I have a Freeipa server, that also runs LDAP and DNS. Our Ontap uses the information to verify kerberos user credential.
It has worked well for me 3 month or so.
But today, all nfs clients using kerberos authentication denied to access to the ontap storage.
I found this error message that has raised since 1am today.
secd.ldap.noServers: None of the LDAP servers configured for Vserver (vs1) are currently accessible via the network for LDAP service type (Service: LDAP (NIS & Name Mapping), Operation: GetUserInfoFromName).
So I believe they are related. Unfortunately, I don't know why it happened and how can I recover from it.
From ssh shell in Ontap, I checked with this command.
ldap check -vserver {vserver}At the very first time it gave me an error. I ran 'ldapsearch' from our Freeipa server and it raise "GSSAPI" error.
I ran 'kinit admin' on the idm server. After that 'ldapsearch' successfully returns ldap information, and 'ldap check' returns normal status again.
But still got the above error once an hour. Still kerberos user cannot access.
Please give me some light. Thanks!
