Netapp community,

My Name Heru , beginner storage engineer.

Can I Ask is that Netapp FAS 8020 ONTAP version 9.8P18 can support direct connection point to point topology Fibre Channel HBA with server running Redhat Linux Ent 10 ? Thank you for your answers.

I followed the .\backupSharesAcls.ps and .\restoreSharesAcls.ps1 script to backup the share and ACL permissions from source volume and restore it on destination volume.

Does the restore snapmirror destination should also have same SVM name as in production ?

I created same volume name and namespace in destination but SVM name is different . Getting error record doesnt match.

.\restoreSharesAcls.ps1 -server <clus_mgmt> -user <uname> -password <> -vserver <destination-vname> -shareFile C:\share.xml -aclFile C:\acl.xml -spit less

Please advise on this.

I have a test lab with ONTAP simulator at 9.13.1 version, and Microsoft published windows server 2025 last month, so I want test ONTAP with new OS.

1.Windows server 2025 is installed and active directory service is installed.

2. During the cifs create procedure, it shows an error: Machine account creation procedure failed.

3. From wireshark capture, it shows kpasswd replyed an error.

CIFS LIF IP not reachable on when hosted on port Type VLAN ( a0a-200, a0a-150 etc..)

But works fine moved to port type if-grp (a0a) 

any further configuration needed on NetApp end?

We are using Cisco switches for the data 10Gbps connectivity.

We have both singlemode and multimode_lacp policies for two different clusters for ifgrp ;

but same errors on both setup.

Hello,

we trying to mount a NetApp CIFS share on SLES 11 with SMB 2.1 as follows:

Mount -v -o auto, username = xxxxxx, password = xxxxxx, workgroup = XXXXXX, uid = hostftp, gid = users, vers = 2.1, noserverino // <server> / <shared name> / <local_folder> / <local_subserver>

Mount and access work, but the mount seems to be done with SMB 1 only:

CLUSTER ::> vserver cifs sessionshow -vserver SVM_XXXXXXX -fields shares, windows-user, idle-time, session-id, address, protocol-version, user-type, files
Node vserver session-id connection-id address windows-user shares files idle-time protocol-version user-type
-------- ------------ ------------------------------------------------ ------- --------------- ------ ----- --------- -------- -------- -----------
NodeXX SVM_XXXXXXX 1 932666088 NNN.18.121.131 DOMAIN \ hostftp 2 0 1m 29s SMB1 domain-user

:

NodeXX SVM_XXXXXXX 12261331460493166545 932952775 NNN.NN.1.187 DOMAIN \ VNNNN1 2 3 21m 47s SMB2_1 domain-user
NodeXX SVM_XXXXXXX 12261331460493203961 932990989 NNN.NN.187.108 DOMAIN \ VNNNN2 1 9 5s SMB2_1 domain-user
NodeXX SVM_XXXXXXX 12261331460493216289 933003440 NNN.NN.84.10 DOMAIN \ vNNNN3 1 9 1m 56s SMB2_1 domain-user
:

Mounting CIFS-shares using SMB 2.1  works well on Windows-Clients (see above - windows-user: DOMAIN \ VNNNNx )

(System FAS8040 running ONTAP 9.1P3)


Any idea?
Thanks and best regards

Michael

We upgraded our 2 Clusters from ONTAP 8.3.2 to 9.1

Since upgrading we have noticed a change when trying to access a CIFS share when the user connecting is logged onto a different AD domain to the SVM.

The end user no longer get challenged for a user ID and password. Instead because the user ID is the same it tries to use the users credentials including password to connect and after a while the end user gets the following errors

System error 64 has occurred.

The specified network name is no longer available.

If the end user keeps trying to access it, their account on the AD domain that the SVM is on will become locked.

However if they specify their credentials including password from the command line, i.e. net use \\CIFS_SVM\share_name /user:{user_id} {password}

then it works and they can then access the share. They can also do this from the GUI and it also works.

so we have a workaround, but just wondered why the difference between 8.3.2 and 9.1 is it a bug or intentional? 

Hi All,

vserver few years ago we migrated Z.com to X.com. 

