.2
- How to capture packet traces on ONTAP 9.10+ systems
- How to change cifs share level permissions in Azure Netapp Files
- How to change ownership on a UNIX or UNIX-like host with CHOWN
- How to change permissions on a UNIX or UNIX-like host with CHMOD
- How to change port VLAN ID in ONTAP 9
- How to change security style of volume from Unix to NTFS in ONTAP 9
- How to change the IP space or broadcast domain on a port
- How to change the LDAP port from 389 to 636 for AD-LDAP server connections
- How to change the user used by vscan server from an existing user to another new user?
- How to change the userAccountControl setting of an ONTAP CIFS server to remove the password never expires flag
- How to change\set the owner- and groupship of a volume (security-style: UNIX) to a specific user\group
- How to check AV connector's version?
- How to check Active Directory functionality level using Powershell
- How to check directory size for message wafl.dir.size.warning
- How to check if a Windows client is using Kerberos authentication to access a CIFS share within ONTAP
- How to check if SMB multichannel is being used
- How to check if the patch for CVE-2022-38023 is installed using Powershell
- How to check if the SMB signing is required
- How to check if user has System Security ACL permissions
- How to choose the correct ldap schema
- How To clear client side cached Kerberos tickets using klist command
- How to clear NFS locks during network crash or outage for Oracle or other database files
- How to collect a Perfstat7 in Unix/Linux
- How to collect a SECD trace
- How to collect a sectrace in System Manager Classic
- How to collect rolling packet traces using pktt on ONTAP 9.1 and below systems
- How to collect unencrypted packet traces over IPSEC in Linux
- How to configure a data SVM to use only Kerberos for authentication
- How to configure a firewall that resides between a Windows Domain Controller and a NetApp controller
- How to configure AD authentication for cluster when CIFS is not licensed
- How to configure an all_squash equivalent on a NetApp NFS export
- How to Configure and apply file security on NTFS files and folders using the CLI
- How to configure and confirm LACP timers in ONTAP 9
- How to configure antivirus with a CIFS Server in Workgroup mode
- How to configure CIFS Auditing to capture a folder rename
- How to configure CIFS/UNIX Access in Mixed Security without Permissions Clobber
- How to configure fpolicy in disconnected mode
- How to configure iperf3 server from ONTAP
- How to configure LDAP Authentication for Cluster (Admin) SVM
- How to configure LDAP authentication for the administrative SVM
- How to configure LDAP client schema for RFC 2307bis
- How to configure LDAP on a filer to connect to Microsoft's Active Directory LDAP implementation
- How to configure multiple clients for IPsec for ONTAP 9.8 and higher
- How to configure native Fpolicy in ONTAP to allow extensions
- How to configure native Fpolicy in ONTAP to block extensions
- How to configure NFSv4 in ONTAP?
- How to configure no_root_squash
- How to configure no_root_squash for ONTAP 9
- How to configure non-root users to change ownership of files using NFS in ONTAP
- How to configure ONTAP 9 home directories
- How to configure ONTAP to use a Linux LDAP server
- How to configure Secure Dynamic DNS on ONTAP (Secure DDNS)
- How to configure ssh for accessing a data SVM via a domain user?
- How to configure ssh for accessing the admin SVM via a domain user
- How to configure vfiler in Windows Workgroup authentication mode
- How to configure vserver to fetch passwd/group information from NIS
- How to confirm ifgrp settings in ONTAP
- How to confirm which volume\qtree can be accessed by NFS client
- How to control access to a Snapshot directory in ONTAP 9
- How to control access to snapshots and previous versions for CIFS clients
- How to control access to the snapshot directory for NFS clients
- How to convert a CIFS SVM from a domain membership to workgroup
- How to convert a CIFS SVM from workgroup to domain membership
- How to Convert from a VLAN Tagged Singlemode Interface Group (IFGRP) to VLAN Tagged Ports
- How to create a CIFS server in ONTAP 9
- How to create a local user to access a CIFS share?
- How to create a root squash export policy rule in ONTAP
- How to create a symbolic link in ONTAP without the need for NFS
- How to create a symlink and widelink in ONTAP
- How to create and understand vserver name-mapping rules
- How to create CIFS Superuser or provide SeTcbPrivilege
- How to create LDAPS authentication
- How to create two failover groups for one broadcast domain
- How to decommission an old CIFS server and use that as an alias for a new CIFS server, after migration
- How to delete a directory with a long directory path from a Windows client
- How to delete a symlink and widelink in ONTAP
- How to delete an application file that has more than 255 Characters in the File path; on a Windows host
- How to delete CIFS server without deleting the machine account from AD
- How to delete the leftover AUDIT MDV staging volume when CIFS auditing is already disabled?
- How to detect SMB1 only connections to an ONTAP system
- How to determine CIFS, iSCSI, or NFS response time from packet trace
- How to determine if a NFS client is sending a RENAME call
- How to determine if a Riverbed appliance is in packet trace
- How to determine if one defective DNS server is impacting authentication process in ONTAP?
- How to determine SMB protocol used for domain controller connection within an ONTAP SVM
- How to determine what caused a mass deletion of files
- How to diagnose and mitigate impact due to CVE-2022-38023 - Resolution Guide
- How to disable AES encryption on a CIFS SVM
- How to disable CDP (CDPD) and LLDP on data ports
- How to disable ip.fastpath in ONTAP 9.1
- How to disable IPv6?
- how to disable NFS Kerberos Interface without removing the Service Principal Name
- How to disable SetUID bits on Vserver for NFS clients
- How to disallow bypass traverse checking
- How to discover Active Directory Domain Controllers using nslookup
- How to display information about open NAS files
- How to download captured packet traces from ONTAP
- How to enable auditing of NFS events in ONTAP 9
- How to enable CIFS share access with no credentials anonymous login or from untrusted domains
- How to enable CIFS/SMB Signing
- How to enable IPsec
- How to enable LDAPS on a CIFS SVM
- How to enable LLDP
- How to enable ONTAP Antivirus Connector Logging
- How to enable ONTAP Antivirus connector logging with cmd.exe or Powershell command
- How to enable or disable Netbios over TCP in ONTAP 9
- How to enable SMB 1.0 in ONTAP 9
- How to enable SMB3 encryption without enforcing it
- How to enable Start-tls for LDAP connection on SVM
- How to enable the equivalent of all_squash in clustered Data ONTAP
- How to enable Windows Explorer previous versions tab in ONTAP 9
- How to encrypt LDAP traffic when connecting to the Global Catalog
- How to ensure file-ops logging is retained on a specific SVM?
- How to ensure LIFs do not automatically revert after giveback
- How to enter the filer's CIFS shares in the DFS root tree
- How to exclude the file extension .stswp from vscan
- How to extract the list of shares and permissions / groups of each site
- How to find additional information for common NAS terms
- How to find an active session for a particular CIFS share
- How to find export policy to create report using Active IQ
- How to find out how long certain on-demand scans were running
- How to find the reason for vscan connections becoming disconnected
- How to flush netgroups cache in Clustered Data ONTAP?
- How to flush NFS credential and name-service caches to update group membership
- How to force Active Directory authentication over the management interface
- How to force authentication through specific domain controllers
- How to force or request a virus scan from ONTAP with vscan?
- How to force SMB over TCP when NetBIOS is disabled on an Active Directory domain controller
- How to get statistics for top client users in ONTAP 9
- How to give a client full control to a junctioned volume over NFS, but no access (not even read access) to the root volume of a vserver
- How to handle incompatible or unsupported SMB clients with ONTAP
- How to identify CIFS open files using the ONTAP CLI
- How to identify CIFS session user
- How to identify if packet drops are seen
- How to identify LDAP queries for UNIX credentials?
- How to identify problematic NFSv4 clients consuming storepool resources
- How to identify VSCAN server latency
- How to increase maximum number of simultaneous outstanding Windows client requests for SMB1?
- How to know which client is locking which NAS file
- How to list clients which mount to NFS share via NFS
- How to log into ONTAP CLI with an Active Directory domain account
- How to make symbolic links (widelinks) work for CIFS clients on ONTAP
- How to manually configure RequireSeal to Compatibility Mode on a Windows domain controller
- How to map a network port to its switch and port
- How to measure Round Trip Time in Wireshark
- How to migrate CIFS server to new ONTAP cluster
- How to migrate CIFS shares between 2 NetApp clusters using snapmirror
- How to migrate from a VLAN tagged interface group (IFGRP) to a new IFGRP with a different distribution function or mode
- How to mitigate CVE-2016-3997 in ONTAP 9
- How to modify a CIFS SVM Machine Account name on the Domain Controller
- How to modify a gateway or route for a Vserver
- How to modify an interface to use a new port
- How to modify name mapping in System Manager
- How to modify the IP address of the node management LIF
- How to modify the netmask of a subnet with LIFs associated to it
- How to modify volume or qtree unix-permission, unix-user and unix-group
- How to monitor the health of interface groups in ONTAP
- How to mount an NFS export to a VMware ESX server which requires "root" mount permission
- How to move a CIFS server from one domain to another in ONTAP
- How to move a port from one broadcast-domain to another broadcast-domain while LIFs are using the port within ONTAP 9
- How to move an SVM to a specific OU in a new domain
- How to move files to a NetApp CIFS server using Robocopy to retain Windows ACLs
- How to move origin FlexCache volume from one cluster to another cluster
- How to only use Kerberos authentication with the ONTAP AV Connector
- How to prepare for data network switch upgrade or replacement
- How to prevent anonymous CIFS logon
- How to prevent directories from being renamed while clients are accessing them?
- How to prevent files with ADS (Alternate Data Streams) from being scanned by Vscan
- How to prevent FlexCache from hanging in disconnected mode
- How to quickly check latency caused by Fpolicy for ONTAP
- How to recover CIFS shares deleted during the CIFS recreation
- How to recover individual files from a DR SVM
- How to remove "Everyone" from the file level permissions at the top level of a volume
- How to remove a file extension from a native FPolicy configuration created by System Manager using System Manager to recreate the policy
- How to remove a file extension from a native FPolicy configuration created by System Manager using the ONTAP CLI
- How to remove a file/directory with a long name from a Linux NFS client
- How to remove VSCAN configurations
- How to rename a CIFS share
- How to rename CIFS server name or OU in Active Directory
- How to reset NTFS permissions on a CIFS share created on the root of the Volume or Qtree
- How to restore a file from the Previous Versions tab
- How to restore files and directories from a snapshot on ONTAP using the CIFS protocol
- How to restrict access to specific NFS hosts on a Unix volume in ONTAP 9
- How to restrict authentication styles in SMB negotiation
- How to restrict CIFS share access based on IP address/subnet/auth type
- How to run and collect Sectrace
- How to run Sectrace for NFS
- How to secure NFS traffic over wire?
- How to set an SPN
- How to set dynamic home directories to read-only
- How to set NFSv4 ACLs on a file/directory
- How to set ONTAP to use LDAP Signing or Sealing for CIFS/NFS
- How to set SPN for storage when using NetBIOS alias
- How to set up CIFS auditing in ONTAP 9
- How to set up CIFS auditing retention duration
- How to set up DNS load balancing in ONTAP
- How to set up NTFS permissions to allow to Create or Modify files, but not Delete
- How to set up Windows to UNIX user mapping over LDAP
- How to setup a cloud sync relationship from ON-PREM to FSx for ONTAP
- How to setup Cross-Forest Unix name mapping with AD identity management for Unix
- How to setup kerberized NFS using Windows AD and keytab
- How to shorten lock reclaim time
- How to show effective permissions for Windows or Unix Users
- How to speed up file-directory apply command
- How to split ports from a broadcast domain into a dedicated broadcast domain?
- How to take ownership of files and folders from Windows to modify permissions
- How to tell if a user is connecting to a share hosted on NetApp directly or via DFS
- How to terminate a CIFS sessions in ONTAP 9 for specific Windows users
- How to terminate CIFS or close a specific session for a volume in ONTAP
- How to test port connectivity in Linux
- How to test port connectivity without the use of telnet in Windows
- How to track top CIFS and NFS clients in ONTAP 9
- How to transfer files and directories names with special characters via XCP NFS
- How to translate Windows SID?
- How to troubleshoot access to home directories in ONTAP 9
- How to troubleshoot Autolocation (Node Referrals) in ONTAP
- How to troubleshoot basic lock issues with NAS protocols
- How to troubleshoot CIFS client access issues caused by oplock delayed breaks
- How to troubleshoot CIFS file access issues when Vscan is involved on Data ONTAP 7G
- How to troubleshoot CIFS share and export policy access permissions
- How to Troubleshoot Client Permission Issues in ONTAP 9
- How to troubleshoot DNS issues in ONTAP
- How to troubleshoot File Permissions for CIFS access denied
- How to troubleshoot intermittent NFS connectivity problems
- How to troubleshoot issues with Microsoft Office documents
- How to troubleshoot LACP port participation partial or none in ONTAP 9.2+
- How to troubleshoot Microsoft client authentication problems on a NetApp Storage Controller
- How to troubleshoot network layer for packet loss observed along with multiple duplicate acknowledgements and retransmissions
- How to troubleshoot NFS access to an NTFS security style volume/qtree in ONTAP 9
- How to troubleshoot NFS APD issues on VMware ESXi
- How to troubleshoot ONTAP Antivirus Connector 401 errors
- How to troubleshoot ownership update failure with CHOWN command
- How to troubleshoot pBlk exhaustion
- How to troubleshoot slow access to files via CIFS/SMB protocol
- How to troubleshoot slow browsing on CIFS Shares
- How to troubleshoot SMB Signing on a NetApp Storage Controller
- How to troubleshoot unreachable LIFs?
- How to troubleshoot Windows Error 53 when mapping CIFS via control panel
- How to troubleshoot: Unable to mount a volume using NFS in ONTAP 9
- How to understand netgroup negative cache
- How to understand NTFS permissions within a Windows environment
- How to understand UNIX permissions
- How to update the ONTAP AV Connector service LIF GUI password when a management LIF is used
- How to update the ONTAP AV Connector service password
- How to update TLS certificate for ONTAP S3
- How to upgrade or reboot virus scan servers without interrupting virus scan service
- How to upgrade the ONTAP Antivirus Connector
- How to use "DNS check" command to diagnose issues with Name servers
- How to use a (g)MSA for ONTAP antivirus services
- How to use file-directory show and show-creds to check for permissions
- How to use Microsoft ICACLS to dump file and directory ACLs to a text file
- How to use netstat to troubleshoot network problems in ONTAP 9.5 or newer
- How to validate and update Vserver DNS servers in ONTAP
- How to validate the time on an ONTAP cluster to match the domain controller in UTC
- How to verify a file’s timestamps using CLI
- How to verify CIFS Share access from Windows?
- How to verify SMB version
- How to verify the name-mapping is working as intended
- How to verify whether the Signing/Seal and LDAPS are enabled from Secd log
- How to view indirect NFS traffic traversing the cluster interconnect in ONTAP
- How to view network connections on different versions of ONTAP?
- How to view old configurations of name service in ASUP
- How to view per client statistics in ONTAP 9 and later
- How to workaround impact seen after applying CVE-2022-38023 on domain controllers after June 13 2023
- How to: Deploy a CIFS server in CVO with multiple Data LIFs
- How we can know that LDAPS is working?
- How does audit log rotation effect the log (destination) volume?
- HTTP connection from Varonis application to the SVM data LIF for Fpolicy fails
- HTTPS connections to an ONTAP LIF are not possible, though HTTP works
- Hyper-V and CIFS outage due to unavailable Active Directory
- Hyper-V host in a cluster reports the event ID 12290 once every hour
- Hyper-v host is reporting SMBWitnessClient EventID:4 and 6
- Hyper-V live migration fails after CIFS disruption even with VMs stored on continuously available shares
- Hyper-V virtual machines become inaccessible after a LIF migration or storage take over
I
- IBM AIX client hangs on Read/Write operations in NFS share with NFSv4
- IBM Connectivity issues due to SMB credits exhaustion
- IBM MQ fails over when ARP cache expires
- icacls command finishes with no errors on CIFS share but permissions remain
- ICACLS reset - all permissions get stripped
- If a VLAN is configured in ONTAP, do the member ports of the IFGRP need to be connected to a trunk port on the switch?
- If preferred DC goes offline, does ONTAP tries to connect to other discovered DC for authentication?
- If the LDAPS and Signing(or Seal) is enabled on the ONTAP side only without on AD domain, are those functioning working normal?
- Ifgrp attached to a Juniper switch has inactive links - Rx and Tx LACP PDUs are fine
- Ifgrp member ports show degraded while ifgrp shows reachable after upgrade to ONTAP 9.13.1
- ifgrp shows no active ports
- IFGRP Tx 'Lagg drops' count increasing during its member port link flapping
- IIS Virtual Directory fails to connect UNC path
- I'm not able to login with the AD credentials to System Manager
- Impact of unjoing an HA pair when SMB Auditing is enabled
- Implications of changing the language of a volume after data has been written to it?
- Implicit Windows to UNIX name mapping fails when Windows user has upper case characters
- Importing keytab-uri for kerberos interface fails and reports timeout message
- In an environment using an LDAP server, ACLs are displayed as SIDs on clients
- In diag mode EMS shows message "secd.unexpectedFailure: vserver (Cluster) Unexpected failure"
- In ONTAP 9.2 - 9.5, HTTPS connections fail with [bsdsocket.queueLimit.reached:error] presented in EMS
- In the evtx output of SVM Audit, how to verify either success or failure audits?
