topic Could not access to netapp with Active directory account in ONTAP Discussions

Could not access to netapp with Active directory account

Miranto — Thu, 12 Dec 2024 08:55:11 GMT

Hello,

Without any changes to our infrastructure, we can no longer access our NetApp filer using the domain\username login. We receive the error: "Error: Authentication failed. Please verify Username and Password." Only the admin account can currently access the filer.

The output of the command vserver cifs domain discovered-servers show returns a status of undetermined and unavailable

Regards,

Re: Could not access to netapp with Active directory account

Sanaman — Fri, 13 Dec 2024 01:57:53 GMT

Is your AD reachable from Cluster management network? Check your routes if AD and cluster on different network and also if any firewall rules in place.

Re: Could not access to netapp with Active directory account

Miranto — Fri, 13 Dec 2024 06:14:55 GMT

Yes AD is reachable from cluster management network. They are on the same subnet so no firewall rules between. only the result of vserver cifs domain discovered-servers show -vserver show status undetermined and unavailable.

This issue happen with our all Netapp filer, so quite sure the issue is not from Netapp side.

What is the requirement that NetApp need from AD?

Re: Could not access to netapp with Active directory account

ChLokesh — Mon, 16 Dec 2024 04:36:15 GMT

Hello,

Check if the domain discovery mode has been set to ALL.

vserver cifs domain discovered-servers discovery-mode show -vserver vs1

Set it to mode “SITE” and see if it is fixing the issue.

vserver cifs domain discovered-servers discovery-mode modify -vserver vs1 -mode site

Or,

Add a few of the working DC’s as preferred DC.

vserver cifs domain preferred-dc add -vserver vs1 -domain example.com -preferred-dc 192.168.0.100,192.168.0.101

Finally, engage you DC team to why the DC’s are showing unavailable.

Hope this information is helpful.

Re: Could not access to netapp with Active directory account

Miranto — Wed, 18 Dec 2024 11:24:33 GMT

Hello,

apologize for my late response.

the discovery-mode is set to all in our case, and there is no default-site with the command vserver cifs show -fields default-site

i will follow your suggestion and give feedback

Regards,