Now we did migration x.com to y.com. Most of the share security groups back to z.com.
verified Security group also migrated same on active directory end. Same security groups are created on y.com( new domain )

we just want know, how the acls getting, from y.com for z.com ? how to check it from storage end  ? how it back to old domain ?

is there any way to NFTS level permission to share level permission  ?

For a project I needed to convert Ontap Audit Log XML files to CSV. As I couldn't find any existing solutions, I wrote the following small PowerShell Cmdlet.

I'd be glad to receive feedback or suggestions for improvements.

An example XML audit event log is attached and the resulting CSV file.

Just paste the Cmdlet code below in PowerShell and then use the following command to convert an XML file (replace the filepath with the path to your file)

Convert-EventXmlToCsv -Path "c:\tmp\audit_svm_trinidad_nas_D2017-07-26-T06-54-13_0000000000.xml"

Cmdlet Code:

<#
.SYNOPSIS
Converts NetApp XML Audit Event Log Files to CSV
.DESCRIPTION 
Converts NetApp XML Audit Event Log Files to CSV
.EXAMPLE
Convert-EventXmlToCsv -Path "c:\tmp\audit_svm_trinidad_nas_D2017-07-26-T06-54-13_0000000000.xml"
#>
function Convert-EventXmlToCsv {
    [CmdletBinding()]
    param(
        [Parameter(Mandatory = $true)][System.IO.FileInfo]$Path,
        [Parameter(Mandatory = $false)][System.IO.FileInfo]$OutputPath
         )

        if (!$OutputPath) {
            $OutputPath = Join-Path $Path.Directory.FullName "$($Path.BaseName).csv" 
        }

        Write-Host "Importing XML from $Path"
        $EventXml=[xml](Get-Content -Path $Path)

        $Headers = @()

        $EventCount = $EventXml.events.event.count
        $Counter = 1

        $Events = foreach ($Event in $EventXml.events.event) {
            Write-Progress -Activity "Converting XML to CSV" -PercentComplete ([int]($Counter/$EventCount*100))
            $Counter++
            $TimeCreated = $event.system.timecreated.systemtime
            $ProviderName = $event.system.provider.name
            $ProviderGuid = $event.system.provider.guid
            $Output = $event.system | ConvertTo-Csv | ConvertFrom-Csv
            $Output.timecreated = [DateTime]$TimeCreated
            $Output.Provider = $ProviderName
            $Output | Add-Member -MemberType NoteProperty -Name ProviderGuid -Value $ProviderGuid
            foreach ($AttributeName in $event.EventData.Data.Name) {
                $Output | Add-Member -MemberType NoteProperty -Name $AttributeName -Value ($event.eventdata.data | ? { $_.Name -eq $AttributeName } | % { $_."#text" })
            }
            $Headers += $Output.PSObject.properties | ? { $_.MemberType -eq "NoteProperty" } | % { $_.Name }
            $Headers = $Headers | Select-Object -Unique
            Write-Output $Output
        } 

        Write-Progress -Activity "Converting XML to CSV completed" -Completed

        Write-Host "Writing CSV"
        $Events | Select-Object -Property $Headers | Export-Csv -NoTypeInformation -Path $OutputPath -Delimiter ";"
        Write-Host "Output written to $OutputPath"
} 

Hi

I have a question concerning SMB file audit delete events. We see two different types of events:

EVENT_ID: 4659  "Open Object with the intent to delete"

EVENT_ID: 4660  "Delete Object"

When we delete a file, event 4659 is always generated, but 4660 not in every case. 4660 is created when deleting MS-Office .tmp files for example.

We must to make sure to catch the correct event for the case: "user deletes a file" every time this happens. Can anyone tell my, how to do this?

thx and regards

sandsturm

Hello All,

I have 2 filers in HA pair Filer-1 and Filer-2. On Filer-1, i did cf takeover and it tookover Filer-2 fine. Now when I am trying to do cf giveback on Filer-1, it gives error:

Filer-1(takeover)> [Filer-1:cf.misc.operatorGiveback:info]: Failover monitor: giveback initiated by operator 

Wed Aug 28 17:47:38 AST [Filer-2:cifs.terminationFailed:error]: CIFS: CIFS did not shut down: There are CIFS users with open files on the partner node.  All CIFS sessions for the partner node must be closed prior to giveback. 