- Inability to Create a Domain Password Scheduler on a Vserver
- Inconsistent UNIX permission bits are displayed when Unix users accessing an NTFS security style volume
- Incorrect "ifstat" values are displayed for the Transmit-Total errors counter for a CNA card
- Incorrect display path in Fpolicy notification after file rename
- Incorrect ONTAP LDAP client ip address causes secd.ldap.noServers
- Incorrect owner after chown on NFS client, due to username case
- Incorrect Permissions after restoring from a snapshot
- Increase of OTHER OPS for Windows 10 clients causing high volume latency
- Increased latency and timeouts due to vscan latency
- Increasing Fragment errors on an ethernet port
- Initial mount NFSv4.1 of datastore fails, athough export policy allowed access
- Input/output error when listing directory on UDP NFS mount in ONTAP 9
- Installation of ONTAP AV connector 1.0.4 and 1.0.5 fails with Error 1923
- Installation ONTAP Antivirus Connector 1.0.5 fails with Error 1923
- Installing ONTAP AV Connector fails with "target account name is incorrect"
- Interface group does not work after switch replacement from Cisco to H3C
- Interface group down after configuration change on switch
- Interface group port participation shows partial or none
- Interface is down after LIF migration
- Interfaces running at 1gb rather than 10gb
- Intermittent access denied on Flexgroup with NFSv4 or NTFS ACLs
- Intermittent access to CIFS share issue due to secd.conn.auth.failure event reported during SiteDiscovery
- Intermittent authentication failure for AD domain service account
- Intermittent CIFS access denied due to delay in Domain Controller Discovery
- Intermittent CIFS access issues with error "The account is not authorized to log in"
- Intermittent CIFS access using Connect Direct
- Intermittent CIFS authentication failures
- Intermittent CIFS authentication issues after installation of CrowdStrike agent on domain controllers
- Intermittent CIFS authentication time outs
- Intermittent CIFS Authorization failure
- Intermittent CIFS connectivity issues with heavy write workload
- Intermittent CIFS share access impacted due to DNS failures
- Intermittent CIFS share access issue due to DFS namespace misconfiguration
- Intermittent CIFS share access issues due to DNS lookup failures
- Intermittent CIFS share disconnects
- Intermittent Critical Alert: Ransomware attack from user shows double file extensions
- Intermittent fluctuations in ifgrp ports due to ARP storm
- Intermittent hanging on NFSv3 shares after ONTAP Upgrade
- Intermittent issues while accessing files on a CIFS share due to SMB Signing
- Intermittent NFS access denials due to negative netgroup lookups from NIS in ONTAP 9
- Intermittent NFS connection fails
- Intermittent NFS data access issue due to overwhelmed LDAP Servers
- Intermittent NFS slowness
- Intermittent print issues because firewall is resetting smb connections
- Intermittent Remote I/O errors due to NFS3ERR_SERVERFAULT
- Intermittent SECD login error when users access to monitoring application
- Intermittent secd.dns.server.timed.out messages in EMS
- Intermittent slowness due to high network port utilization
- Intermittent slowness or permission denied creating and copying files
- Intermittent SMB authentication issues due to inaccessible port 445
- Intermittent Vscan service reset with AV Trellix requests
- Intermittently User cannot access CIFS shares on ONTAP via NTLM due to Security Software on DCs
- Intermittently write slow over CIFS
- Invalid clientmatch "10.0.0.0/0" address bytes masked out by netmask are non-zero
- Invalid DNS zone name trying to create a DNS zone name starting with a number
- Invalid version "0.0" is shown in ONTAP for Trend Micro SPNAF
- iOS Files app does not list content of CIFS shares
- IP distribution for a LAG (ifgrp) may not be optimally balanced in ONTAP
- IPFW firewall failed to create dynamic "keep-state" entry can cause DNS outage
- IPSEC client get hung when PFS on
- IPSEC configuration mismatch
- IPsec connections are not reestablished after child SA inactivity timer is hit
- IPSEC NFS mounts appear to hang after 30 minutes
- ipsec.ib.policy.violation reported in ONTAP event messages for clients configured with IPsec in tunnel mode
- Is an ONTAP upgrade required to fix CVE-2022-38023 for Enforcement phase?
- Is bidirectional trust required to use wildcards for multidomain name mapping search?
- Is CIFS performance impacted on ONTAP 9.11.1 by KTLSD performance issues?
- Is constrained delegation supported by ONTAP?
- Is disruptive changing the LIF's netmask?
- Is FPolicy for CIFS supported on a FlexCache Volume?
- Is Fpolicy for NFS 4.1 supported?
- Is full junction path of a volume required when creating NFS datastore mounted to clustered Data ONTAP for Virtual Storage Console?
- Is IBM Spectrum Protect Plus supported by ONTAP S3?
- Is it an expected behavior to be able to create new or move to a target share even if the vscan server is stopped?
- Is It Necessary to Set the Volume Compression Group Size to 8K When Using ODX (Offload Data Transfer)?
- Is it necessary to stop the virtual machine when upgrading in an environment where VMWare virtual machines are stored on a NAS?
- Is it necessary to update SVMs computer object operatingSystem atribute in AD after an ONTAP upgrade?
- Is it obligatory that NetApp cluster is joined to an Active Directory Domain?
- Is it possible for the XCP SMB agent to run in the background?
- Is it possible to add a computer account to the CIFS share-level permissions?
- Is it possible to authenticate a cluster using Windows Active Directory credentials via LDAP?
- Is it possible to avoid BUG 1310643 by closing the CIFS session or stopping the CIFS service?
- Is it possible to back up SVM Root volume with 3rd party apps?
- Is it possible to change a configured CIFS server's NetBIOS name in ONTAP 9?
- Is it possible to change an SVM's domain from Microsoft AD to Azure Active Directory Domain Services?
- Is It Possible to Change Storage Encryption Settings While the Server Is Running?
- Is it possible to change the NT ACLs via CIFS client for a UNIX security volume?
- Is it possible to change the ownership of a volume (security-style: UNIX) to a specific user\group?
- Is it possible to check the usage status of the TCP 30000 port with ONTAP?
- Is it possible to configure AES on an SVM before creating the CIFS server
- Is it possible to configure conditional forwarding DNS on Ontap?
- Is it possible to configure HP's iLO IP on ONTAP?
- Is it possible to configure one port in UTA2 port pair to FC and other port to CNA mode?
- Is it possible to configure ONTAP S3 buckets via REST APIs
- Is it possible to control the CIFS/NFS network bandwidth to a particular client?
- Is it possible to copy the files from ONTAP CVO cifs share path to shared drive?
- Is it possible to create user mapping on CIFS shares or on different levels of sub folders?
- Is it possible to delete .snapshot directory from NFS client?
- Is it possible to delete the contents of a folder/directory from ONTAP?
- Is it possible to disable SMB2 and keep SMB3 enabled in ONTAP?
- Is it possible to enable encryption for one CIFS particular share
- Is it possible to enable SMB3 encryption without affecting unencrypted SMB2 traffic?
- Is it possible to exclude read operations from Vscan?
- Is it possible to exclude subfolders during xcp sync?
- Is it possible to forward CIFS auditing logs to another place?
- Is it possible to forward native FPolicy events to a SIEM or Syslog server?
- Is it possible to get a details on file scan results of an external vscan engine?
- Is it possible to get year-wise data for a volume from ONTAP?
- Is it possible to have an Active Directory (AD) user write data to a CIFS server of a Storage Virtual Machine (SVM) configured in workgroup mode?
- Is it possible to install another software in ONTAP?
- Is it possible to make Windows NTFS Symbolic links visible on an ONTAP CIFS share?
- Is it possible to migrate a CIFS volume to an NFS volume
- Is it possible to provide permissions for all shares in SVM using single command from ONTAP??
- Is it possible to remove, hide or set restrictive permissions for the .copy_offload folder?
- Is it possible to retrieve history of all SMB1 connections in ONTAP 9
- Is it possible to see space used by a share in ONTAP?
- Is it possible to see the Kerberos ticket encryption type for connected clients?
- Is it possible to set same LIF IP address in different IPspaces
- Is it possible to set the Junction Path before performing the first transfer for the DP volume created as the Snapmirror destination?
- Is it possible to specify a vscan server for each folder?
- Is it possible to tell when a user or group was added to an ACL?
- Is it possible to update ctime by specifying ONTAP mount options?
- Is it possible to use 2 languages in a volume serving CIFS/SMB/NFS?
- Is it possible to use link-local address to LIF address with IPv6?
- Is it Possible to Use MAC and IP Addresses in a 1:1 Relationship by Disabling the Cluster Management LIF's status-admin?
- Is it possible to use the same segment for SVM's Data LIF and Cluster Management LIF?
- Is it recommended to set audit policy through SLAG
- Is it required to adjust preexisting auditing configurations on the SVM when adding a new location to be audited
- Is it supported to mount NAS exports from clients behind a NAT
- Is Logical Space Reporting supported on a FlexCache volume?
- Is ONTAP 9 susceptible to CVE-2022-42898
- Is ONTAP affected by CVE 2009-3103
- Is ONTAP affected by CVE-2023-41835?
- Is ONTAP S3 object store exportable via NFS?
- Is Qtree export policy supported for CIFS?
- is S3 functionality supported for NAS buckets?
- Is SilverFort for MFA supported with ONTAP
- Is SMB Multichannel supported when the storage is behind a NAT?
- Is SMB3 direct supported with ONTAP 9?
- Is the CIFS server administrator account created by default
- Is the LDAP client configuration required for multiprotocol NAS name mapping?
- Is the name-mapping information included in AutoSupport ?
- Is the vserver locks show command logged in autosupports
- Is there a benefit in performing SYNC writes vs ASYNC with NFS in ONTAP
- Is there a command to force the connection to the AV connector to reconnect?
- Is there a command to investigate the number of unprocessed SMB requests, including confirmation of past trends?
- Is there a delay for CIFS auditing to take effect between ONTAP and Active Directory?
- Is there a limit on the NFS path length?
- Is there a limit to the number of CIFS ACLs that can be created?
- Is there a maximum number of files and file size limits for volumes mounted with Network File System (NFS)?
- Is there a native way for ONTAP to list files/folders
- Is there a timelimit for the flex cached data to get expired?
- Is there a way to deny CIFS access to specific IP?
- Is there a way to implement native FPolicy in a monitor or alert only mode?
- Is there a way to prevent that a file that starts with ~$ is created when opening an MS Office file?
- Is there a way to restore access rights information and ownership information from a snapshot?
- Is there an ONTAP command to change the file to a hidden file?
- Is there any effect by removing "Domain Admins" group from SVM's BUILTIN\Administrators?
- Is there any effect during re-creating nis service
- Is there any impact of setting CIFS client-session-timeout value to maximum value?
- Is there any impact on the environment using the ONTAP Antivirus Connector when recreating the certificate?
- Is there any impact when vscan servers are connected to storage array during antivirus application upgrade on server?
- Is there any limitation on number of clients which can access single NFS export
- Is there any way to find out the user responsible for changes to SMB shares attributes whether is from ONTAP or Windows File Explorer side
- Is there any way to run antivirus scan on cifs shares directly from Ontap?
- Is there any way to save CIFS and NFS audit log separately?
- Is there IP fragmentation by a MTU mismatch between the NAS and NFS client?
- Is Trellix McAfee VirusScan Enterprise for Storage (VSES) supported?
- Is Workgroup Mode Supported for CIFS/SMB in ONTAP?
- Issue with Displaying Filenames Created by Windows NFS Client on Linux Client via NFSv4 Access
- Issue with mounting new NFS vol from Vserver with LS Mirrors
- Issue with newer versions of Git refusing to operate over a UNIX style volume
- IX4-T 10Gb ports negotiate down to 1Gb
J
K
- KDC event ID 16 is logged if AES for Kerberos is disabled
- Kerberized NFS clients mount reliably, but lose access mid-day
- Kerberos setup for NFS failing with error "Strong authentication is required"
- Kerberos authentication fails with error KRB5_CONFIG_BADFORMAT in ONTAP
- Kerberos authentication for NFS fails when the client uses a client UPN rather than a user UPN
- Kerberos CIFS authentication fails for users with many groups
- Kerberos client ticket has expired reported in EMS after motherboard replacement
- Kerberos communication not working using RODC in a CIFS environment
- Kerberos LIF cannot be disabled using any account with a password length over 16 characters
- Kerberos pre-authentication failure due to out-of-sync machine account password
- kernel hang panic occurred from OpenStack instance during storage takeover
- Komprise data migration fails to migrate SMB ACLs to destination
- Komprise Fpolicy Best Practice and Recommendations
- KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN with NFS LDAP
- KRB5KRB_AP_ERR_MODIFIED after 7MTT migration
- KRB5KRB_AP_ERR_TKT_EXPIRED presented when attempting to access CIFS for ONTAP 9
- Kubernetes host log reporting mount: Access is denied
L
- L2 Reachability issues on cluster ports with ONTAP 9.13.1 or later
- LACP ifgrp Port Participation changes to "partial" after ONTAP reboot
- LACP Ifgrp shows included ports as not participating
- LACP ifgrp with 40G ports fails to send traffic after upgrade to ONTAP 9.8
- LACP not working due to LACPDUs not incrementing
- LACP port down due to mismatched peer keys
- LACP port down with partial status due to mismatched peer system IDs
- LACP port flapping on AFF-A220 controllers
- LACP troubleshooting and debugging in ONTAP 9
- Last Access Time not updated for files accessed using NFS
- Latency difference observed between two nodes in "cifs domain preferred-dc check" output
- Latency due to packets dropped on switch
- Latency observed when a user is granted change permissions by a CIFS share's ACL
- Latency observed when FPolicy is enabled
- Latency while accessing shares due FPolicy service account privileges
- LDAP administrative authentication across multiple DNs fail
- ldap check command returns Operation timed out [ 6021] Source: DNS unavailable
- LDAP client configuration modifications prevented by nonexistent Netgroup DN
- LDAP client UNIX user name translation fails due to incorrect LDAP schema
- LDAP configuration failing due to CIFS server not configured
- ldap create fails with error "The user has insufficient access rights" using openDJ for ONTAP 9
- LDAP Error: Strong authentication is required: Handling Signing and Sealing Requirements. Failures in Cifs Setup, User-mapping and Other Operations
- LDAP logs being bloated by ONTAP
- LDAP lookup operation fails if any field of user account info contains ':' (colon) character
- LDAP lookups succeed for some user accounts but fail for others
- LDAP over TLS connection error with wildcard certificate: hostname does not match CN in peer certificate
- LDAP over TLS error: hostname does not match CN in peer certificate
- LDAP Queries timing out looking for name mapping
- LDAP returned 0 results for attribute tokenGroups
- LDAP server logs spammed with the sizeLimitExceeded error
- LDAP server not showing FQDN after adding to CIFS server
- LDAP servers are marked unavailable due to missing attribute for an user or machine account
- LDAP timeouts occuring when trying to lookup groups by ID
- LDAP user lookup from the ONTAP fails
- LDAPS fails to bind using ldapSaslBindSpnego
- LDAPS or LDAP+StartTLS connection fails due missing CA certificate
- libffi.so.6: cannot open shared object file: No such file or directory when activating XCP
- LIF failover causes a service interruption
- LIF found on base port of its home ifgrp after a non-graceful shutdown in ONTAP 9
- LIF home port changed to IFGRP member port spontaneously after upgrading to ONTAP 9.5
- LIF inaccessibility during ONTAP upgrade due to ARP not updated on Aruba switch
- LIF is not accessible after an ONTAP upgrade
- LIF is unable to reach gateway
- LIF not responding after being migrated or failing over to another node
- LIF on VLAN port has no connectivity
- LIF unreachable after giveback due to ARP table not updated on the switch
- LIFs are not accessible when hosted on an IFGRP with a MAC Address showing all zeros
- LIFs on recently added nodes are not able to ping outside the cluster
- LIFs showing operationally up, administratively down due to stopped Vserver
- Limited access to shares from one node
- Linux client is unable to connect to SMB share as it keeps asking for a password
- Linux client mounts CIFS share fails with error "write-protected, mounting read-only"
- Linux client shows fewer snapshots than the snapshots in previous version
- linux commands like cat or tail that process hangs forever with NFS mount
- Linux host cannot mount Network File System (NFS) filesystems due to internal firewall software
- Linux NFS client lost connection after SVM migration by SnapMirror volume replication
- Linux operations hang post automount configuration changes for multiple linux users
- Linux smbclient fails to download file with error "getattrib: NT_STATUS_NOT_SUPPORTED"
- Load unix user from URI fails
- Local Account is unable to connect to ONTAP share because it does not prompt for a password
- Local users and Groups cannot be managed from Computer Management MMC console
- Logical Interface Manager(VifMgr) aborted as a result of signal 6
- Looping lock manager can lead to NFS outage or system panic on ONTAP 9
- Low throughput over WAN with high latency for ONTAP 9
- ls and df hang despite no changes to nfs configuration
- LS command on NFSv4.1 mount hanging on folder after adding LDAP to nsswitch
- ls -l is hanging from Linux clients on mounted volume
- ls -ld shows nobody as UID but correct GID
- ls of vserver root or .admin export hangs
M
- MAC address moves to different ports on switches
- Mac client fails to copy files to the CIFS share with zero size files
- MAC IDs flapping due incorrect IFGRP mode
- Mac OS clients reporting incorrect volume sizes
- Mac OS SMB client large copy fails when running multiple copies
- Mac OS: Unable to open files on a SMB share which are located on a FlexCache volume
- Machine account creation fails when using Channel Binding for AD LDAP Connection
- Machine Account Creation Procedure Failed - KRB5KDC_ERR_PREAUTH_FAILED
- Machine account creation procedure failed with KRB5_REALM_UNKNOWN error
- macOS 10.15 Catalina clients experience CIFS slowness due to client-side TCP delayed ACK
- MacOS clients experiencing intermittent permission denied errors when accessing data
- MacOS clients report slow performance when CIFS large-MTU is enabled
- MacOS OSX finder not seeing SMB files but can see it via OSX CLI and browse folders
- Make an SVM connect to a specific Domain Controller
- manual changefilerpwd does not work, immediately
- Manual copy of exe file fails with error due to blocking at firewall
- Many secd.rpc.authRequest.blocked alerts after upgrading to 9.12+
- Many TCP Resets on port 2049 after ONTAP upgrade
- Mapped CIFS shares are not re-connecting after Windows client reboot
- Mapping a drive using "net use" fails with error "System error 67 has occurred"
- Mapping a drive using "net use" with a bad password generates 3 failed logon events
- Mapping CIFS share on windows client fails with error 'A specified logon session does not exist. It may already have been terminated'
- McAfee AV returns code 333300002
- McAfee Endpoint Security Storage Protection increased latency with debug enabled
- McAfee Endpoint Security Storage Protection's Vscan Server Version is shown as 0.0
- md5sum mismatch for NFSv4.x clients using NFSv4.x Trunking
- MDV staging volume is full and restart of Consolidation Job does not help
- MDV staging volume is full due to continual panic of Consolidation process
- MDV staging volume is full even though destination volume has sufficient space
- MDV volume size increasing abnormally and CIFS auditing not working
- MDV volumes size is gradually increasing in size
- Members of the Active Directory group "Protected users" cannot login to ONTAP System Manager and cluster CLI
- MGWD crashes/restarts leaving other instances of MGWD out of quorum
- MGWD panics and restarts on a regular basis; cluster node may panic regularly
- Microsoft Access DB unable to open or write to a file because it is locked by another user
- Microsoft Excel files locked for editing on Windows
- Microsoft files showing incorrect Date Accessed of 1/18/2038 in File Explore
- Microsoft Office "File in Use" by 'another user' due to local antivirus software
- Microsoft Office document locked by another user
- Microsoft Office Excel 2010 SP2 files are being unexpectedly locked
- Microsoft Office for Mac OS x fails to open documents on a CIFS share
- Microsoft Office suite temp files remain using SMB shares
- Microsoft Security Advisory CVE-2020-1472 impact on NetApp appliance running CIFS or NFS utilizing Netlogon servers
- Microsoft Security Advisory: ADV190023 impact on NetApp appliance running CIFS\NFS utilizing Microsoft Active Directory LDAP servers
- Microsoft Security Advisory: CVE-2020-0796 SMB 3.1.1 Vulnerability, Is ONTAP vulnerable?
