Intermittent slowness or permission denied creating and copying files

Last updated
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 627

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nas

Last Updated:

Applies to

ONTAP 9
FPolicy
CIFS

Issue

Users are unable to copy or create files with permission denied error
Files can be read normally, but slowness is reported
An external FPolicy server is connected and appears healthy, but there were intermittent EMS errors logged similar to below

Fri Feb 12 XX:XX:XX EST [NODE02: fpolicy: fpolicy.server.maxPendingReq:info]: Maximum outstanding requests for the FPolicy server "192.168.1.100" has reached.

Fri Feb 12 XX:XX:XX EST [NODE02: fpolicy: fpolicy.server.disconnect:error]: Connection to the FPolicy server "192.168.1.100" is broken ( reason: "Error encountered while sending a message to FPolicy to FPolicy server." ).

Fri Feb 12 XX:XX:XX EST [NODE02: fpolicy: fpolicy.server.disconnect:error]: Connection to the FPolicy server "192.168.1.100" is broken ( reason: "Connection to FPolicy server is broken(EPIPE) received." ).

Security trace states access is denied by the FPolicy server

CLUSTER::> vserver security trace filter create -vserver vserver1 -client-ip <IP Address> -index 1

CLUSTER::> vserver security trace trace-result show -index 1

Vserver: vserver1

Node                     Index     Filter Details      Reason
----------------------- -------- --------------------- -------------------------
NODE02                  1        Security Style: -     Access is denied by the
                                                       01 FPolicy server or due to
                                                       mandatory attribute of the
                                                       FPolicy policy.
                                 Protocol: cifs
                                 Volume: -
                                 Share: share
                                 Path: -
                                 Win-User: DOMAIN\
                                 adminuser
                                 UNIX-User: root
                                 Session-ID: 75435293758455810