Wed Aug 28 17:47:38 AST [Filer-1:cf.rsrc.givebackVeto:error]: Failover monitor: cifs: giveback cancelled due to active state 

Wed Aug 28 17:47:38 AST [Filer-1:cf.fm.givebackCancelled:warning]: Failover monitor: giveback cancelled

I did cifs terminate on filer-1 and it stopped CIFS service but cf giveback doesn't work at all. Same error as above. That is because CIFS is running on Filer-2. How can I stop that? Shell is not supported on takeover partner!

Should I do Filer-1 (takeover)> cifs giveback -f

If i use cifs giveback -f, will there be any risk?

I would really appreciate any response.

Thanks - AG

Hi 

Here is a thing that our customer using NFSv3 by both linux clients and Win clients, and the chinese characters in wrong and messy show in screenshot. but if I create files by NFSv3 in linux clients and SMB in Win clients(the same client using NFSv3 both), the chinese characters is right. how to deal with this issue.

My POC workplace is FAS2720 ontap 9.14 rc1 to simulation, one Centos7 client, one win 2012 client.

A volume would have to be exported from a filer, and then be mounted on a Unix (Linux) server. However, if we install a service for NFS on a Window server, it could be mounted on Windows as well.

My question is, is there any way similar to mount NFS share on window, I can mount a CIFS share on a Linux server? If there is, how do I do that? any documented steps?

Thanks in advance for your help!

Click Here to post your questions

Ask the Expert Session – CIFS 

Grab the opportunity to learn from our Expert and bridge your Knowledge gap. 

Our CIFS Expert will answer your questions and help you solve your issues.

Topic: Authentication & Authorization in CIFS

Date: July 16 – 30

Expert: Vijay Ramamurthy

Vjiay is an Escalation Engineer with the NAS team.

His 10 years of experience in Information Technology has been with Data Storage.

He is with NetApp for 3 years and has strong domain knowledge in CIFS, NFS, and TCP/IP networking focus areas.

Note:

• Ask questions only related to the above topic.
• You can expect a response to your questions within 24 hours.

Hi,

I want to configure CIFS on my Netapp. The Netapp cluster has for DNS the Google's DNS (8.8.8.8) and I haven't an Active Directory. I want my client which are in WORKGROUP can connect to a CIFS share on the cluster. Is an Active Directory required ?

Regards.

Hi,

i use PowerShell Library NetApp.ONTAP 9.11.1.2208 and im succesfull connected.

Now i want to create a share and always got this error:

Add-NcCifsShare -Name Scan  -Path vol_Daten/Scan

error is: 

Add-NcCifsShare : HomeDirectory parameter specified, which is not supported for ONTAPI call

I try many other options but nothing works. My target is 9.7P19

Any ideas? Thanks in advance

Hello everyone,

a customer has been facing an issue with file-locks (mainly Excel) since migrating a 7-mode sytem into a cDOT SVM.

The cDOT system is a 2-node AFF-A250 HA-Pair and the SVM is used for user and group shares.

A recent update from 9.9.1P5 to 9.11.1P3 did not help with the issue.

Fairly frequently, users trying to open files are denied access with the reply, that the file is already opened by another user.
That is the point where the issue takes a couple of different shapes:
-opening user is reported as the user locking the file
-another user is reported to have the file open
-one user is reported to have the file open but a third user actually has the file open
-a user, whose AD account is deactivated, is reported to have the file open

Unfortunately so far, it was not possible to provoke or reproduce the issue, so currently we don't have any real clue as to what is causing it.

Has anyone encountered this strange behaviour as well or has an idea how to fix it?

Any advice is welcome!

Hello,

I'm using 'Tool to convert Audit Logs from XML to EVTX Format' version v1.0, and with XML file - attached (or any other, containing any kind of Windows Event Log in XML) - I'm getting the 'Conversion failed' error in GUI and 'Conversion failed with error code C00CEE61' in console.

An ~69kB .evtx file is generated everytime, but it does not contain correct/complete output.

What does it mean? Is there any way to fix it? Am I doing something wrong?

Tool to convert Audit Logs from XML to EVTX Format - v1.0

Windows 7 Enterprise - SP1

Thank you in advance,

Jan

Hi Community Team,

What is the general different between the data-core and data-nfs or other services  under service-policy. When creating interfaces we can assign the service-policy and define the allowed services and under which we see data-core and other common service like nfs,iscsi,smb in general. Want to know what exactly does data-core comes under?