- Microsoft Security Advisory: CVE-2020-1206 SMB 3.1.1 Vulnerability, Is ONTAP vulnerable?
- Migration of mixed mode volume from NetApp to NetApp Cluster
- Misc error while syncing with NetApp XCP
- Missing LDAP configuration can cause IPSEC to break
- Mixed security style volumes experience unexpected effective style change via CIFS
- MMC shows error: You do not have permissions to see the list of shares for Windows client
- Modify permission from security tab for CIFS share fails with error "cannot determine whether the computer is joined to a domain"
- Modifying AES encryption for CIFS server fails with Kerberos Error: KDC has no support for encryption type
- Modifying cifs server discovery-mode fails with "site" and "none" are not supported
- Modifying CIFS server domain fails with error "Reason: Failed to create a domain entry for "DOMAIN". Reason: duplicate entry."
- Modifying domain to other domain fails with "An account by this name already exists in Active Directory"
- Mount failing after Palo Alto firewall upgrade
- Mount failure on remote FlexCache qtree for Linux Kernel 5.1 to 5.7 clients
- Mount failure with "Network Error - 53" on Native Windows NFS clients
- Mount hangs while using automounter
- Mount operation fails with permission denied due to IP address translation by the NAT service
- Mount operation times out due to incorrect IP address assigned on the storage port
- Mountable Volume does not show in OSM and ONTAP CLI
- Mounted NFS export still usable after changing volume's junction-path
- Mounting a volume into a namespace fails: Junction create failed (2)
- Mounting a volume using CIFS on a Unix client via NTLMv2 fails with the error code: -13
- Mounting CIFS from Linux with vers=3.02 doesn't work, but vers=3.0 does
- Mounting CIFS share from Linux fails with "Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers"
- Mounting cifs share on linux fails with error key has expired
- Mounting NFS export with NFSv3 results in access-denied and protocol not supported
- Mounts with mountproto=udp goes in a hung state
- Moving a directory tree using Windows Explorer and cifs, takes a long time
- Moving Hyper-V VM to cifs share fails with file creation resulting in INVALID PARAMETER error
- MS AD LDAP performance issue with non-indexed attribute for RFC 2307 uidNumber
- Multi-node application reports "file not found" after migrating to NetApp
- Multiple connections to a server or shared resource by the same user is not allowed error while accessing CIFS share
- Multiple jobs are failing due to client machine account being used and causing share access issue
- Multiple SECD Panic events related to lookup of user from an unsupported Single Label Domain
- Multiple TCP packets with bad checksum detected on Interconnect port e0b
- Multiple users having CIFS shares access issue when client requests for "Write Owner" permissions
- Multiple users unable to login to their Linux workstations
- MUP error reported in windows event viewer as "delayed write failed"
N
- Name mapping occurs incorrectly or falls back to default in Data Ontap when multiple/conflicting results are returned for users
- Name mapping rule not working because of another rule
- Name mapping Unix user to Windows user from trusted domain fails
- Name services fail due to multiple default gateways with the same metric
- nameserv.ddns.bulk.failure due to static Host(A) record in DNS
- NAS access hangs on a particular node while FlexCache volume is offline
- NAS auditing - FAQ
- NAS data inaccessible after creating a new LIF on the client's subnet
- NAS protocols experience latency due to long round trip times
- NAS service outage due to exhaustion of lock manager objects
- NAS share access fails due to SecD VMEM limit exceeded
- NAS workload performs poorly compared to local disk or SAN
- Native Fpolicy fails to block cifs delete operations by extension
- Native FPolicy File Blocking
- Native FPolicy File Blocking is not blocking all extensions
- Native FPolicy is not consistently stopping blocked file extensions in clustered Data ONTAP
- Native NAS Auditing : ONTAP vs 7Mode
- Navigating Network Address Translation with NFS - Resolution Guide
- Nblade.BytesThrshldExceeded message occasionally occurs
- Nblade.cifsMemExceeded error
- Nblade.CifsOperationTimedOut for SMB2_COM_SESSION_SETUP operation
- Nblade.CifsOperationTimedOut for SMB2_COM_SESSION_SETUP operation during WAN outage
- Nblade.CifsOperationTimedOut with Last SpinNp error during this operation: SPINNP_ERR_DELAY due to disconnected FPolicy server
- Nblade.CifsOperationTimedOut with SMB2_COM_SESSION_SETUP messages found in logs
- Nblade.CifsOperationTimedOut: Detected a timed out CIFS operation
- Nblade.cifsShrConnectFailed error code: 257 in EMS log after volume rehost
- Nblade.dBladeNoResponse.NFS has an RPC procedure number but its not clear what this number is
- nblade.execsOverLimit in EMS - Resolution Guide
- Nblade.flexCacheVolumeAccess does not show support for NFSv4 in ONTAP 9.10.1
- Nblade.nfsConnResetAndClose with the reason Idle Timeout, closing connection
- Nblade.nfsConnResetAndClose:error message with the reason OncRpcUdpInvalidLength
- Nblade.nfsV4PoolExhaust: NFS Store Pool for ConnectionHolder exhausted seen for solaris client using NFSv4.1
- Nblade.vldb.LeakedBladeList:alert EMS Seen with Possible NFS Impact
- Nblade.vscanNoRegdScanner:error after restarting the scan-engine service
- Nblade.vscanNoScannerConn alert occurs due to incorrect ONTAP AV Connector service logon account
- Nblade.vscanNoScannerConn EMS messages after reconfiguring ONTAP Cluster management LIFs
- Nblade.vscanNoScannerConn errors on one node due to no connectivity to the AV server
- Nblade_CifsOperationTimedOut for SMB2_COM_SESSION_SETUP error in logs after upgrade
- net.cg.utilThresholdExceed: Connection group utilization exceeds configured threshold
- NetApp ONTAP: CIFS error "Can't read from source file or disk" or "A device attached to the system is not functioning"
- NetApp port dropping Jumbo frames leading to partial fetching of user-groups information from the NIS server
- NetApp System Manager is not responding and unavailable
- NetApp vFiler unable to connect to Vscan server
- NetApp XCP NFS unable to copy some files with ACLs
- NetApp XCP run fail with ERROR: batch xxxx: child process failed (exit code -9)
- Netgroup changes are not visible when running check-membership command
- Netgroup file missing errors when ns-switch points to file and a netgroup file has not been loaded in ONTAP
- Netgroups resolution from AD LDAP does not return any results
- Network error. Windows cannot access CIFS share. Check the spelling of the name
- Network File System(NFS) mount troubleshooting FAQs
- Network interface migrate fails when moving SVM to new vLAN in ONTAP 9
- Network interfaces not reachable for several minutes after storage failover
- Network port becomes unusable due to netif.sfpNotSupported
- network port ifgrp show - command output displays "Port Participation: partial" for one of the ports
- Network port marked degraded within 5 minutes during network maintenance
- Network port/s receive discards seen in ifstat
- Network traffic sent out of an unexpected interface
- Netwrix Auditor Cannot Connect to ONTAP
- Netwrix/Stealthbits Fpolicy Best Practice and Recommendations
- New Certificate Authority causes intermittent CIFS access
- New CIFS Share is not working due to permissions set to Generic-All for Everyone
- New Cluster fails to create cifs server because it cannot reach DNS
- New device unable to access NFS mount due to export-policy issue
- New NFS mounts time out when ONTAP does not respond to the NULL call
- Newly added AV servers do not show as connected on one side of the MetroCluster
- Newly configured Qtree QoS policies may not be enforced on existing NFS mount points
- Newly configured Vscan does not connect to primary scanner pool
- Newly created NFS folders and files cannot be modified by other hosts
- Newly provisioned vscan servers are not connecting to ONTAP
- Newly-created/empty volume shows large used space on NFS client df output
- NFS (Linux) client reports no file locks information on NFS share
- NFS access denied due to invalid name mapping after upgrading to ONTAP 9.12.1+
- NFS access denied due to missing Domain Local group for mapped Windows from trusted domain
- NFS access denied for non root user after enabling "auth-sys-extended-groups"
- NFS access denied with Privacera cluster
- NFS access denied with Unix user name mapping to the CIFS machine account intermittently
- NFS access denies though the new added export-policy rule includes the client IP
- NFS access hangs after LIF migrating to other node
- NFS access is getting denied after enabling "auth-sys-extended-groups"
- NFS access lost after modification of LIF firewall policy
- NFS access to LIF on LACP ifgrp fails after higher switch loop issue even if loop is resolved
- NFS access to NTFS security style volume fails because name mapped default Windows user does not exist in AD
- NFS access to NTFS security volume with LDAP authentication not working
- NFS access to NTFS volume gets Access denied since unix user is mapped to default windows user instead of intended windows user
- NFS access to Unix volumes is lost after enabling SLAG
- NFS and iSCSI access failed with alert nodewatchdog.svc.rpc.noresp
- NFS backup time increased after migration
- NFS Cannot Mount share - Connection Issues
- NFS client access denied when mounting because RO Access Rule is set to never
- NFS client complains that cloud server is slower than local servers
- NFS client displays "NFS server not responding" with NFS over UDP
- NFS client does not proactively refresh file handle after renaming ONTAP volume
- NFS client error message: NFS write failed for server (RPC: Timed out)
- NFS client experiences high latency access to export volume due to packet loss
- NFS client fails to detect new files created by different client or is delayed in showing up
- NFS client gets the error "Operation not permitted" when runing the command "quota -s -v"
- NFS client hang up if storage reply NFS4ERR_DELAY followed by NFS4ERR_SEQ_MISORDERED
- NFS client has intermittent access failure to NTFS data due to Operation not Permitted error
- NFS client hung when mounting volume/qtree using NFSv3
- NFS client hung when running cd or df command on volume path due to client misbehaviour
- NFS client intermitently get permission denied error while accessing NTFS volume due to CIFS lock
- NFS client is intermittently unable to write a file: NFS3ERR_ACCES
- NFS client received "permission denied" accessing NTFS security style volume with error "Administrative limit exceeded"
- NFS client receives "Permission Denied" on NTFS security style volume due to missing file permissions
- NFS client report error nfs server not responding, still trying due to half open TCP connection
- NFS Client reporting "NFS not responding" error due to client not responding to IKE calls
- NFS client reports error message "autofs_trigger_one: request for /vol completed with error 60"
- NFS client showmount command does not reflect renamed qtree
- NFS client temporarily fails to delete a file created for a CIFS client to read
- NFS client trying to mount with root on a non-reserved port and gets access denied
- NFS client unable to mount over NFSv4 due to client ID mismatch error
- NFS clients are intermittently unable to connect to mounts
- NFS Clients are unable to see specific files in a Flexgroup volume on ONTAP
- NFS clients experience disconnections, time-outs, or performance issues due to client tuning parameters
- NFS clients lost access and noticed error exports.dom.notFound in ems logs
- NFS clients show different results using the Linux shasum command
- NFS clients take about 1 minute to recover writing during takeover when using NFSv4
- NFS clients using NFS over IPSEC got hung and reporting NFS not responding error
- nfs connected-clients show lists connections after access is revoked
- NFS datastore that cannot connect to the volume
- NFS datastore writing issues due to mismatch of MTU on Host and Storage Ports
- NFS datastores inaccessible
- NFS datastores offline after cluster reboot
- NFS disconnections due to inode cache shrinking
- NFS export for a newly created or junctioned volume is not accessible
- NFS export inaccessible to Windows clients after migration
- NFS export policy evaluation denies access due to issue with reverse DNS lookup for client IP
- NFS export unable to write to NTFS security mounted volume
- NFS exports became inaccessible for clients after reboot of nodes
- NFS Exports fail after takeover/giveback or reboot, and Config Advisor shows error "Output of exportfs differs from /etc/exports"
- NFS extended groups don't work after enabling auth-sys-extended-groups when using multi-NIS domain
- NFS extended groups not working after enabling option auth-sys-extended-groups
- NFS file system hangs or not responding when writing or editing a file with MTU drop
- NFS gets hung after issued command volume flexcache config-refresh
- NFS group membership cache delays update when AUTH_SYS Extended Groups enabled
- NFS hangs due to half-open TCP session
- NFS hung/slowness issue when dealing with long path names with FPolicy enabled
- NFS Kerberos authentication fails due to Kerberos interface not enabled
- NFS Kerberos mount fails with access denied on a client in trusted domain
- NFS Latency
- NFS linux client mount fails with permission denied on qtree
- NFS mount du -sh command is getting hung
- nfs mount error: failed, reason given by server: No such file or directory
- NFS mount fail with access denied when DNS name resolves to incorrect IP
- NFS mount failed with error no such file or directory
- NFS mount fails due to firewall maintenance
- NFS mount fails due to implicit name mapping failure in multiprotocol environment
- NFS mount fails when export has hostname as clientmatch and DNS entries are cached
- NFS mount fails with "Connection timed out" due to disconnected NIS domain
- NFS mount fails with "mount.nfs: portmap query failed: RPC: Timed out"
- NFS mount fails with client side error "mount.nfs: Connection timed out"
- NFS mount fails with error "wrong fs type,bad option, bad superblock"
- NFS mount fails with mount.nfs: portmap query retrying: RPC: Timed out
- NFS mount fails with permission denied error because client not using IP allowed in export policy rule
- NFS mount fails with portmap error "Program not registered"
- NFS mount failure due to "exports.hostname.transient:error"
- NFS mount hangs due to half-open TCP session after network or firewall maintenance
- NFS mount hangs with "exports.dns.config:error" in ONTAP event log
- NFS mount hung (or) fails with client side error "mount.nfs: Connection timed out"
- NFS mount hung after attempting a READ, WRITE or other operation with a large payload
- NFS mount hung on client after volume migration using SnapMirror volume replication
- NFS mount hung when using IPsec
- NFS mount intermittently fails with "Connection reset by peer"
- NFS mount is allowed for NFSv3, but not NFSv4. v4 - clients get err 13 / ERR_ACCESS
- NFS mount is successful but ls -a on client gets "permission denied" error
- NFS mount might hang after ONTAP upgrade to 9.8P4 or higher due to unavailable DNS
- NFS mount Network Error 53 due to export policy of root volume
- NFS Mount not accessible after client reboot due to a Checkpoint Firewall in between
- NFS mount of NTFS volume using root user hangs
- NFS mount points not accessible when using netgroups and DNS reverse lookup fails
- NFS mount points not accessible when using netgroups from LDAP
- NFS mounting with permission denied to access share
- NFS mounts are intermittently unavailable
- NFS mounts are slow for NFSv4.1 on ubuntu clients
- NFS mounts goes missing on Linux/Unix client
- NFS mounts hung with DNS timeout
- NFS mounts only available with -mount-root-only set to disabled for ONTAP 9
- NFS mounts timeout when using IPSEC
- NFS Mounts to zOS mainframe timeout or very slow performance
- NFS not accessible during ONTAP upgrade
- NFS not responding error reported by clients during ONTAP upgrade
- NFS offload tasks
- NFS operations failing due to high latency on backend
