topic Re: secd.ldap.noServers in ONTAP Discussions

secd.ldap.noServers

sakumar821 — Wed, 04 Jun 2025 09:56:07 GMT

Hello,

We are in 9.8 P12 version, nowadays the EMS logs are flooded with below message. Vserver is completely serving NFS data and network team said everything fine related to packet transmission. NetApp support couldn't help much here, any suggestions please.

LDAP checks are always good..

"EMERGENCY secd.ldap.noServers: None of the LDAP servers configured for Vserver (xxxxxx) are currently accessible via the network for LDAP service type (Service: LDAP (Active Directory), Operation: SiteDiscovery)"

Re: secd.ldap.noServers

pedro_rocha — Mon, 31 Oct 2022 18:11:13 GMT

Him

There's this Bug bu I it should be fixed in your release: https://mysupport.netapp.com/site/bugs-online/product/ONTAP/BURT/1041972

Did you manage to verify if there is any periodicity? Like every "4 hours it shows up..."

Maybe these can help:

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/secd.ldap.noServers_messages_every_4_hours_during_domain_discovery

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/LDAP_servers_secured_with_LDAP_Signing_and%2F%2For_Sealing_receive_secd.conn.auth.failure%3Anotice

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/secd.ldap.query.timed.out_reported_during_SiteDiscovery

Re: secd.ldap.noServers

Mjizzini — Tue, 01 Nov 2022 03:32:28 GMT

The LDAP logs are related to LDAP Active Directory. They are related to your CIFS service.

Check your DC connections.

*>> diag secd connections show

*>> diag secd connections test

Re: secd.ldap.noServers

parisi — Tue, 01 Nov 2022 13:45:14 GMT

Also check to ensure you:

a) have or have not configured LDAP in nsswitch and are actually using/need to use LDAP for UNIX user and group lookups

b) have or have not configured an LDAP server (ldap client show)

If you've configured the SVM to use LDAP for UNIX lookups (different from AD for CIFS) and the server isn't configured to be a UNIX LDAP server, then you might see these.

Re: secd.ldap.noServers

sakumar821 — Wed, 02 Nov 2022 07:47:54 GMT

nswwitch is configured with LDAP and files and there are 2 LDAP servers available in LDAP config

Re: secd.ldap.noServers

sakumar821 — Wed, 02 Nov 2022 07:54:07 GMT

secd connections show says

(No connections active or currently cached), Timeouts: 0, Avg Wait: 0.00ms.

Re: secd.ldap.noServers

Ontapforrum — Wed, 02 Nov 2022 11:38:47 GMT

You mentioned - NetApp support couldn't help much here. Could you tell us if the case is still open/investigating? Or is it closed. If closed, what are their findings/closing comments.

Re: secd.ldap.noServers

parisi — Wed, 02 Nov 2022 18:09:29 GMT

Does AD actually have LDAP configured? Are you using it to query UNIX identities? Check TR-4835 for commands on how to query users/groups.

Re: secd.ldap.noServers

sakumar821 — Mon, 07 Nov 2022 10:36:53 GMT

There's a dedicated LDAP server and it works fine with 98% of the vservers in our environment. I'm trying to under TR-4835 and querying part before giving a try, will update here soon with the results..

Thank you