LIFs and service policies in ONTAP 9.6 and later (netapp.com)

Regards,

Krishgudd

Hello,

On the old 7-mode FAS 2240, when creating a CIFS shared folder, I removed the default share 'Everyone' and added a specific user or group with some share rights. I also add that same user to Security Rights on the same folder with full rights.

A user with granted rights normally has access to the share folder while other users who do not have any access rights receive the message 'you do not have permission to access \\ folder\' which is acceptable to me.
I do not want any prompt for user name and password for users without any share and security rights.

With the new ontap 9 FAS 2750 cluster system, when creating a shared folder, I do the same, first remove the default share 'Everyone' and assign share and security rights to one specific user.
The problem is that other users who do not have any share and security rights when trying to access get a prompt for user name and password.

I noticed when I add again in the share rights 'Everyone' / read then other users without rights do not have a credential prompt?

Now I have the option to leave 'Everyone' / change rights on the share rights and then continue to deal with security rights, but in the old 7-mode I could do without adding 'Everyone' rights?

I don't want other users without any share and security rights to be asked for a username and password when trying to access a shared folder and i don't want add 'Everyone' rights?

The environment is Microsoft AD, SVM for CIFS is associated with the AD domain and we do not have any other access issues.

Hi folks,

We have an extensive number of shares (over 1000 amongst many 1000s of shares) which have everyone file permissions, does anyone have any advice on how to identify these shares and which users are accessing the shares? Will any of the available NetApp tools provide this information?

Hi all,

I would like to know if there is a way to do this :

- Add many IP adresses to a filer. Each IP from different VLANs

- Create cifs shares or NFS exports only accessible  from one of theses adresses.

My idea is to

- Create a rule on the firewall to allow trafic between as set of Windows or Linux servers to oneof the IP adresses of the filer

- Allow data acces from this IP adress to a set of server on the filer.

I take a look at DOT 9 documentation and it seems an export policy  may restrict access to qtree to a set of servers.

But I did not see that the IP used by the filer can be set too in a rule.

The only alternative should to create a SVM for each IP, but it's not very convenient

Thanks

MLD

Hello everyone,

i have migrated Fileserver from FAS8020 to  FAS8300 . for enabling  File audit in AD Audit plus, the object is not listed.

as checked with AD Audit plus team,  they have concluded  Operating version in AD Object is shows as Windows 10.

can i change OS information in AD or it will cause an issue.

i don't have this issue with FAS8020 or FAS2240.  

I am getting an odd error when attempting to create a CIFS share (ONTAP 9.8P3) on a RO DP volume.  Here is the command/error message:

xxx-clst-01::> cifs share create -vserver xxx-prod-nas01 -share-name VARONIS_jobs$ -path /tg/jobs

Error: command failed: The specified path "/tg/jobs" cannot be used. Reason: This is not a valid file-type for CIFS share.

When looking at the path properties I see this:

xxx-clst-01::> vserver security file-directory show -path /tg/jobs -vserver xxx-prod-nas01

                Vserver: xxx-prod-nas01

              File Path: /tg/jobs

      File Inode Number: 97

         Security Style: unix

        Effective Style: unix

         DOS Attributes: 10

DOS Attributes in Text: ----D---

Expanded Dos Attributes: -

           UNIX User Id: 0

          UNIX Group Id: 0

         UNIX Mode Bits: 755

UNIX Mode Bits in Text: rwxr-xr-x

                   ACLs: -

I can create the CIFS share using -path /tg without any issues.

Any clues as to why a CIFS share can’t be created at path /tg/jobs?

Ran into a strange problem here, hoping someone can point me in the right direction.  We have two Windows 2008 R2 servers that are unable to access a UNC path to an SVM when using the DNS name of the lif. The connection works fine if connecting to the ip address. From these windows servers I can connect to shares by name on other NAS products, and random Windows clients.