- NFS operations on NTFS volume goes into hung state due to name mapping failure
- NFS operations on volume fails with Remote IO error when auditing is enabled
- NFS ops on NTFS security style volumes - Resolution Guide
- NFS outage caused by QoS limits consuming excessive exec contexts
- NFS performance: How to track down a bad UNIX or Linux host
- NFS permission denied on NTFS security style volume due to Domain Trust
- NFS quota allows file creations when disk limit is reached
- NFS requests originating from the root user fails with error:"Permission denied"
- NFS resource disconnected
- NFS rm fails with directory not empty or no such file or directory
- NFS server denied mount in environment with quiesced LS mirrors
- NFS server goes into hung state intermittently with error nfs not responding
- NFS server hangs when trying to mount a FlexCache volume junction-path
- NFS server not responding - Resolution Guide
- NFS service might not start after a motherboard replacement when the system clock is incorrect
- NFS Share sometimes shows permission denied
- NFS TCP mounts fail with"portmap query retrying: RPC: Timed out" using Flexgroups in ONTAP
- NFS UDP traffic intermittently drops after upgrade to ONTAP 9.2 or newer
- NFS unmount then mount hangs after changing client interface
- NFS unreachable due to misconfigured failover group
- NFS user gets a "permission denied" error when accessing an NTFS qtree
- NFS user gets a permission denied error when accessing an NTFS volume
- NFS users have permission issues
- NFS users have permission issues when they belong to more than 16 groups
- NFS users have permission issues when they belong to more than 256 groups while RFC 2307bis is configured
- NFS users intermittently lose access due to permission denied
- NFS VAAI: Thick provisioned eager zeroed disks created through NFS take up double space
- NFS volume mounted on VMs are inaccessible when root volume is full
- NFS volumes are growing very fast filling up the aggregate
- NFS volumes inaccessible for a short period of time
- nfs: server hostname not responding, timed out - when copying file
- NFS: state manager: check lease failed on NFSv4 server with error 10018
- NFS4 Lock reclaim failed error when using NFS4.1
- nfs4_reclaim_open_state: unhandled error -55
- nfs4SequenceInvalid error with Server error BAD_SEQID in EMS
- NFSv3 client crashed and storage did not release locks
- NFSv3 clients still have access to a volume after being removed from the namespace in ONTAP
- NFSv3 mount appears to have bad performance or go unavailable some time after mount
- NFSv3 mount fails with Error The NFS server does not support MOUNT version 3 over TCP on Vcenter
- NFSv3 permission denied when inheritable v4 ACE is present
- NFSv3 read write latency is high during shelf firmware update
- NFSv3 write throughput temporarily decreases during takeover
- NFSv4 access denied even though ACLs should give access
- NFSv4 access denied while using NFSv3 is OK
- NFSv4 access issue due to NFS4ERR_BAD_SEQID error when sequenceID is higher than 0x0fffffff
- NFSv4 access issue with a bad sequence-id error
- NFSv4 ACL - Resolution Guide
- NFSv4 client hung after TO/GB with NFS4ERR_STALE_CLIENTID
- NFSv4 client shows user and group as nobody
- NFSv4 extended attribute checksum mismatches may cause unchanged files to be backed up
- NFSv4 Kerberos mount to NTFS volume fails with an access denied error from a client
- NFSv4 latency seen after network link down event with LACP
- NFSv4 mount fails on FlexCache volume
- NFSv4 mount fails when svm root volume security style is NTFS
- NFSv4 mount fails with access denied
- NFSv4 mount hung on UNIX Volume or Qtree
- NFSv4 mount with krb5 security fails with "access denied by server" due to unsupported encryption
- NFSv4 owner sequence ID is not properly compared
- NFSv4 permission denied for Superuser when opening directories
- NFSv4 Storepool - Resolution guide
- NFSv4.1 client Read/Write operation may hang when pNFS is enabled on the SVM
- NFSv4.1 pNFS jobs cause a halt on RHEL 7.0 and above
- NFSv4.x client shows group permission “nobody” NFSv3 shows correct owner and client's domain does match the SVM's 'v4-id-domain'
- NFSv4.x client shows user and group as nobody NFSv3 shows as correct owner
- NFSv4.x client using DHCP unable to mount after reboot due to client ID mismatch error
- NFSv4.x clients show group permission “nobody”
- NFSv4.x mounts show file and group owner as nobody
- NIS group database build fails with nis.group.db.build.failure
- NIS group database stops updating automatically after the scheduled job is deleted
- NIS latency causes NFS hang due to indeterminate resolution in export evaluation
- NIS netgroup membership not detected
- NIS server cannot be contacted by the Storage Controller
- NIS server timeout can potentially cause CIFS outage
- nis.server.not.available due to a network connection issue
- No access to CIFS after ONTAP upgrade and "stronger authentication required" error from AD LDAP
- No access to CIFS shares following SVM-DR or MetroCluster switchover due to missing services in lif service-policy
- No access to new LIF due to ARP being discarded
- No ACLs and 0 byte files after migrating files to the ONTAP CIFS share due to Mandatory Integrity Control
- No available Domain controller after changes in domain configuration
- No CIFS access after power failure
- No connectivity and port health degraded for newly configured ifgrps
- No data port is displayed with network device-discovery due to CDP being disabled
- No files or folders are present when accessing a CIFS share because they are hidden
- No files or folders are present when accessing a CIFS share because they have been deleted or moved
- No LIF access due to faulty QSFP on Switch
- No locks available/Lock Reclaim not working
- No logging for Antivirus Scanning for NFS
- No more connection between ONTAP and scanner pools
- No path(s) specified error when setting NFSv4 access control list (ACL)
- No ping between intercluster peer LIF's
- No previous versions displayed for ONTAP Snaphots
- No such file or directory when running file-directory show
- No UNIX user is mapped to the Win user
- No vscan connection for servicing virus scan-requests
- Node failed to establish a connection with the FPolicy server (reason: "Select Timed out.") because Collector Name is wrong
- Node management IP address is up on the network prior to node fully booting into ONTAP
- Node panicked during intensive "cifs session show" API Calls
- Non root UNIX user gets permission denied when try to access NTFS volume
- Non Windows SMB clients (Printer/Scanner) failed to connect to ONTAP CIFS shares
- Non-ASCII characters written via NFSv4 on non-UTF8 volumes appear as '?' when read via NFSv3
- None of the LDAP servers configured for Vserver in the EMS log
- None, or incorrect network traffic after upgrade to OTV/VSC 9.2 or later using routing groups
- Non-root run commands: chown/chmod deny with volume security style is UNIX
- Non-root users able to list the contents of the NFS mountpoint
- Non-Root Users Unable to Access NFS Export with NTFS Security-Style
- Non-root users unable to write when shares are mapped using SAMBA on UNIX clients
- NoPathToNSMB_Alert during shelf firmware update
- Not able to access CIFS share via Linux
- Not able to add Domain user or group to Built-in group using System Manager
- Not able to backup data SVM root volume using Rubrik
- Not able to disable option " -smb2-enabled-for-dc-connections" under cifs security
- Not able to set LastAccessDate to a file
- Not able to set option "start TLS" when configuring LDAP over TLS
- Not displaying Unicode characters correctly
- Not responding DNS servers cause timeouts
- Not supported error on an option (FSCTL_SET_ZERO_DATA) in SMB
- NTFS "Traverse folder/execute file" not allowing to traverse the share
- NTFS FlexCache volumes not listing the Origin volume files
- NTFS permissions on a CIFS share are not taking effect on a specific user
- NTLM authenticated access fails due to being disabled via GPO
- NTLM fails despite RequireSeal:1 on DCs for CVE-2022-38023
- NTLM-authenticated CIFS session setup failure due to AES disabled
- Numerous vscan events of type "scan-failed"
- NVA scan Vulnerability detected
O
- Objects for SVM-DR SVM not found in Active Directory after failover
- Objects moved in the same volume do not inherit permissions from the destination
- ODX (Offloaded Data Transfer) nonfunctional though requirements met
- Offbox-AV scanners reports error "vscanBadUserPrivAccess" while accessing target files
- Offloaded Data Transfer (ODX) not working as expected
- On RHEL 6.1 NFS client, new created files are showing nobody nobody as file permission
- Once the "continuously-available" share property is removed, how do you ensure sessions are no longer utilizing it?
- On-demand AV scan reporting error "job is temporarily suspended by the system"
- On-Demand job could not be queued because Vscan is not enabled on Vserver
- On-Demand VScan fails with Permission Denied for ONTAP 9
- On-Demand VSCAN Scan causing vscan backpressure messages in EMS
- One service account isn't able to connect to CIFS share using FQDN
- Only some files being VScanned
- On-Prem Cloud Sync Data Broker is slower than expected
- ONTAP 9 - time server rejected as unreliable
- ONTAP 9 doesn't respond to NBNS broadcast
- ONTAP 9 experiences a panic: "page fault (supervisor read data, page not present)"
- ONTAP 9 LIF configured for a VLAN is unreachable when native VLAN is present
- ONTAP 9 PerClientStorePoolThreshold - What does this mean?
- ONTAP 9 SMB Guest access fails for some users
- ONTAP 9 umask settings causing permission problems
- ONTAP 9.6+: NFS access to NTFS security volume fails with NIS in NS-SWITCH but not configured
- ONTAP 9: How to remove "Everyone" from the file level permissions at the top level of a volume
- ONTAP 9: How to view secd log
- ONTAP 9: LDAP Query not returning uidnumber or gidnumber
- ONTAP 9: Why are jumbo frames not incrementing in ifstat of ifgrp when sending jumbo sized pings?
- ONTAP admin access may cause high load on Domain Controller
- ONTAP admin access using AD domain authentication does not accept UPN name format
- ONTAP admin user nsswitch authentication using LDAP simple bind fails
- ONTAP administrator domain authentication fails due to duplicate IP address
- ONTAP advertises e0M port's MAC address as the port's Chassis ID during LLDP Multicast
- ONTAP Antivirus Connector 1.0.5 REST API call to 10.1.2.3 using account 'DOMAIN\user' failed
- ONTAP Antivirus connector 1.0.6 service intermittently stops with Windows Event ID 1000
- ONTAP Antivirus connector continually disconnects from vserver and has to be restarted
- ONTAP Antivirus Connector fails to connect to ONTAP due to missing Kerberos SPN
- ONTAP Antivirus Connector test fails with proxy authentication required
- ONTAP API error: "Could not create path, error = System.IO.IOException: The system cannot open the file."
- ONTAP AV Connector - "The underlying connection was closed."
- ONTAP AV Connector - Error when testing connection
- ONTAP AV Connector 1.0.3 service crashes, preventing AV scan from working
- ONTAP AV Connector 1.0.4 throws an error during the connection test
- ONTAP AV Connector 1.0.5 - VSCAN unable to connect when configured with custom roles
- ONTAP AV connector 1.0.5 disconnects when configured with data LIFs
- ONTAP AV Connector 1.0.5 fails to connect the SVM after upgrade
- ONTAP AV connector 1.0.5 LIF polling fails "Error 22: HTTP response code said error"
- ONTAP AV Connector 1.0.5 throw 403 forbidden error when testing mgmt lif connection
- ONTAP AV connector does not connect to SVM with error "CreateNamedPipe failed with 1265"
- ONTAP AV Connector errors codes
- ONTAP AV Connector fails to connect to data interface on vserver
- ONTAP AV Connector fails to connect to SVM due to TLS requirements
- ONTAP AV Connector installation fails account must have admin rights to local machine
- ONTAP AV CONNECTOR installation includes Visual C++ 2010 Redistributable package 32-bit which is vulnerable to CVE-2010-3190
- ONTAP AV Connector is unable to poll data LIF over HTTPS - API call failed
- ONTAP AV Connector polling fails with Error "Unable to connect to the remote server"
- ONTAP AV Connector polling GUI fails with 401 Unauthorized
- ONTAP AV Connector reports "underlying connection was closed" while testing
- ONTAP AV Connector reports "underlying connection was closed" while testing due to missing TLS certificate
- ONTAP AV Connector upgrade to 1.0.5P1 removes pre-existing LIF configurations
- ONTAP AV Connector won't start: Windows could not start the ONTAP AV Connector service on Local Computer
- ONTAP CIFS auditing error MDV staging volume is full
- ONTAP CIFS share shows different capacity than ONTAP cli
- ONTAP client running Crowdstrike may see client side latency or delays
- ONTAP closes session midstream when client requests 8x configured max credits
- ONTAP could not authenticate to domain controllers
- ONTAP device discovery shows nodes instead of the switch
- ONTAP does not alert "quota.exceeded" for hard limit in CIFS operations
- ONTAP does not identify a specific user group memberships - denying access
- ONTAP does not send Scan Requests although Vscan servers are connected
- ONTAP does not show HTTPS option for creating firewall for FPolicy
- ONTAP EMS Logs show Nblade.cifsNonAesNiBytesProc errors on platforms other than FAS2500s
- ONTAP EMS reports cifs.replay.failure for multiple modules
- ONTAP Error: command failed: Failed to create CIFS server XXXXXX. Reason: Kerberos Error: KDC Unreachable
- ONTAP fails to list cifs sessions
- ONTAP Fails to name map Windows users correctly
- ONTAP fails to sign session logoff response when SMB signing is in use
- ONTAP guidance for Microsoft KB 5021131
- ONTAP inaccessible when EMS reports netinet.ethr.arpstorm
- ONTAP intermittently maps Windows users to pcuser instead of the appropriate UNIX user while using LDAP
- ONTAP is fragmenting packets for packets with the 'do not fragment' flag set
- ONTAP is slow to reconnect on VSCAN Server reboot
- ONTAP is unable to apply file ownership to a file if that user is from a trusted domain over a one-way trust
- ONTAP is unable to authenticate CIFS users
- ONTAP is unable to create CIFS server with AcceptSecurityContext error data 80090346
- ONTAP is unable to look up SRV records because Libc call failed
- ONTAP is unable to look up user's group because it is a distribution group in AD
- ONTAP is unable to map a unix user to a Windows user from a trusted domain over a one-way trust
- ONTAP is unable to write data to a cifs share due to missing LDAP configuration
- ONTAP LIF(s) inaccessible from a specific subnet
- ONTAP logs the message "EMERGENCY secd.lsa.noServers" for a stopped Vserver
- ONTAP maps Windows user to pcuser instead of appropriate UNIX user when using LDAP
- ONTAP NAS Indirect access fails due to CSM bottleneck
- ONTAP NFS 4.x share mount fails with error NFS4ERR_STALE_CLIENTID
- ONTAP NFS client NFS mount Input/output error on FlexCache volumes
- ONTAP NFS unable to rename or delete file with 0x80 in filename originating from a non UTF-8 source
- ONTAP not able to fetch group membership for windows user with "cifs: ldap error"
- ONTAP panic due to a NFSv3 filehandle that contains an invalid Snapshot ID
- ONTAP PANIC with "SRC/Protocols/Nfs/Nfs4/include/Nfs4LockBasics.h:557"string
- ONTAP persistently discovers DC server list from old AD site after modifying default AD site to new one
- ONTAP reporting link down on internal loopback interface
- ONTAP reports EPIPE received from Fpolicy Server
- ONTAP reports length errors in ifstat output
- ONTAP Requirements for CIFS Kerberos
- ONTAP responds with a TCP ACK when a client sends a SYN, and connection never gets established
- ONTAP S3 server not listening on configured ports
- ONTAP sets the mtime of the file to 19 Jan 2038 when SMB client try to set timestamp beyond 19 Jan 2038
- ONTAP should return STATUS_DELETE_PENDING when a file is marked for deletion
- ONTAP shows unencrypted CIFS sessions open when '-is-smb-encryption-required' is true
- ONTAP TLS Certificates have expired certs
- ONTAP unable to reset CIFS domain password due to LDAPS
- ONTAP uses the same interface for two nodes when connecting to FPolicy
