topic ad authentication with 8.3 problem in ONTAP Discussions

ad authentication with 8.3 problem

peter65 — Thu, 05 Jun 2025 04:10:08 GMT

Hi I have a 2 node cluster running one SVM with CIFS and NFS protocols with 8.3P1. I am trying to provide readonly access to a domain account however when the user logs in he will get an error displaying:

the server (displays cluster mgmt ip here) at remote administration API support requires a username and password.

He entered it as domainname\username and his password and still no go.

This is what I did on the storage side:

enabled the tunnel

then provided user with readonly access to cluster
security login create -vserver <name_of_cluster> -user domain\username -application http -authmethod domain -role readonly

I also performed the same command on the SVM as well and still no go. Any other hints tips or tricks?

Re: ad authentication with 8.3 problem

peter65 — Tue, 09 Jun 2015 01:19:40 GMT

Argh I forgot I have to add additional roles as well such as "ontapi". So I added http and ontapi with the role of 'readonly' and was able to login via the url. i tested by attempting to create and delet things and i got the message pop up saying i needed additional privs. so i suppose i solved it.. Unles sthere is something else I forgot..?

Re: ad authentication with 8.3 problem

hadrian — Wed, 10 Jun 2015 16:26:28 GMT

Hi Peter,

You are absolutely on the right track.

When you mentioned "login via the url" - what URL is this read-only user attempting to reach?

Hadrian

Re: ad authentication with 8.3 problem

peter65 — Fri, 12 Jun 2015 15:52:48 GMT

the url i am referring to is to the cluster_mgmt

http://cluster_name_here

https://cluster_name/sysmgr/SysMgr.html

Basically the cluster management lif