From these two servers

\\svm\share$ fails

\\svm.our.dom.com\share$ fails

\\10.1.1.1\share$ works (assume 10.1.1.1 is address of lif)

\\othernas\share$ works

\\windowsServer\share$ works

From other Windows clients \\svm\share$ works

I checked that the Windows firewall is disabled, credentials cache is empty, time is in sync with AD. Flushed the DNS cache too. 

So it appears I only have a problem connecting to Netapp CIFS share by name from these two servers. Connecting by ip works, so doesn't look like firewall is blocking me. 

I know there is a difference in authentication when connecting my address rather than by name, but the details are not clear to me. Something about NTLM vs Kerberos.

Thanks

-Rowl

Hello,

I have recently setup a CIFS Server by following this guide https://library.netapp.com/ecm/ecm_get_file/ECMLP2494081

Symptoms:

- I can access the CIFS endpoint from windows explorer by typing the IP: \\10.111.112.7 works.

- I cannot access the CIFS endpoint from Windows Explorer by specifying the NetBios name: \\ServerS7 doesn't work.

- I cannot resolve the NetBios name from a windows workstation: nbtstat -a ServerS7 doesn't find anything

- in the OnTap CLI, 

::> vserver cifs nbtstat
This table is currently empty.

To me it looks as if the NetBios/WINS service on the Netapp that should respond to NetBios queries is not running/doesn't accept requests. I've tried to recreate the CIFS Server a few times now (by following the previously mentioned manual) but that doesn't help anything.

Here are some more configuration infos:

::> vserver show -vserver svm_cifs

                                    Vserver: svm_cifs
                               Vserver Type: data
                            Vserver Subtype: default
                               Vserver UUID: 15dac770-ff50-11e6-9afb-00a098c6d0c7
                                Root Volume: svm_cifs_root
                                  Aggregate: AGGR_01_Node1_Links_SAS
                                 NIS Domain: -
                 Root Volume Security Style: ntfs
                                LDAP Client: -
               Default Volume Language Code: C.UTF-8
                            Snapshot Policy: default
                                    Comment:
                               Quota Policy: default
                List of Aggregates Assigned: -
 Limit on Maximum Number of Volumes allowed: unlimited
                        Vserver Admin State: running
                  Vserver Operational State: running
   Vserver Operational State Stopped Reason: -
                          Allowed Protocols: cifs
                       Disallowed Protocols: nfs, fcp, iscsi, ndmp
            Is Vserver with Infinite Volume: false
                           QoS Policy Group: -
                        Caching Policy Name: -
                                Config Lock: false
                               IPspace Name: Default
                         Foreground Process: -

::> vserver cifs show -vserver svm_cifs

 Vserver: svm_cifs
 CIFS Server NetBIOS Name: SERVERS7
 NetBIOS Domain/Workgroup Name: xxx
 Fully Qualified Domain Name: xxx.LOCAL
 Organizational Unit: CN=Computers
Default Site Used by LIFs Without Site Membership:
 Workgroup Name: -
 Authentication Style: domain
 CIFS Server Administrative Status: up
 CIFS Server Description:
 List of NetBIOS Aliases: -

After spending more than a day on this issue, I've run out of ideas on how to debug this.

Do you have an idea on what could be the problem?

Raffael

Hello,

after the ONTAP update from 9.7P5 to 9.7P11 on 19.02.2021, it happens with us on a Linux FTP server that Windows mounts can no longer be created or break again after a short time - then they can not be remounted. There are always different shares.

Volumes/shares are definitely present and could also be mapped under Windows. - Errors on the NetApp cluster are not present in the event log.

Before the ONTAP update everything worked fine.

The affected Linux-Server  - a virtual machine - uses SLES 12 SP 5 (SUSE Linux Enterprise Server 12 (x86_64)).