- ONTAP using unexpected route
- ONTAP Vscan (Antivirus) and Antivirus Connector (AVConnector) Resolution guide
- ONTAP when configured as a DNS Load Balancer returns the authoritative response
- ONTAP Windows user credentials procedure failed for S4U2self and LDAP
- ONTAP with ESXi and NFSv4.1 - Resolution guide
- Opening (folder on) CIFS share results in another folder to be displayed
- Openstack VM hang occurs while testing the NFS Lease and Grace seconds settings
- Operations using Secure LDAP fail, due to (enforced) ChannelBinding
- Oracle database fails to be opened with the error "unable to lock file - already in use"
- Oracle Host reports "Bad file descriptor error" while running "file" command on SMB share using port 139
- Oracle unable to write archive files to the CIFS share due to sector size
- Organizational Unit (OU) is not updated in ONTAP after Active Directory object move
- OS X clients running Big Sur (11.x) unable to enumerate SMB shares on ONTAP
- Outage after applying aes-encryption and aes-encryption-for-netlogon-channel
- Outbound connections from a VIP fail when BGP peer is unresponsive
- Outdated netgroup cache entry leads to NFS mount denial via export policy
- Owner displays SIDs instead of name when accessing CIFS using DFS path in windows
- Owner of NFSv4 mounted object is incorrectly listed as "nobody"
- Owner on newly created files/folders under CIFS share defaults to BUILTIN\Administrators
- Owner/group information not showing correctly on UNIX clients using SAMBA
- Ownership commands on UNIX client results in i/o error: not owner
- Ownership only changes at the top level of the share and not child objects
P
- Packet loss causing slowness and latency outside of ONTAP
- Packet loss reported with LIFs on a static multimode ifgrp
- Packetloss on port channel
- Palo Alto firewall issue results in inferred packet loss / duplicate packets
- Panic String: page fault (supervisor write data, page not present)
- PANIC: Process wafl_exempt04 is double tripping on lock unknown
- Performance hit on upgrade to ONTAP 9.7+ due to lack of TCP Segmentation Offload (TSO)
- Performance impact seen due to manually configuring NIC speed and duplex
- Performance impact to Mac clients when accessing FlexCache volumes
- Performance impact when using CIFS Access Based Enumeration
- Performance issues (timeouts) after VSCAN upgrade
- Performance problem due to unreachable vscan servers
- Periodic secd.ldap.noServers error messages in EMS after using start-TLS on port 636
- Permission changes are not seen when running icacls on a cifs share
- Permission denied error due to Network File System (NFS) attribute caching on client
- PERMISSION DENIED error message on NFS mounted VOL with security style UNIX fails when using CHOWN/CHMOD as root
- Permission denied error status returned for DNS check
- Permission denied error when trying to access CIFS share after CIFS domain migration
- Permission denied for users in AD Protected user group when Kerb is broken
- Permission denied to delete thumbs.db file
- Permission denied to some NFS users due to nblade cache
- Permission denied when accessing NTFS volume via NFS with incorrect LDAP base DN
- Permission denied when copying a read-only file from local to ONTAP volume
- Permission denied when copying a read-only file in a FlexCache volume using NFSv4.1
- Permission denied when listing snapshots on directory monitored by Prolion
- Permission denied when mounting NFSv3
- Permission denied when trying to access a share over NFSv4
- Permission denied while moving files between qtrees when NFS option '-validate-qtree-export' is enabled
- Permission issue on CIFS share path due to which application services are not working
- Permission Propagation is not as expected in Windows Server 2019
- Permissions are incorrect causing CIFS access issues after migration
- Permissions denied accessing a path
- Permissions troubleshooting resolution guide for ONTAP
- Physical member ports down after Ifgrp creation
- Ping fails intermittently from ONTAP when destination has duplicate IP address
- Ping from LIF to gateway IP address fails
- Ping is unavailable from client to data LIF
- Ping to gateway fails but works when LIF is migrated to a different port
- pNFS client continues reaching out to server despite NFS4ERR_LAYOUTUNAVAILABLE
- pnfs client Read/Write IO hangs after LIF IP address was modified
- Poor CIFS and NFS Performance due to Varonis FPolicy Low Memory
- Poor CIFS performance with SMB2.1 Large MTU disabled
- Poor Performance with NFSv4.x Delegations Enabled
- Poor read performance in a WAN environment with ONTAP 9.5
- Port block causes secd.ldap.noServers
- Port e0M keeps flips between multireach and miscfg regarding the broadcast domains
- Port e0M on node is not capable of hosting LIF
- Port showing high bus overrun discard count in ifstat
- Portmapper connection refused when mounting via NFS in ONTAP 9
- Ports can not be added to a ifgrp
- Ports in an ifgroup report link down but are physically up
- Ports show as degraded after deletion of automatically created broadcast domain
- Possible system disruption due to NetBIOS Name Service (NBNS) on cluster
- Post NFS volume migration on Trident end user is unable to access the data inside NFS export
- Post SVM DR failover, CIFS server shows SecD : No servers available
- Previous Versions tab displays empty snapshots for domain users
- Previous Versions tab in Windows Explorer does not include all snapshots, affecting only FlexGroup volumes in ONTAP
- Primary Disk Migration using Hyper-V VMM to a new location fails due to CIFS share permission lost
- Printer fails to save the scanned file on the CIFS share
- Programs in CIFS shares are not executable by Linux users
- PTR with invalid info causes secd.conn.auth.failure or secd.ldap.noServers:EMERGENCY errors
- pvif.lacp.outofsync: ifgrp a0a, port e0e cannot synchronize with the LACP aggregate
Q
- QID 66013 : Vulnerability scanner indicates RPC ypbind daemon is open
- QLogic CNA 8324 port member of an LACP IFGRP is marked as down
- Qtree cannot be mounted due to missing export policy rule on the root volume
- Qtree export not displayed in "showmount -e" in ONTAP 9
- Qualys QID 68520 indicates ONTAP NFS exports are insecurely set to allow Everyone access
- Queue drop discards are seen in ifstat outputs for a given port
- Quota report showing UIDs instead of unix user names when using NIS
- Quota report shows different usage to Linux on a user quota
R
- Random Write failures on a CIFS share
- Reachability status says "multi-domain-reachability"
- Reachability status says "no-reachability"
- Read EAGAIN errors found in EMS and Fpolicy.log
- Read/Write access denied in export-policy check-access with client-match set to 0.0.0.0
- Reading Unix permissions using icacls fails with error the request is not supported
- Receiving "Access denied" error intermittently on application even though permissions are correctly configured for files/folders
- Receiving "Could not find..." error when saving Office files to a CIFS share for ONTAP 9.1
- Receiving 'mount.nfs: No such device' when mounting NFS
- Receiving secd.kerberos.preauth error message
- Receiving vifmgr.reach.ok and vifmgr.reach.multireach errors in EMS
- Recently updated netgroup member showing not a member of netgroup due to missing PTR record
- Reconfigure Virtual Machine options as memory size on VMware ESXi, 6.5.0 is very slow
- Recurrent nfs outages of 15 seconds when lif is located on a multimode ifgrp
- recurring NFS4.0 outages due to NFS4ERR_RESOURCE and NFS4ERR_ADMIN_REVOKED
- Regain access to qtrees
- Relative path symlinks in ONTAP 9
- Remote Device ID of cluster port on TNSC is changed upgrading ONTAP from 9.3 to 9.5
- Removing a DC from the domain fails "NBT: Cannot connect to server over NBSS socket for port 139. Error 0x23: Resource temporarily unavailable"
- Removing domain group from local group fails with error "Reason: entry doesn't exist"
- Renamed windows group names (in Active Directory) not reflecting in OnTap CLI and System Manager
- Repeated secd crashes after upgrading ONTAP 9, clients unable to connect
- Replay-cache bucket memory exhaust occur
- Replication Director: Browsing and Tape backup operations will not succeed If the source volume or backup selection is a CIFS path and owned by vFiler
- Resetting the status of scanned files for ONTAP
- Resilio File Replication not handling all file changes
- Resolution Guide for Error 0x8007054F An internal error occurred
- Resolving access issues to unix security object for NFS users after UNIX group-membership changes in ONTAP 9
- Restore ability to mount NFS export
- Restore CIFS/SMB user accounts
- Restore operations from SnapCenter are slow after installing the NetApp NFS Plug-in for VMware VAAI
- Restoring files from Snapshot copies with Windows and NFS Clients on ONTAP
- RESULT_ERROR_SECD_LDAP_HOSTNAMES_NOT_RESOLVED reported in SECD for LDAP check
- Retrieving qtree information from vserver fails with refused error
- RHEL 5.x and 6.x fail to mount with SMB2 protocol
- RHEL 7 NFS Client with F-RTO enabled reports "nfs: server not responding, still trying"
- RHEL clients are able to mount home directories, but can't access the NFS share
- RHEL clients see Failed setxattr operation: Invalid argument
- Roaming profile cannot be deleted without manually breaking locks
- Robocopy access is denied on source volume
- Robocopy may not skip files when archive bit is set
- robocopy migration fails with "error 31 (0x0000001F) Copying NTFS Security"
- Robocopy not using open with backup intent
- Robocopy shows files as modified after multiple copies
- Robocopy unable to set all ACLs on a file
- Robocopy writes files to snapshot directory instead of CIFS share gets "Access Denied"
- Robocpy from EMC to ONTAP fails with the error 31 (0x0000001F)
- root squashing causes Access Denied when mounting NFS export
- Root squashing causes NFS clients to show root user and group as nobody
- Root unable to cd or ls in NFS mount, but other users work as expected
- Root user able to delete file present on volume when root squashing is enabled
- Root user gets access denied to access NTFS volume due to root squash
- Root user is able to access and copy data from multiprotocol share to AWS S3
- Root user is squashed to anon even with superuser set to any in export-policy rule
- Root user is unable to mount NFS share with permission denied
- Root user unable to change file ownership and permission with CHOWN and CHMOD in Kerberos mount
- Root volume cannot be mounted
- RPC accept GSS token procedure failed (Decrypt integrity check failed)
- RPC accept GSS token procedure failed (Time limi)
- RPC Auth error: (GSS context problem)
- Rsync fails to copy certain files
- rsync reports lower than expected throughput to / from an ONTAP export
- Rubrik backup fail on NFS volume
- Rubrik backup failed due to unmount failure
- Rubrik Cloud Direct returns "No such file or directory .copy_offload"
- Rubrik fails to complete backup due to error accessing share
- Rubrik NAS Cloud Direct files restore job fails
- Running chmod g+s on a directory removes the SGID bit when the user is not part of the group
S
- S3 bucket performance / workload is not shown by qos statistics
- S3 client receives "Not Implemented" when accessing Boto3 presigned URL using V2 signatures
- SAM report Best Practice risk warning for setting up adefault name mapping rule
- Samba client cannot access CIFS shares
- Samba client unable to mount CIFS to NTFS share: Input/output error
- Same ifPhysAddress Values Returned for Interface Ports When Running snmpwalk on CN1610
- SAP SUM gets permission denied while copying kernel files using cp -pr to the mounted CIFS share
- Saving a message from Outlook to a file on a CIFS share is very slow
- Scan timed-out errors from Trend Micro ServerProtect due to files skipped from scanning
- Scanner application encounters STATUS_OBJECT_PATH_NOT_FOUND while writing to CIFS Share
- Scanner-pool add failure due to DNS resolution failure
- Scan-timedout displayed in vserver vscan show-events
- Scan-timedout vscan event causing loss of cifs access
- Searching an ONTAP CIFS share is slower than searching a Windows CIFS share
- SEC_INFO requests are denied when file is opened with READ permission
- SECD encounters a panic when using Secure LDAP (LDAPS)
- SECD may panic when LDAPS for AD-LDAP is enabled without a certificate or with wrong root CA certificate
- secd.cifsAuth.problem for NULL user due to misconfigured win-name-for-null-user
- secd.conn.auth.failure messages: Error: Invalid Credentials
- secd.conn.auth.failure reported to DCs in a trusted domain during Site Discovery
- secd.dns.srv.lookup.failed due to misconfigured trusted domain list
- Secd.dns.srv.lookup.failed errors seen in EMS logs after upgrade to ONTAP 9.9.1P5
- secd.dns.srv.lookup.failed message on the trusted domain controllers
- secd.dns.srv.lookup.failed with error RESULT_ERROR_SECD_DNS_NO_SUCH_SERVICE
- secd.kerberos.preauth - Resolution Guide
- secd.kerberos.preauth due to missing PTR for AD-LDAP server
- secd.kerberos.preauth error caused by ONTAP admin access by domain user with incorrect password
- secd.kerberos.preauth event is being logged
- secd.kerberos.preauth event received during domain discovery
- secd.kerberos.preauth due to PTR record pointing to incorrect domain
- secd.ldap.noServers and secd.conn.auth.failure after LDAPS is required
- secd.ldap.noServers caused by multiple PTR records for the DC
- secd.ldap.noServers due to ad-domain set for LDAP
- secd.ldap.noServers due to firewall blocking LDAPS traffic
- secd.ldap.noServers due to obsolete preferred-dc
- secd.ldap.noServers during domain discovery due to incorrect certificate
- secd.ldap.noServers error in EMS when ldap is set as a namemap source
- secd.ldap.noServers events due to expired certificate on DC
- secd.ldap.noServers: None of the LDAP servers configured for Vserver are accessible
- secd.ldap.noServers:EMERGENCY due to trusted DC discovery after ONTAP upgrade
- secd.ldap.query.timed.out reported during SiteDiscovery
- secd.lsa.noservers and KRB_AP_ERR_SKEW errors in EMS
- secd.lsa.noServers and secd.ldap.noServers due to secd.dns.srv.lookup.failed:error
- secd.lsa.noServers and Unknown user (KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN) after running get-dc-info
- secd.lsa.noServers because SMB2 is disabled
- secd.lsa.noServers due to dns failures
- secd.lsa.noServers due to Duplicate IP Address
- secd.lsa.noServers event reported every four hours
- secd.lsa.noServers: None of the LSA servers configured for Vserver due to no response on port 389
- secd.netlogon.noServers error seen with 0xc000035c NT_STATUS_NETWORK_SESSION_EXPIRED in ONTAP 9
- secd.netlogon.noServers error seen with DNS timeout
- secd.nfsAuth.noCifsCred: NFS authorization cannot retrieve CIFS credentials
- secd.nfsAuth.noNameMap error because mapped Windows user does not exist
- secd.strong.auth.required: Stronger authentication enforced by LDAP server
- Second attempt to save a scan from a MFD fails with invalid user name or password
- Security Daemon (SecD) fails to find local unix user by UID and name
- Security Software does not displays correct ONTAP version
- Security tab missing for newly created CIFS share and Error code: 0x80070035
- Security trace shows the wrong user attempting to write files
- sed gets permission denied after enabling NFS auditing
- Set a quota on a volume share or limit how large a folder can be on a specific share
- Setting Access and Ownership of NTFS Files and Folders - Resolution Guide
- Setting NTFS ACL from Windows Explorer for files in mixed security style volume is not reflected
- Setup ONTAP AV Connector Polling GUI 1.0.5 and higher for data LIFs
- Setup ONTAP AV Connector Polling GUI 1.0.5 and higher for management LIFs
- SFP28 port IFGRP and VLAN speed inaccuracy
- Share access via FQDN fails due to DDNS update failure
- Share names show as lowercase through IP but uppercase through FQDN or NETBIOS
- Share-properties on admin$ cannot be removed
- Shares appears as shortcuts instead of folders
- Should I stop the AV connector service when I stop the Symantec Protection Engine (SPE) service?
- Should multiple SVMs be used to host multiple S3 buckets?
- Should we have Vserver(SVM) and CIFS server name same while CIFS server creation
- Show-creds does not reflect adding Windows user to BUILTIN\Administrators group
- Show-creds fails with "CIFS server account password does not match password stored in Active Directory"
- SHOWMOUNT fails with Program not registered due to improper LIF configuration
- SHOWMOUNT fails with Program not registered when NFSv3 is disabled
- Significant SMB latency due to slow Unix LDAP servers
- Single mode Ifgrp port becomes unresponsive after active member port gets down/up
- Slow CIFS performance due to network congestion
- Slow copy speeds when copying files from CIFS share
- Slow file access to shared Microsoft Office Excel documents
- Slow NFS Writes to Cloud Volumes ONTAP as compared to Amazon FSx
- Slow Oracle database performance due to blocked port 111
- Slow PDF, Excel, Word, Powerpoint, or other file types opening on CIFS share due to Crowdstrike
- Slow Performance and access issues on Linux client NFSv4.1 with excessive BIND_CONN_TO_SESSION calls
- Slow performance between Client and CIFS Share in ONTAP 9.8 due to Procmon process
- Slow performance when uploading data from the NetApp CIFS share to the Azure VM
- Slow performance with vscan enabled due to overloaded or disconnected AV Scanner/s
- Slow reads on a CIFS share (no issues with writes)
- Slow response from DNS servers causes DNS timeouts
- Slow throughput due to network device or client marking a majority of packets with ECN-Echo
- Slow throughput when using Robocopy or Rsync to copy small files
- Slowness in CIFS share performance due to Vscan
- Slowness observed while saving Excel files on CIFS share
- Slowness opening or saving MS Office files from CIFS DFS
- Slowness when copying files from a NFS Filesystem to a local machine
- Slowness when saving files to a CIFS share using Adobe Indesign
- SMB - Resolution Guide
- SMB Access is Allowed When Access is Denied by Export-Policy
- SMB and other services hung from Windows Server after ONTAP upgrade to 9.6 or 9.7
- SMB change notifications not received for a FlexCache volume
- SMB issues due to client connections being blocked on Riverbed SteelHead
- SMB performance slow for MacOS clients
- SMB Rename of large zip files may fail with internal error due to VSCAN timeout
- SMB share not accessible via hostname due to invalid spn
- SMB signing vulnerability on Tenable Nessus
- SMB Witness Troubleshooting Workflow
- Smbclient connection fails with "NT_STATUS_INVALID_NETWORK_RESPONSE"
- smbclient fails to create recurse folder
- SnapCenter unable to connect to SVM using HTTPS on port 443
- Snapmirror dst volume can not be accessed via SMB\CIFS
- SnapMirror fails after switch maintenance when LIFs fail to incorrect VLAN
- Snapshot Directory Access Enabled option flipping from 'false' to 'true'
- snapshot restore fails with "There are no previous versions available" error in Windows Explorer previous versions tab
- Snapshots are not visible inside the ~snapshot folder because they are marked as hidden
- SNMP traps use Intercluster IP address instead of node management LIF IP address
- Solaris 11.4 using multiple TCP connections is slow to recover from LIF failover
- Solaris client gets hang and timeout when mounting with NFSv4
- Solaris client unable to mount NFSv4 export
- Solaris host gets hung after executing the quota command
- Solaris users getting permission denied on NFSv4 but not NFSv3
- SolarWinds NPM module cannot pull SNMP
- Some files cannot be deleted from CIFS even if users have Full Control for files and directories
- Some jobs failed with “No locks available” - lmgr.cb.waiting.limit.hit
- Some NFS files unaccessible, causing hang when trying to view/edit
- Some normal files become hidden on Mac OS
- Some or all files/folders missing when accessing CIFS shares when access-based enumeration is enabled
- Some specific Windows NT clients cannot mount CIFS shares
- SPE VSCAN Server fails to scan files due to incorrect user account being used
- Special characters in AV connector logs
- Splunk CIFS audit log is growing much bigger than ONTAP CIFS audit log
- SPN's being removed from active directory that are related to SMB shares
- SQL cluster lost connection to witness SMB share during ONTAP upgrade
- SQL Server error: Cannot bulk load - Operating system error code 5 (Access is denied)
- SQL Server Management Studio unable to save file on CIFS share
- SSH fingerprints change every time an SVM LIF is migrated to other nodes in the cluster
- SSH login to cluster using users from CIFS sevrer's trusted domain times out
- SSH to cluster CLI using users from CIFS server's trusted domain fails
- SSH to cluster management with Domain credentials fails due to DNS timed out error
- SSH using a domain user takes longer than expected
- sshd errors about buffer_get and key_read
- Staging volume for CIFS auditing is full
- Staging volume full for onbox CIFS auditing in ONTAP
- Stale file handle caused by file or directory in use or deleted by another client
- Stale file handle error (NFSv3 and NFSV4) due to a file or directory in use is deleted by another client
- Stale file handle error (NFSv3 and NFSV4) due to a file system exported by the storage system is not exported to a client
- Stale file handle error (NFSv3 and NFSV4) due to flipping SnapMirror relationship between two sites
- Stale file handle error (NFSv3 and NFSV4) due to pNFS device ID does not exist and the I/O request comes to the DS (Data Serving)
- Stale file handle error for NFSv3 and NFSV4
- Stale file handle shown when user attempts to connect to filesystem
- Stale file handle while deleting an empty directory
- STATUS_TRUSTED_DOMAIN_FAILURE (0xc000018c) due to the changes in Netlogon secure channel connections associated with CVE-2020-1472
- Stealthbits fpolicy stops responding after receiving a negotiate request
- StorageX migration floods secd
- Storepool Owner/OpenState exhaustion causes NFSv4 file access failure
- Strategies on how to undo an accidental move of a folder or file from ONTAP using CIFS\SMB or NFS
- Strong(er) authentication required (Service: LDAP (Active Directory) found in logs
- Subsequent on-demand scan consuming more time and rescanning the same files
- Successful connection between ONTAP AV connector 1.0.5 and Symantec Protection Engine while AV connector logs shows multiple errors
- Supplemental / Nested Unix Groups not displaying
- SVM fails to connect to DC when SMB3 Encryption is enabled on DC
- SVM has lost connectivity to domain controller
- SVM has no VSCAN server connected directly after enabling VSCAN
- SVM is on retired domain
- SVM machine account does not meet minimum password length
- SVM Manegemnt LIF is only accessable when CIFS data lif is down
- SVM route deletion fails with "Error: command failed: Internal error"
- SVM unable to connect to FPolicy Server because SSL was not enabled
- SVMs cannot access any of the configured AD LDAP servers
- Symlink is being randomly deleted from NFS client
- Symlinks are not working after migration
- Sync relationship is hung when copying files to target
- Sync relationship not completing in a timely manner
- Syslog server stopped receiving event logs after ONTAP upgrade/reboot
- system health subsystem show displays CIFS-NDO degraded in a non-supported CA config
- system health subsystem show displays CIFS-NDO degraded in a supported CA config
- system health subsystem show output displays CIFS-NDO is in degraded state - Resolution Guide
- System Manager reports SMB/CIFS Data LIFs are down
T
- TCP packet with bad checksum errors reported on a single VLAN
- TCP reassembly queue overflows lead to poor performance and possible application disruption in versions of ONTAP 9.3, 9.4 and 9.5
- TCP Window Size in ONTAP
- Tenable reports LDAP signing and sealing are not enabled for the administrative SVM
- Tenable reports NFS alerts
- The description for Event ID cannot be found in the EVTX logs generated by ONTAP
- The error "file names are larger than is supported by the file system" seen on Windows clients for ONTAP 9
- The ifstat command displays thousands of errors in an ifgrp
- The maximum supported number of IP spaces for the cluster has been exceeded
- The NFS server denied the mount request
- The NIS domain bound status shows "-"
- The NIS domain bound status shows "Invalid Domain"
- The NIS domain bound status shows "Invalid Domain" on some nodes and "success" on other nodes
- The packets received appear to be larger than the configured MTU in a packet capture
- The printer fails to connect CIFS share
- The privileged user name contains characters that are not allowed
- The process cannot access the file ... because it is being used by another process
- The program cannot open the required dialog box ... joined to a domain
- The program cannot open the required dialog box because it cannot determine whether the computer named "" is joined to a domain when LDAP servers are remote to ONTAP
- The reason XCP delete files on the target after they are deleted from the source
- The SASL bind to UNIX LDAP server fails with Local error
- The tree quota policy is not restricting the space
- The Vscan server gets disconnected due to "inactive-connection"
- The Windows function 'FindFirstFile' returns error '59' in ONTAP
- The data is still copied directly without passing through the host when -is-copy-offload-direct-copy-enabled is false
- Tiered data is no longer accessible
- Time skew between storage system and Windows domain causes authentication failures during CIFS setup
- Time skew errors observed between SVM and DC
- Time-out issues on CIFS
- Too many groups have access to the share
- Top RHEL Issues/Workarounds/Best Practices for NFSv3/v4.0
- Top UNIX (Solaris/AIX/HP-UX) Issues/Workarounds/Best Practices for NFS v3/v4.0
- Top Windows NFSv3.0 Issues, Workarounds and Best Practices
- Touching a file results in the Linux client hanging
- Traffic from VMware ESXi generating read and write latency in Nblade
- Trellix reports access denied when attempting to scan files for vscan
- Trend Micro Device List GUI displays IP address instead of hostname
- Trend VScan fails with Nblade.vscanBadUserPrivAccess causing slow access to file
- TrendMicro scanner pool has no virus scanner connection. AV error: 1326
- Troubleshooting Access Denied or Mount Hung from NFS client for clustered Data ONTAP
- Troubleshooting CIFS or SMB access denied
- Troubleshooting connectivity issues for ONTAP Vscan
- Troubleshooting Workflow: CIFS: Device attached to the system is not functioning
- Troubleshooting Workflow: DC not responding (CIFS)
- Troubleshooting Workflow: Remote I/O Error
- Trusted Domain info is not displayed on one of Cluster nodes
- Trusted domain not configured in Active Directory
U
- UAC prompt to request access to a share is no longer appearing
- Ubuntu CIFS client cannot access/mount SMB share through a DFS namespace
- Ubuntu client reports "Bad file descriptor" when attempting to read a file via CIFS
- UID and GID displays "nobody" on NFSv4 mount when UID/GID do not match with domain config
- UIDs instead of usernames in quota report
- Unable able to access root of the share to fix file-level permissions in ONTAP
- Unable to "Detect Resource Type" from Varonis DatAdvantage with ONTAP 9.6 or higher
- Unable to access a new CIFS share with mandatory screening enabled
- Unable to access an existing CIFS share after recreating the volume from a SnapMirror
- Unable to access CIFS share after upgrade to 9.8
- Unable to access CIFS share because DFS advertisement was not generated
- Unable to access CIFS share due to NT_STATUS_AUTH_ACCOUNT_DISABLED for ONTAP 9
- Unable to access CIFS share from Protected Users Security Group
- Unable to access CIFS share using Windows Hello
- Unable to access CIFS share via hostname
- Unable to access CIFS share when MDV volume is full, although destination volume has sufficient space
- Unable to access cifs share when RC4 encryption is disabled on the Domain Controller
- Unable to access CIFS share with a recently added security group
- Unable to access CIFS share with error: RESULT_ERROR_GENERAL_FAILURE, when DC prevents NTLM
- Unable to access CIFS share with error: The specified network name is no longer available
- Unable to access CIFS shares after SVM migration using snapmirror
- Unable to access CIFS shares due to LDAP timing out querying for msDS-PrincipalName
- Unable to access CIFS shares due to SID lookup failed error
- Unable to access CIFS shares following DNS server IP change
- Unable to access CIFS shares post 7MTT migration due to incorrect share path
- Unable to access CIFS shares using gMSA account
- Unable to access CIFS shares via Alias after DR failover
- Unable to access cifs shares with FQDN, error "access is denied" although its accessible via ip
- Unable to access CIFS shares with hostname due to time difference between ONTAP and DC
- Unable to access CIFS using IP address
- Unable to access CIFS via DNS Alias due to misconfigured SPN
- Unable to access CIFS, SECD/EMS report RESULT_ERROR_SPINCLIENT_SOCKET_CONNECT_ERROR
- Unable to access CIFS/SMB after restoring Azure environment due the CIFS AD object was not found
- Unable to access cluster management via SSH
- Unable to access data on ONTAP 9 with SFTP
- Unable to access database files from cifs share after Windows 10 upgrade to version 1909
- Unable to access files in CIFS shares as file extensions gets changed
- Unable to access files or folders on a FlexCache via CIFS
- Unable to access files when AV server is unable to process scan requests
- Unable to access files/folders in CIFS share due to insufficient NTFS permission
- Unable to access folder with permission error when Share lock exists
- Unable to access NAS volumes due to CSM_TIMEOUT
- Unable to access new SMB Share on replicated shares due to unhealthy ls mirrors
- Unable to access NFS export when DNS is not reachable
- Unable to access Qtree CIFS share residing in Flexgroup volume
- Unable to access share following Domain Controller upgrade
- Unable to access share or change permissions after DENY has been applied to EVERYONE
- Unable to access share via IP but host name works
- Unable to access shares and DNS shows down
- Unable to access shares using SMB1
- Unable to access shares when Vscan enabled with error Nblade.vscanConnBackPressure
- Unable to access SMB Shares due to decommissioned domain controller
- Unable to access SMB shares due to time skew between ONTAP and the Domain Controller
- Unable to access the cluster via SSH due to client's excessive incoming connections
- Unable to access the shared drive due to duplicate gateways with the same metric
- Unable to access the snapshot folder in a share with an incorrect path
- Unable to access SMB share on CVO instance due to networking
- Unable to access/write volume using NFSv4.x when mount security type is set to null
- Unable to add a CIFS server to AD
- Unable to add CIFS share ACL back to ipc$ after upgrade from 7mode
- Unable to add domain user to local groups: "Failed to create a domain entry for "DOMAIN". Reason: duplicate entry."
- Unable to add NetApp cluster to Sailpoint
- Unable to add PTR Records to DNS
- Unable to add SVM to a new domain
- Unable to add Windows Local user or group to share NTFS access control lists (ACLs)
- Unable to add "NT AUTHORITY\Authenticated Users" to SVM local group
- Unable to apply permissions to a volume as the job fails with error no such file or directory
- Unable to assign or modify share permissions via MMC due to orphaned SIDs
- Unable to authenticate domain user from Fpolicy engine and getting error 401 unauthorized
- Unable to authenticate to Cluster using FreeIPA LDAP
- Unable to change group for directory for file
- unable to change ownership with CHOWN operation not permitted
- Unable to configure backup application Cohesity to use Kerberos authentication
- Unable to configure BGP FQDN in ONTAP
- Unable to configure On-Demand scanning without scanning On-Access scanning
- Unable to configure S3 snapmirror
- Unable to connect to CIFS share due to missing SPN
- Unable to connect to CIFS shares after enabling AES on the DC
- Unable to connect to CIFS Shares and get error "Nblade.cifsMemExceeded" in ONTAP
- Unable to connect to CIFS shares from Windows 8 or Windows Server 2012
- Unable to connect to client when using Cisco ACI network
- Unable to connect to NFS Server after power outage due to unresponsive dns server
- Unable to connect to Vscan server
- Unable to copy some files with "~" in the name during migration
- Unable to copy some shares using Robocopy during a migration
- Unable to copy using Robo Copy to NetApp Syntax error on file
- Unable to create a file with a name beyond 255 characters
- Unable to create a machine account for a CIFS server
- Unable to create a new CIFS server with secure LDAP
- Unable to create a new route Error: command failed: Duplicate route exists
- Unable to create a share due to volume not visible in System Manager
- Unable to create and access files with certain extension due to access denied
- Unable to create CIFS share on folder present under volume/qtree
- Unable to create CIFS shares after adding additional nodes to the cluster
- Unable to create filenames $'\300\257' and $'\300\200' in ONTAP using NFS
- Unable to create files in newly created share and volume
- Unable to create files using supplementary characters in filename causing NT STATUS 0xc0000033
- Unable to create files with specific extension
- Unable to create folders in few directories as Flexcache volume is unavailable
- Unable to create LIF allowing SMB as protocol
- Unable to create new CIFS server
- Unable to create share on snapshot directory under qtree
- Unable to create VMware NFS datastore larger than 15.81 TB
- Unable to delete a CIFS server
- Unable to delete a folder (reported as symlink, from a snapmirror copy)
- Unable to delete a folder, rm: cannot remove x/.snapshot': Read-only file system
- Unable to delete CIFS Auditing
- Unable to delete file when cifs share accessed using netbios name
- Unable to delete file with error You need permission to perform this action
- Unable to delete folder via Windows Explorer and no error messages are seen
- Unable to delete FPolicy policy
- Unable to delete netgroups
- Unable to delete or copy some files/folders from Windows Explorer on a CIFS share due to path length limit
- Unable to delete or rename a file name containing metadata or odd characters in ONTAP
- Unable to delete or rename files due to lock present on the file
- Unable to delete or rename files or folders - Resolution Guide
- Unable to delete or rename files or folders ending with "."
- Unable to delete the file and getting error as "Device or resource busy"
- Unable to delete the file named thumbs.db from CIFS share
- Unable to delete thumbs.db file
- Unable to delete VLAN and ifgrp configuration from node during controller replace
- Unable to delete CIFS share with spaces in name
- Unable to delete folders from share due to symlink configuration
- Unable to determine if device is joined to a domain - Resolution Guide
- Unable to enable ADAUDIT
- Unable to enable AES due to Kerberos Error: KDC has no support for encryption type
- Unable to enable AES encryption due to StartTLS or LDAPS requirement
- Unable to enable AES on CIFS Vserver for ONTAP 9
- Unable to enable Kerberized access for an NFS LIF
- Unable to follow relative symlinks when the target is outside of the share boundary
- Unable to import AV Connector LIF configuration file
- Unable to join CIFS server to a new domain
- Unable to join CIFS to domain
- Unable to join SVM to domain because DNS is unreachable
- Unable to join SVM to domain because hostname lookup returns hostname nor servname provided or not known
- Unable to join SVM to domain because LDAP Error: The user has insufficient access rights
- Unable to join SVM to domain because unable to connect to LSA service
- Unable to launch applications from CIFS shares after cluster upgrade
- Unable to list files on NFSv3
- Unable to list local group membership due to stale enteries in local smdb tables
- Unable to login to cluster using domain ID due to Microsoft CVE-2022-38023
- Unable to login to System Manager using AD account due to decommissioned DNS server
- Unable to login to System Manger with the domain user account
- Unable to lookup Domain SIDs in ONTAP 9
- Unable to Manage Local Users, Computers and Groups from Microsoft Management Console (MMC)
- Unable to map Unix to Windows user: secd.nfsAuth.noNameMap
- Unable to map Windows client to cifs share with Mixed security
- Unable to migrate VMs due to permission denied error in VMware
- Unable to modify NTFS permissions and LDAP SASL bind delay or failure occurs
- Unable to modify permissions from security tab on CIFS shares due to unreachable DNS
- Unable to modify permissions in CIFS share
- Unable to modify the ACL permission after enabled Seal/Signing for MS-LDAP
- Unable to mount a NFS share on Linux system with error "Access Denied"
- Unable to mount Autofs NFS exports after ONTAP upgrade
- Unable to mount CIFS share on Linux client due to krb authentication is being used
- Unable to mount CIFS share on RHEL 6
- Unable to mount CIFS share on Ubuntu
- Unable to mount Flexgroup volume using CIFS on Linux client
- Unable to mount new volume via NFS
- Unable to mount NFS due to packet drops in network
- Unable to mount NFS export when client does not match any export-policy rules
- Unable to mount NFS export when root volumes export policy deny read access
- Unable to mount NFS share on Solaris host
- Unable to mount NFS shares (permission denied)
- Unable to mount NFS using kerberos because client not requesting kerberos authentication
- Unable to mount NFS volume with non-root users but root can mount the same
- Unable to mount NFS, client side error RPC: Program not registered
- Unable to mount NFSv4 export as root when the root volume has NTFS security style
- Unable to mount NFSv4.1 due to no UID configured in name server
- Unable to mount NTFS volume from an NFS client
- Unable to mount NTFS volume via NFS due to "Invalid argument" error
- Unable to mount ONTAP NFS export from Windows NFS Client
- Unable to mount the NFS on Linux client with error RPC: Timed out
- Unable to mount the qtrees as export-policy does not match Client IP
- Unable to mount volume using CIFS on Linux client and fails with Error "Host is Down"
- Unable to mount volume using NFSv4.1 due to NFS Store Pool for Session exhausted
- Unable to mount volumes with mixed security style on Linux with CIFS protocol
- Unable to open .xlsx files in Microsoft Excel
- Unable to open Excel files that are hosted on CIFS share
- Unable to open files when Vscan is enabled with Symantec Protection Engine: Container Size Violation error
- Unable to open or modify Microsoft Office applications
- Unable to perform actions on files with specific extensions
- Unable to perform Cohesity NDMP backup from ONTAP System Manager
- Unable to perform SVMDR Failover after creating SVMDR snapmirror relationship
- Unable to perform vMotion on NetApp datastore when using VAAI over NFS
- Unable to perform write operations on an export mounted on a Windows machine
- Unable to ping DNS hostname from a network interface in an IPspace
- Unable to ping DNS name or IP of newly added LIFs to SVM
- Unable to ping gateway due to incorrect VLAN
- Unable to ping LIF due to multiple default gateways
- Unable to ping the gateway from ONTAP LACP interface group
- Unable to reach DNS servers after SVM-DR migration
- Unable to reach host using short name from vserver
- Unable to read snapshot NFS volume due to "Stale file handle" error
- Unable to reassign ownership of files in CIFS share due to SeRestorePrivilege missing
- Unable to remove domain user from local group with error "Reason: entry doesn't exist" on ONTAP 9
- Unable to remove invalid account SIDs from the Local Administrators Group of the vfiler
- Unable to rename CIFS server to a specific name
- Unable to rename or delete a folder or file in top folder of CIFS share
- Unable to rename or delete folders and files due to lack of"Delete subfolder and file" permission
- Unable to reset cifs domain password with admin user
- Unable to Reset CIFS SVM Password
- Unable to reset password on the vserver
- Unable to restore ACLs on CIFS share using Commvault
- Unable to restore/open file/folder from a snapshot from previous version tab
- Unable to save documents scanned by printer into CIFS share
- Unable to save edited MS-Excel spreadsheet with error Some one else is working in at moment
- Unable to save files due to access denied even if extensions are on allowed list
- Unable to see shares in MMC when accessing CIFS SVM via hostname but IP is successful
- Unable to set access control on CIFS share for specific Windows and Unix users in Mixed security volume
- Unable to set ACLs due to failed to resolve SID
- Unable to set ACLs for the CIFS share with an error "cannot determine whether the computer is joined to a domain"
- Unable to set ACLs using the Security tab in Windows
- Unable to set NFSv4 ACLs Error Failed setxattr operation due to NFSOCK4 file
- Unable to set sticky bit when SUID isn't set to true in ONTAP
- Unable to setup CIFS audit for Unix security style volume on Windows server
- Unable to specify "audit-policy-change" option during CIFS audit creation/modification
- Unable to start a Windows Service from the share
- Unable to start LDAPS: Invalid credentials
- Unable to unmount DP volume
- Unable to unschedule a vscan on-demand-task
- Unable to update MTU size to 9000
- Unable to use CIFS share as file share witness on windows server cluster quorum wizard
- Unable to view CIFS 8.3 shortnames in clustered Data ONTAP
- Unable to view or access .snapshot directory
- Unable to write files with error 0x80070052 due to maxdirsize limit reached
- Unable to write on NFS exports due to no write access in export policy
- Unable to write or copy large files to a CIFS share hosted by ONTAP
- Unable to write to a Symlink CIFS volume due to "not enough space" error.