Here's an example:

ftpserv1:~ # mount -t cifs -o vers=3.0,username=HERE_WAS_THE_USERNAME_WRITTEN,password=HERE_WAS_THE_PWD_WRITTEN //FSDXXXXX/Produktion/XFirm/XFirmV/Program_Data/FBXX-FBYY-Kontoauszuege/sic /ftptrans/StAYY/XFIRM-KONTOAUSZUEGE

mount error(2): No such file or directory

Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) and kernel log messages (dmesg)

dmesg-Message

[11472.498939] CIFS: Attempting to mount //FSDEXXXXX/Produktion/XFirm/XFirmV/Program_Data/FBXX-FBYY-Kontoauszuege/sic

[11472.518538] CIFS VFS: cifs_mount failed w/return code = -2

/var/log/messages

2021-02-22T13:52:27.182532+01:00 ftpserv1 kernel: [11472.498939] CIFS: Attempting to mount //FSDXXXXX/Produktion/XFirm/XFirmV/Program_Data/FBXX-FBYY-Kontoauszuege/sic

2021-02-22T13:52:27.202512+01:00 ftpserv1 kernel: [11472.518538] CIFS VFS: cifs_mount failed w/return code = -2

However, it is possible that the above mount will be successful an hour later.

Any idea?

Thank You. Best Regards

Michael

IHAC running ONTAP 9.6p3.  They're complaining of CIFS performance, and managing the SVM (adding domain users into local groups, etc) timeout, and users have problems accessing shares.  I verified that the time is in sync with the DCs, and the SVM can ping the domain name.

When I performed a dns check, I have 2 different experiences.  The DNS server is also a domain controller - 192.168.1x.xx5
That DC hosts 2 different domains:

bad.domain.com (this is the customer's AD domain)

good.domain.com (this looks like an administrative domain that was created in AD)

On the prod SVM (as well as a test SVM), I configured DNS:
::> vserver services dns create -vserver svm1 -domains bad.domain.com -name-servers 192.168.1x.xx5, 100.100.x.xx1

When I check the domain, the test sometimes times out, or responds VERY slowly:

ntap01::*> vserver services dns check -vserver svm1 -instance

Vserver: svm1
Name Server: 192.168.1x.xx5
Name Server Status: up
Status Details: Response time (msec): 3623

Vserver: svm1
Name Server: 100.100.x.xx1
Name Server Status: up
Status Details: Response time (msec): 2743
2 entries were displayed.

But when I change the domain (not the CIFS domain, but the domain that the SVM has configured for DNS settings), the response adequate:

::> vserver services dns modify -vserver svm1 -domains good.domain.com

ntap01::*> vserver services dns check -vserver svm1 -instance

Vserver: svm1
Name Server: 192.168.1x.xx5
Name Server Status: up
Status Details: Response time (msec): 15

Vserver: svm1
Name Server: 100.100.x.xx1
Name Server Status: up
Status Details: Response time (msec): 13
2 entries were displayed.

Both domains (good.domain.com and bad.domain.com) are zones on the same DNS server.  I can reproduce this problem with the prod SVM that is having CIFS problems.  If I create a new nfs-only SVM, I get the same issues even though the test SVM is not part of an AD domin.

The reason I'm putting stock into this test is because vserver cifs check doesn't bode well (the below output is a re-enactment, so some of the responses have been manually modified to simulate the actual response😞

::> vserver cifs check -vserver svm1 -instance

Vserver: svm1
Node: ntap01-01
CIFS NetBIOS Name: SVM1
CIFS Server Status: Running
CIFS Server Site:
Domain Controller Name: bad.domain.com
Domain Controller IP Addr: 192.168.1x.xx5
Connectivity Status: down

Any ideas?  My initial thought was bad SRV records or something, but the rest of the computer accounts are OK.  There are no other NetApp instances on their AD domain.

Thanks for the help

Hi,  we are trying to eliminate use of NetBIOS in our customer DOMAINS. However, the wintel guys don't know if they use it.

After reading today I was under the impression if they use AD/DNS there is no need for NetBIOS?

If anyone can enlighten on this or have a good document that would be great - thanks.

Also I'm unclear as to what the below means: is-nbns-enabled" FALSE mean that it is off for both settings?

vserver               is-netbios-over-tcp-enabled           is-nbns-enabled

svm1                   true                                                            false                                              domain A

svm2                   false                                                           true                                               domain B

Hi all,

We need to migrate one “stand alone” SPE physical scanner from its current domain to the new domain; the SPE is scanning only one 7-mode NetApp over two IP.

We tried to do this 4 months ago unsuccessfully because once we had got the server migrated to the new domain the scanner got disconnected from the NetApp every time it got connected.

Please, check below the incoming logs from the NetApp:

Fri Mar 12 22:41:16 WET [netapp:vscan.server.connecting.successful:info]: CIFS: Vscan server \\SPEscanner registered with the filer successfully.