- Unable to write to VMware NFS Datastore in readWrite AccessMode: "Permission denied"
- Understanding ARP snapshot protection and attack detection
- Understanding name-mapping in a multiprotocol environment
- Understanding ONTAP Offbox Vscan Server Extended Metrics
- Unexpected access for NFS client not member of netgroup
- Unexpected characters in a file written from two NFS clients
- UNIX client getting permission denied due root squashing on the client side
- Unix client sees created objects from its name mapped AD account as being owned by NFSNOBODY
- Unix client unable to access data after mount due to stale File Handle and NFS3ERR_IO error
- Unix clients are unable to write files to an NFS share with NFSv3
- Unix mode file permissions and NFSv4 ACL do not work as reported in RFC
- Unix root user is unable to access NTFS volume in ONTAP 9
- Unix root user not able to access NTFS volume when there is no name mapping for root user
- UNIX root user unable to mount NTFS volume due to access denied
- Unix to Windows User mapping not working as expected
- UNIX user cannot access NTFS volume due to name mapping failure
- UNIX user denied access to NTFS volume or qtree because "No mapping found"
- Unix user unable to access mount after power outage
- UNIX user unable to access NTFS volume due invalid cached credentials
- Unix user unable to access NTFS volume due to name mapping error
- Unix users don't have permission to NFS mounts due to NIS group build failure
- Unix users from VAS/Vintela/OneIdentity/Quest fail to get group-based access via NFS
- unix-win name-mapping doesn't work
- Unsupported protocol configurations for FlexGroup volumes
- Unusual Protocol Implementation reported by Microsoft Threat Analysis software (MTA)
- Upgrade Advisor Warning: NFS mounts
- Upgrade AV Connector from 1.0.3 to 1.05 fails with "The target account name is incorrect"
- Upgrade ONTAP AV Connector 1.0.5P1 to 1.0.6
- Upgrade to 9.13.1 secd.ldap.noServers:DEBUG alerts for non trusted domain
- Used size of qtree CIFS share shows post-dedup size even logical space reporting is enabled
- User added to the BUILTIN\Administrators group does not get access to the share
- User are shows as a member of a local group when they are not a member of that group
- User authentication RPC timeout when resolving groups in LDAP
- User having required permissions not able to access cifs path when there is existing cifs session with old credentials
- User in AD group is not able to access CIFS share
- User is not authenticated, even when user mapping is set to new AD
- User is unable to access CIFS share due to insufficient file-level permissions
- User is unable to change file or folder permissions in CIFS share
- User is unable to map volume using NFS
- User not able to access home directory share from windows with Error "Access Denied"
- User not able to open Excel file with error Access Denied when vscan is enabled
- User not able to read/modify cifs share permissions but able to read/write on the same cifs share
- User sends reset packet after Negotiate Protocol Request from the storage system
- User unable to access CIFS share due to missing domain trust relation
- User unable to copy data with "1314" error when using robocopy
- User unable to copy data with "Access Denied" error when using ACL option in robocopy
- Users are unable to access NFS filesystems when a new NIS group is applied
- Users are unable to create new folders on CIFS shares - LICENSE VIOLATION
- Users authenticated by an LDAP server randomly face "Access Denied" errors
- Users cannot access any CIFS share while the Fpolicy is disconnected
- Users cannot CIFS shares after ONTAP upgrade to 9.12.1 and later
- Users experience long access time while opening files on CIFS share
- Users face slowness when VSCAN is enabled
- Users facing slowness while reading and writing data in cifs share
- Users facing slowness while reading data from cifs share even though there is no latency seen from Ontap
- Users in nested group unable to access CIFS share
- Users in nested group unable to access CIFS share due to LDAP RFC2307bis
- Users in USERMAP.CFG could not be resolved, as Domain is in another (Trusted) Forest
- Users not able to access CIFS or NFS after switch upgrade
- Users not able to access the cifs share as they do not have any permissions on the share path
- Users not able to open Microsoft word and Excel files on windows 2016
- Users not able to write on cifs shares when cifs audit and default NVE is enabled
- Users not able to write to CIFS shares due to change in CIFS domain of local group members
- Users not being mapped using NFS Kerberos
- Users receive access denied when accessing files on CIFS share
- Users report access issue when accessing NFS mount while using LDAP
- Users report mixed access in the same domain when trying to access CIFS share
- Users reporting Adobe Premiere crashing when opening project templates
- Users unable to access CIFS/SMB share
- Users unable to access files in a CIFS share
- Users were unable access their CIFS shares due to incorrect supported-cipher-suites
- Using a DNS alias/CNAME for which SPN is set, but for a different account
- Using a DNS alias/CNAME, without the SPN set for that alias
- Using NFS v4.x in-band security and have anonymous access to ONTAP mount
V
- Varonis Error scanning shares Error code -2147024843
- Varonis FileWalk failed with error code -2147467259 due to invalid certificate
- Varonis FileWalk failed with error code -2147467259 due to service policy restriction
- Varonis Fpolicy Best Practice and Recommendations
- Varonis Fpolicy detects ONTAP SVM as Windows server but HTTPS is allowed
- Varonis FPolicy disconnecting repeatedly - Resolution Guide
- Varonis FPolicy disconnecting repeatedly due to a limitation in Varonis DatAdvantage
- Varonis FPolicy disconnecting repeatedly due to Varonis engine not listening properly to it's configured port
- Varonis FPolicy disconnecting repeatedly due to Varonis event database
- Varonis FPolicy disconnecting repeatedly due to Varonis service running on FPolicy server is not active or started
- Varonis FPolicy frequently turns off with error: "FPolicy server is removed from external engine"
- Varonis Fpolicy is being unexpectedly disabled without user interaction
- Varonis is not able to enumerate shares
- Varonis is unable to access port 443 and results in communication error
- Veeam backup fails: error "failed to get disk free space"
- Veeam backup failed with Unable to access target repository error
- Veeam Backup fails to perform backup on NFS volume and due to incorrect user credentials
- Veeam Backup fails with error failed to access share root mapping attributes
- Veeam backup throgh ESXi host to the ESXi NFS datastore fails due to packet loss
- Ventura Mac OS clients experience file access anomalies
- Veritas Data Insight "Failed to disable FPolicy" error message
- Veritas Data Insight REST calls failing
- Veritas Data Insight unable to discover shares
- Veritas DataInsight fails to register a Vserver
- Veritas Enterprise Vault Access Denied while creating archive folder
- Veritas Fpolicy Best Practice and Recommendations
- Veritas NetBackup CloudPoint jobs fail with error 13003
- Vetoed giveback of relocation because CIFS oplock recall
- vfiler connection to DC fails in session setup with Error STATUS_LOGON_TYPE_NOT_GRANTED
- Vfiler unable to authenticate due to denied access to CIFS server machine account in Active Directory
- vfiler0 always shows DNS servers as being down
- Viewing Vscan event log information for ONTAP
- vifmgr.lif.subnetMisconfig errors seen in EMS
- vifmgr.reach.miscfg frequently seen on port e0M
- Virtual Port-Channel (vPC) on Cisco switch down cause ONTAP sends different oper keys for member ports
- VLAN tagged ports are in different broadcast domains with auto port placement in ONTAP
- VMDK disc migration failing with error: File system timeout
- VMware .vmdk files cannot be found when session trunking enabled
- VMware Datastores with permission denied
- VMware ESXI cannot power on VM, create new VM, or revert snapshots after Native Fpolicy was enabled in System Manager
- VMware ESXi host: The mount request was denied by the NFS server
- VMware ESXi NFS error "Cannot open volume: /vmfs/volumes/
- VMware ESXi unable to connect to NFSv4.1 when ARP is not received
- VMware hosts are unable to power-up after ONTAP upgrade with NFSv4
- VMware NFS hosted on NetApp Datastore space discrepancies
- VMware NFSv4.1 based virtual machines are powered off after ONTAP 9 storage failover events
- VMware NFSv4.1 datastores became inaccessible during ONTAP upgrade
- VMware NFSv4.1 datastores see disruption during failover events for ONTAP 9
- VMware VCenter backup via CIFS "Failed to create backup directory Plugin error occurred"
- VMWARE Virtual Machines went offline during upgrade
- Volume is not accessible by NFS after export-policy is changed
- Volume is unavailable for clients and has brackets added to its junction path
- Volume offline or restrict command will unmount volume junction-path
- Volume seeing increase in latency
- Volumes not visible in the Varonis DatAdvantage
- VPN user unable to access CIFS shares
- vScan - vscanBadUserPrivAccess error frequently seen in the EMS log
- Vscan cannot connect to McAfee Endpoint Security Storage Protection 2.1
- Vscan connection disconnected due to the Vscan server-side interface configuration
- VSCAN connection established while AV engine stop scanning files
- Vscan connection fails due to Nblade.vscanNoScannerConn after upgrading ONTAP
- VSCAN connection rejected because of Nblade.vscanConnInvalidUser
- VSCAN connection status is in disconnected state
- Vscan connections not established after upgrade of ONTAP AV Connector to 1.0.5
- Vscan connection-status is not-connected, because data protocol cifs is not configured on the LIF
- vscan connection-status show-not-connected does not show a disconnect reason
- Vscan disconnect due to Vscan table update
- Vscan disconnected due to invalid-user
- Vscan disconnected due to network interface service-policy not allowing CIFS access
- Vscan displays invalid user for disconnection reason after changing privileged user
- VSCAN does not connect after ONTAP upgrade
- Vscan does not delete .EXE test file that is placed in a share with java nested CIFS
- Vscan does not delete files once its extension is renamed to a non excluded extension
- Vscan doesn't work on destination SVM after vserver failover in SVM DR environment
- Vscan engine connects only to one node, other nodes fail with 'remote-closed'
- VScan engine not able to detect virus (EICAR) due to Microsoft defender
- Vscan error - 222200009 - "Container Size Violation", Unable to Open File
- VSCAN failure statistics in ONTAP does not match "Not Scanned" in Antivirus Engine
- VSCAN intermittently disconnects not scanning files and seeing "vscanConnBackPressure" errors
- Vscan is not able to connect to ONTAP because data LIF is not present or down
- Vscan is not connecting to primary pool after Metrocluster switch back
- VSCAN is not excluding path, because Linux CIFS client is mounting path with / at end
- Vscan is not reachable from the Vserver data LIF
- Vscan McAfee randomly fail to scan files with: Error file not found
- vscan not connected because of missing service policy management-https on LIF
- Vscan not working due to disabled scanner-pool
- vscan on-access policy options "-paths-to-exclude" is not working with fuzzy file path
- Vscan scan timeouts lead to access issues in certain scenarios
- Vscan scan-failed error fails Veeam incremental backup when scan mandatory is enabled
- vscan scan-failed errors
- Vscan server disconnect due to Kerberos pre-authentication failure
- Vscan server disconnect due to requirement for Kerberos authentication
- Vscan server disconnected and no disconnect reason mentioned even though Vscan configured correctly
- Vscan server disconnected with error: ONTAP(R) forcibly closed the vscan connection originated from the nonresponsive AV server
- VSCAN server disconnects from SVM with Nblade.vscanNoScannerConn
- Vscan server disconnects randomly with Error "Nblade.vscanNoScannerCon" in EMS
- Vscan server fails to scan files: error scan-failed
- Vscan server installation and configuration for ONTAP
- VSCAN server is disconnected along with Nblade.vscanNoScannerConn in EMS
- Vscan server is disconnected and AV Connector shows error when testing connection
- Vscan server is not able to connect to the ONTAP because the Vserver data LIF does not have CIFS configured as a protocol
- Vscan server is not able to connect to the ONTAP due to incorrect scanner-pool configuration
- Vscan server is unable to connect to any node when SMB2 or higher disabled
- Vscan server reports file is skipped in logs
- Vscan server shows as connected but "vendor not registered" is listed
- Vscan server shows disconnected even though the vscan software engine service running on the vscan server
- Vscan server shows disconnected with no reason
- Vscan server user authentication is failing, EMS: vscanBadUserPrivAccess
- Vscan server will not connect to one or more nodes
- Vscan servers are connected but files are not scanned because continuously-available flag is set on the share
- Vscan servers are connected but files do not get scanned because the configuration for the Vscan-fileop-profile parameter
- Vscan servers are connected but files do not get scanned due to on-access policy configuration
- Vscan servers are not connecting due to ONTAP firewall policy configuration
- Vscan servers disconnecting and ONTAP admin domain access failing after ONTAP upgrade
- Vscan servers have backpressure
- Vscan servers in disconnected state with McAfee VirusScan Enterprise for Storage
- Vscan servers showing as disconnected along with Nblade.noSmbVerNegotiated in EMS
- Vscan showing disconnected with no disconnection reason when CIFS is down
- Vscan shows disconnected with Disconnect Reason being none or "-" due to missing cifs data-protocol
- Vscan shows disconnected with reason remote closed due to incorrect protocol set on vscan server
- VSCAN software McAfee (Trellix) ENSSP fails to release locks on files resulting CIFS client getting Access Denied
- Vscan status shows remotely closed due to an expired TLS Security Certificate
- vscan timeouts occur when max-file-size is set too high
- Vscan Time-outs on files causing delays on file creations
- Vscan unable to communicate with AV server, Error 401: Unauthorized
- VSCAN unable to connect due to error: vscanNoScannerConn:EMERGENCY
- VSCAN server disconnects from ONTAP due to packet loss
- Vscanner disconnected with "Disconnect Reason:remote-closed"
- Vscanner disconnected with Disconnect Reason remote-closed - Account credentials
- Vscanners are not able to connect to the ONTAP nodes due to downed LIFS
- Vserver audit not working after MetroCluster switchover
- vserver cifs modify command fails with error "Failed to modify the CIFS server"
- Vserver could not make a connection to an outside server with error: Connection refused
- Vserver fails to connect Domain Controller: RESULT_ERROR_SPINCLIENT_SOCKET_RECEIVE_ERROR
- Vserver fails to join AD due to anti-virus software
- Vserver lost connection to Domain Controllers
- vserver nfs kerberos interface enable disable commands fail with krb5 realm mismatch
- Vserver not able to connect to Varonis File Policy Server
- Vserver/Lif unreachable after Failover, due to incorrect IPspace configuration
- vSphere mount fails on NFS Server. Error: Access denied
W
- wafl.dir.surrpair.filename: Failed to create a file with surrogate pair characters
- Wafl_hung while accessing non-Unicode directories
- Weblogic application using NFSv4 fails with error "NFS4 error: NFS4ERR_STALE"
- What Active Directory environments is ONTAP 9.13.1 fully supported in
- What are .nfsXXXX files and how do I delete them?
- What are junction paths?
- What are locks, OpLocks and delayed breaks in ONTAP?
- What are NTFS access mask flags with corresponding user permissions?
- What are SMB Continuous Availability (CA) Shares
- What are SMB2 other_ops in the SMB2 statistics object?
- What are the Best Practices for NFS home directories on ONTAP NFS?
- What are the best pratices for Rstudio Server Pro mounting?
- What are the CIFS statistics to be collected for individual user sessions?
- What are the CIFS values to mitigate client malfunction?
- What are the common causes of CIFS SETUP failures?
- What are the corresponding NTFS security descriptor DACL entries between Windows, ONTAP and PST
- What are the differences between hard mount and soft mount
- What are the differences between NTFS and Share permissions?
- What are the effects of file locking on NFSv3 and CIFS clients?
- What are the events that can be audited for CIFS, NFS access?
- What are the file naming conventions for Network File System(NFS) and SMB/CIFS and maximum length of file names?
- What are the flow control best practices for Ethernet?
- What are the FPolicy partner solutions for ONTAP?
- What are the important considerations when setting up CIFS and name-mapping in clustered Data ONTAP
- What are the mount options for IBM DB2 on NetApp NFS?
- What are the mount options for SAP MaxDB on NetApp NFS?
- What are the mount options for Sybase on NetApp NFS?
- What are the NFS lock flags and their behavior?
- What are the NFS mount options for databases on NetApp?
- What are the NFSv4 Storepools, why do they exist?
- What are the ONTAP limitations in terms of Export-Policies
- What are the options available as Antivirus Connector Command Line Switches
- What are the prerequisites for enabling auth-sys-extended-groups?
- What are the schema settings for OpenLDAP?
- What are the statuses for cifs domain discovered-servers show
- What are the steps to add new VLANs?
- What are the supported Vscan (Antivirus) vendors for ONTAP?
- What attributes are referenced in LDAP to map to Unix users when accessing with Windows users?
- What can cause the secd failure: 'Error: Lookup of CIFS account name procedure failed'
- What can the event 'Nblade.exportAccessIndeterm' mean?
- What causes EMS "Nblade.nfsConnResetAndClose with reason OncRpcTcpInvalidRecordMarker"
- What cipher suite type does ONTAP support?
- What computer account name will be created on AD when initiating "kerberos interface enable" command?
- What data should I collect for NFSv4 StorePool issues?
- What do bus overruns mean?
- What does "Nblade.CallbackTimedOut" error from SM NOTIFY mean after node upgrade/reboot ?
- What does "volume mount" mean?
- What does error 'Nblade.invTcpRecordMarker' mean?
- What does 'Nblade.nfsRCChecksumMismatch' mean?
- What does ONTAP do with the credential used to modify domain objects
- What does STATUS_SHARING_VIOLATION MEAN?
- What files are filling up the CIFS share and who is doing what?
- What format does ONTAP 9 support for a netgroup?
- What Fpolicy Notification is sent when a folder is moved via Windows client
- What happens if the destination volume or staging volume is out of space in NAS auditing?
- What happens to client sessions when SMB dialects are disabled on the CIFS server
- What IDPs are supported with ONTAP and in what context
- What is a LIF?
- What is a Port Channel Group or ifgrp?
- What is a staging volume in NAS auditing?
- What is difference between anon setting 0 and 65534 when creating export-policy rule?
- What is Domain Controller Discovery?
- What is export-policy inheritance?
- What is FPolicy persistent store?
- What is idle timeout value for the NAS protocol
- What is IPSec?
- What is log consolidation in NAS auditing?
- What is LSA server in ONTAP event log?
- What is new in ONTAP 9.8 Shared Memory Implementation for FPolicy?
- What is ONTAP group membership cache?
- What is promiscuous mode for network card?
- What is SID History and how does it interact with ONTAP
- What is the CIFS max option for field -path-component-cache-max-entries?
- What is the default CIFS TCP window size?
- What is the default negotiated SMB version with various versions of Data ONTAP and Windows clients?
- What is the default UDP port range of Traceroute on ONTAP?
- What is the destination volume in NAS auditing?
- What is the difference between "undetermined" and "OK" in the result of the vserver cifs domain discovered-servers show command?
- What is the difference between Data ONTAP Name Mapping windowsAccount Attribute and Data ONTAP Name Mapping windowsToUnix Attribute?
- What is the differences between the administrator user vs administrators group
- What is the explanation of the cifs.restrict_anonymous option and its effects on null user access?
- What is the impact of a shares symlink settings and DFS advertisement in ONTAP on SMB client traffic
- What is the impact of CVE-2022-37966 to ONTAP 9
- What is the impact of disabling "-enable-ejukebox" and "-v3-connection-drop" on NFS operations?
- What is the impact of disabling NTLM and only use Kerberos?
- What is the impact of disabling or enabling Microsoft ODX "Copy offload"?
- What is the impact of disabling or enabling pNFS?
- What is the impact of enabling IPSEC to existing CIFS/NFS?
- What is the impact of increasing the send buffer size of fpolicy?
- What is the impact of modify the LDAP bind password?
- What is the impact of modifying the nfs server option '-tcp-max-xfer-size'?
- What is the impact of modifying/deleting or recreating a cifs server on ONTAP?
- What is the impact of restarting SECD?
- What is the impact of updating the Domain controller IP address
- What is the impact on active/idle sessions of disabling NetBIOS-over-TCP?
- What is the impact on the DACL when changing the SMB owner for a file or folder?
- What is the 'L2 Terminate' ifstat counter?
- What is the maximum file size supported in ONTAP?
- What is the maximum Kerberos token size (MaxTokenSize) that ONTAP can process?
- What is the maximum number of entries in an export policy in ONTAP?
- What is the Maximum Outstanding Requests for FPolicy Server parameter
- What is the meaning of 'On-Demand scan failed to set the scan status for the file. Reason: Stale NFS file handle'?
- What is the Nblade Credential Cache?
- What is the NFS mount "noac" option?
- What is the ONTAP equivalent to cifs.client.dupdetection?
- What is the performance impact on NAS when using FPolicy in ONTAP?
- What is the performance impact when enabling SMB Signing?
- What is the recommended list of file extensions to block using Native Fpolicy to prevent ransomware?
- What is the recommended Oplock configuration
- What is the recommended value for ONTAP Vscan offbox timeout settings?
- What is the relation between firewall policy and service-policy
- What is the right format of '-paths-to-exclude' in 'vserver vscan onaccess-policy' command?
- What is the use of TCP port 985 in ONTAP 9?
- What Kerberos Encryption Types are supported with NAS protocols for ONTAP 9
- What kind of management activies are audited by ONTAP and available in AutoSupport logs?
- What kind of users can access data in ONTAP 9 using CIFS?
- What license is required when enabling Autonomous Ransomware Protection(ARP)
- What makes up a NFSv4 ACL
- What NAS Protocols does Cohesity support for ONTAP
- What need to change on the ONTAP Antivirus Connector, After changing the domain user account/password in Active Directory?
- What needs to be configured on ONTAP for Windows Client NFS access?
- What NetApp documentation is available for Trendmicro Intelliscan software
- What other options are there to apply NTFS ACLs if Windows Explorer is too slow?
- What permissions does a domain user required to create the SMB server on the SVM
- What privilege is required for a user registered in scanner-pool?
- What TCP ports does ONTAP FlexCache use between cache and origin?
- What UNIX permissions are required to delete a file?
- What version of SMB that will be used for communication between ONTAP and a DC?
- What will be the impact of changing LDAP port from 389 to 636 for AD-LDAP server connections
- What would be the impact on CIFS server when changing Active Directory ?
- What's actual path of user home directory
- What's the impact of using 'SYSTEM' authentication of a service when accessing SMB Shares
- What's the max limit of characters that can be defined in "clientmatch" field of "export-policy rule"?
- What's the naming convention specification of the part displayed with 10 digits in the vserver audit log file name?
- What's the share-level permission
- What's the umask for a CIFS user creating a file on a UNIX-style security share?
- When configuring replication LIF on another port its not working
- When copying a file to the NFS share it delayes to be displayed in the share
- When creating CIFS Server we receive error "Server is unwilling to perform" in ONTAP
- When creating new volumes or FlexClones, the mounts are not immediately available
- When DNS is unavailable, how long NFS client will be able to access storage
- When does an ONTAP CIFS server retrieve its Kerberos credentials from the KDC?
- When migrating data, file names conflict with 8.3 file names and some files get overwritten in ONTAP
- When On prem ONTAP is selected as SMB source in Cloud Sync, not all volumes are visible
- When should ACLs be created or modified from the NetApp CLI?
- When using cname for a cifs server, does the SPN also need to be registered?
- When using NFSv4 sometimes the ls command returns the wrong user and group
- When will nobody show as owner of NFS mounts?
- Where are the vscan privileged user credentials stored?
- Where can I see what client IP addresses were denied by export policies?
- Where does the password for the Vscan service account need to be updated?
- Where is Kerberos authentication configured for CIFS Shares?
- Which "Inheritance flags" can be set using "file-directory ntfs" command?
- Which LIF of an SVM will be used for VSCAN?
- Which Network File System (NFS) TCP and NFS UDP ports are used on the storage system?
- Which ONTAP version allows to enable LDAP channel binding?
- Which permissions a file restored using Windows will have ?
- Which ports are needed to run Virus Scan / FPolicy through a firewall?
- Which ports are needed to run Vscan through a firewall?
- Which ports need to be open for CIFS between ONTAP systems and Domain Controllers?
- Which protocol is used for communication by NetApp AV-connector?
- While FIPS is enabled on Data ONTAP 9.0+, users are unable to SSH into the cluster or node
- Why a backup takes the full provisioned size of the thin disk rather than used size ?
- Why a volume shows 10k IOPs but has no clients attached to it?
- Why after securing LDAP communication with LDAPS there are still connections with LDAP server on port 389?
- Why are all layer 2 packets flagged with COS4?
- Why are CIFS sessions not signed when encryption and SMB signing are both enabled on the SVM?
- Why are CIFS share permissions different between File Explorer and System Manager?
- Why are file timestamps changing after data migration?
- Why are OPLOCKS present after OPLOCKS have been disabled on the SVM?
- Why are ports auto-assigned to a Broadcast Domain?
- Why are the volume and qtree report values inconsistent?
- Why are there access denied errors in a security/packet trace for successful access?
- Why can authentication show-creds not be used for NFS user credentials?
- Why CRC errors on the storage controller may follow the placement of a lif?
- Why do all ports in storage ARP tables show the same identical MAC address
- Why do CIFS share ACLs disappear?
- Why do I have to manually refresh my folder when files change?
- Why do I see "Error: command failed: Audit Log Redirect configuration not available." when attempting to enable Audit Log redirection
- Why do I see the error noSmbVerNegotiated in the log?
- Why do network speed mismatches create problems with shallow buffered switches?
- Why do NFSv4 and NFSv4.1 I/O stop while a takeover/giveback, an aggregate relocation occur, or a VFiler Migration?
- Why does "nfs connected-clients show" list sessions from non-connected clients?
- Why does "vserver cifs session file show" not display all open files?
- Why does “vserver cifs session show” show sessions with long-running idle time?
- Why does a file instantly move within the server when it is dragged and dropped onto a Quick Access shortcut in Windows Explorer
- Why does a lot of small files take longer to transfer than few large files?
- Why does a UNIX user sometimes map to default Windows user?
- Why does a VLAN port show an MTU of 1496 when the broadcast-domain is set to another value?
- Why does adding NTFS SACL replace the DACL entries?
- Why does chmod not take effect for non-superusers after enabling restrict-chmod-acl?
- Why does EMS report "vifmgr.cluscheck.crcerrors" without high-number of total errors
- Why does modifying the volume option "-snapdir-access" require a re-mount?
- Why does non-mandatory FPolicy have latency when EAGAIN is logged?
- Why does ONTAP initiate a connection on a port other than 4045 for for NLM callbacks?
- Why does packet loss impact performance?
- Why does the command statistics top file show deleted inodes
- Why does the first constituent of the flexgroup volume have a junction path after upgrade
- Why does the ifgrp show more traffic leaving one interface than the other?
- Why does the throughput of NIC exceed the theoretical value in System Manager
- Why does throughput not exceed ~125 MBps on a 1 Gbps port?
- Why does Windows security tab display error "The requested security information is either unavailable or can't be displayed"?
- Why doesn't DataStore used space decrease after deleting files from Guest OS?
- Why doesn't the command "network port modify -up-admin false" switch off SFP/laser?
- Why EICAR file is not removed every time during the test?
- Why event 4565 appears in CIFS Auditing when SACL is not configured for Write/Read ?
- Why file transfer speeds of small vs large files could be different
- Why is access "all" needed for API=/api/svm/svms for API=/api/protocols/file-security/permissions (access=all)?
- Why is ARP not being sent from the expected LIF?
- Why is copy-offload folder not displayed in CIFS share?
- Why is Ctime not updated when copying a file from a Windows client to a CIFS share?
- Why is DACL Auto Inherit Required bit not set after migrating files to ONTAP?
- Why is file transfer speed from CIFS share slow over VPN or WAN?
- Why is first a SMB2 Authentication request with an error ACK'ed via TCP?
- Why is Kerberos authentication working when machine account is deleted?
- Why is kerberos not being used when connecting to a CIFS server by IP?
- Why is my NFS user able to access NTFS data after disabling user in AD?
- Why is ONTAP giving me different search results on different clusters?
- Why is there a difference between the number of files confirmed by Qtree properties and quota report?
- Why is there a secd.ldap.noServers EMS when LDAP is not configured?
- Why is Windows Explorer reporting incorrect values in properties pane?
- Why isn't the .snapshot directory visible in an 'ls -al' output on an NFS client?
- Why it is not possible to use Windows File Server Resource Manager (FSRM)?
- Why may NFSv3 perform better than NFSv4.x?
- Why NTFS Audit is missing information?
- Why ODX not working?
- Why quota rule does not show user quota information?
- Why volumes have indirect NFS requests from clients?
- Why would ONTAP initiate a connection to a UNIX client?
- Why is 'vifmgr.reach.noreach' reported in EMS?
- Widelink configuration not transitioned with 7mtt
- Widelinks are only accessible on the second attempt
- Will AES encryption be replicated on DR server -identity-preserve false option?
- Will disabling a vserver SSL certificate impact CIFS shares in ONTAP 9
- Will disabling oplocks disrupt existing locks?
- Will disallowed file extensions in native Fpolicy scope be deleted?
- Will enabling NFSv4 be disruptive to existing NFSv3 connections?
- Will enabling ONTAP File System Analytics consume storage space on the volume ?
- Will Network File System (NFS) versions 2, 3 and 4 work through a firewall?
- Will ONTAP upgrade disable the manually enabled SMB1 option
- Windows "Previous Versions" tab fails to enumerate some snapshots for SMB/CIFS shares
- Windows application hangs, when accessing file on cifs share
- Windows cannot access CIFS share due to network issue
- Windows cannot access share using NFS with error code 0x80070079
- Windows CIFS share that maps the same account access allowed while NFS access denied
- Windows client fails to cut a file from one folder on a CIFS share and paste in another folder on the same share
- Windows client may fail with error suggesting part of the file is locked or may open with no lock in FlexGroup (FlexCache Volumes)
- Windows client unable to access an NTFS resource when UID is not configured in ONTAP
- Windows client unable to read files on UNIX security style volume
- Windows clients using SMB 2.x can still access ~snapshot directory even with "showsnapshot" share property disabled
- Windows DC reports event ID 3039 with "Try Channel Binding For AD LDAP Connections" enabled
- Windows domain user is unable to create any SMB session
- Windows domain users unable to write in a CIFS directory created by the SAMBA client
- Windows end users get slow performance in access to Citrix Virtual Apps after the upgrade of Cylance Antivirus
- Windows error 0x8007054F in Flexcache volume
- Windows Error 0x8007054F when copying or opening a file
- Windows Explorer hangs for a couple of seconds while opening or renaming the folders on FlexGroup CIFS share in ONTAP 9.4+
- Windows Explorer shows an X icon on a directory due to offline DOS Attributes
- Windows file explorer takes up to 5 minutes to display folder properties on a CIFS share when LSARPC is not allowed in the network
- Windows File Witness client fails over to next host
- Windows NFS client receives "Access is denied" when accessing UNC paths
- Windows NFS client rename issue
- Windows NFS clients fail to mount volumes from ONTAP with Network Error - 53
- Windows NT clients cannot access CIFS shares
- Windows protected users cannot access CIFS shares
- Windows Server 2008 is unable to connect to share
- Windows SMB client takes long to report that cifs share does not exist
- Windows SMB clients unable to rename files via File Explorer
- Windows Task Scheduler Job fails - shows Null permissions
- Windows to Unix Name mapping incorrect when using IP Qualifier
- Windows to UNIX name-mapping fails with UNIX case-sensitive username
- Windows to Unix same name mapping not working as expected
- Windows user account gets repeatedly locked with Netlogon error: Returns 0xC0000234
- Windows user from a child domain can't connect to the cifs share from a trusted domain over a two-way trust
- Windows user maps to undesired UID
- Windows user unable to access CIFS share and access is denied error
- Windows users are mapped to pcuser instead of the appropriate UNIX user
- Windows users unable to access files on a UNIX volume due to missing name mapping
- Windows users unable to access folders within unix path post adding new users in AD
- Windows web application gets access denied while accessing CIFS share under UNIX volume
- WINS conflict error Nblade.cifsNbNameConflict:error noticed in ems logs
- Without qtree, can quota directory be applied to a directory?
- Witness protocol connection fails if the client does not use NTLMv2
- Witness protocol related errors for Windows 2016 clients
- Working with one-way Active Directory trust relationships and ONTAP
- Write EAGAIN errors found in EMS and Fpolicy.log
- Writes fail, error 0x8007054F: An internal error occured on CIFS shares due to Varonis Fpolicy TCP Zero Windows Conditions
- Writing a large file to a FlexCache volume fails due to no space
X
- XCP AttributeError: 'NoneType' object has no attribute 'desc'
- XCP command error due to expired or missing license
- XCP copy and resume fails with Connection reset by peer error
- XCP copy fails due to "batch 285: 'NoneType' object has no attribute 'needCommit'"
- XCP copy runs for a long time without any errors
- XCP destination side appears a temporary directory '_XCP_tmp' and it's not removed after XCP sync task
- XCP did not copy special characters from source directory
- XCP migration fails with UnicodeEncodeError when filename contains 4 bytes character
- XCP migration of VMWare Data Store continually fails
- XCP NFS fails to copy NFS4 ACL when both the source and destination are not UTF-8 encoded
- XCP SMB copy fails with A device attached to the system is not functioning error
- XCP sync failed when a path at source is deleted
- XCP sync task gets stuck when file or foldernames with prefix "UNC" present at source
- XCP verify expands same sub-folder again and again
- XCP verify will show DACL inheritance differences
- XCP warming task is not correctly populating data in the FlexCache volume
Z