Fri Mar 12 22:41:16 WET [netapp:vscan.server.connecting.already:info]: CIFS: Vscan server x.x.x.x attempted to register but there is already a vscan server registered from that address.

Fri Mar 12 22:41:16 WET [netapp:cifs.smb2.client.signing:error]: Connection to server:\\SPEscannerfailed due to mismatch in signature.

Fri Mar 12 22:41:16 WET [netapp:cifs.server.errorMsg:error]: CIFS: Error for server \\SPEscanner: Error in session setup response STATUS_ACCESS_DENIED

It is as if there is something cached in the netapp and it does not like that the scanner has the same name/ip as in the old domain.

After this errors, we decided to rollback and migrate the scanner to its original domain, but it was still failing for 3 hours and then it started to work “magically”.

Sat Mar 13 02:52:23 WET [netapp:vscan.server.connecting.successful:info]: CIFS: Vscan server \\SPEscannerregistered with the filer successfully.
Sat Mar 13 02:59:55 WET [netapp:vscan.server.connecting.disconnect:info]: CIFS: Vscan server \\SPEscannerderegistered and will be removed from the list of available vscan servers.
Sat Mar 13 02:59:55 WET [netapp:cifs.server.infoMsg:info]: CIFS: Warning for server \\SPEscanner : Connection terminated.
Sat Mar 13 02:59:55 WET [netapp:vscan.dropped.connection:warning]: CIFS: Virus scan server \\SPEscanner (x.x.x.x) has disconnected from the filer.
Sat Mar 13 03:02:01 WET [netapp:vscan.server.connecting.successful:info]: CIFS: Vscan server \\SPEscanner registered with the filer successfully.
Sat Mar 13 03:02:01 WET [netapp:vscan.server.connecting.disconnect:info]: CIFS: Vscan server \\SPEscanner deregistered and will be removed from the list of available vscan servers.
Sat Mar 13 03:02:01 WET [netapp:cifs.server.infoMsg:info]: CIFS: Warning for server \\SPEscanner : Connection terminated.
Sat Mar 13 03:02:01 WET [netapp:vscan.dropped.connection:warning]: CIFS: Virus scan server \\SPEscanner (x.x.x.x) has disconnected from the filer.
Sat Mar 13 03:02:01 WET [netapp:vscan.server.connecting.successful:info]: CIFS: Vscan server \\SPEscanner registered with the filer successfully.
Sat Mar 13 03:13:01 WET [netapp:cifs.pipe.errorMsg:error]: CIFS: Error on named pipe with SPEscanner : Error connecting to server, open pipe failed
Sat Mar 13 03:13:01 WET [netapp:cifs.server.infoMsg:info]: CIFS: Warning for server \\SPEscanner : Connection terminated.
Sat Mar 13 03:13:01 WET [netapp:vscan.server.connectError:error]: CIFS: An attempt to connect to vscan server \\SPEscanner failed [0xc00000b5].
Sat Mar 13 03:13:01 WET [netapp:vscan.dropped.connection:warning]: CIFS: Virus scan server \\SPEscanner (x.x.x.x) has disconnected from the filer.
Sat Mar 13 03:13:08 WET [netapp:vscan.server.connecting.successful:info]: CIFS: Vscan server \\SPEscanner registered with the filer successfully.
Sat Mar 13 03:13:08 WET [netapp:vscan.server.connecting.disconnect:info]: CIFS: Vscan server \\SPEscanner deregistered and will be removed from the list of available vscan servers.
Sat Mar 13 03:13:08 WET [netapp:cifs.server.infoMsg:info]: CIFS: Warning for server \\SPEscanner : Connection terminated.
Sat Mar 13 03:13:08 WET [netapp:vscan.dropped.connection:warning]: CIFS: Virus scan server \\SPEscanner (x.x.x.x) has disconnected from the filer.
Sat Mar 13 03:13:08 WET [netapp:vscan.server.connecting.successful:info]: CIFS: Vscan server \\SPEscanner registered with the filer successfully.

Have you ever experienced this problem? Is there something cached in the NetApp that prevents the connection?

Thanks in advance!

Regards,

Diego Esteban

Endpoint Specialist