Could not access to netapp with Active directory account

[Miranto]

Hello,

Without any changes to our infrastructure, we can no longer access our NetApp filer using the domain\username login. We receive the error: "Error: Authentication failed. Please verify Username and Password." Only the admin account can currently access the filer.

The output of the command vserver cifs domain discovered-servers show returns a status of undetermined and unavailable

Regards,

[Sanaman]

Is your AD reachable from Cluster management network? Check your routes if AD and cluster on different network and also if any firewall rules in place.

[Miranto]

Yes AD is reachable from cluster management network. They are on the same subnet so no firewall rules between. only the result of vserver cifs domain discovered-servers show -vserver show status undetermined and unavailable.

This issue happen with our all Netapp filer, so quite sure the issue is not from Netapp side. 

What is the requirement that NetApp need from AD?

[ChLokesh]

Hello,

• Check if the domain discovery mode has been set to ALL.

vserver cifs domain discovered-servers discovery-mode show -vserver vs1

• Set it to mode “SITE” and see if it is fixing the issue.

vserver cifs domain discovered-servers discovery-mode modify -vserver vs1 -mode site

Or,

• Add a few of the working DC’s as preferred DC.

vserver cifs domain preferred-dc add -vserver vs1 -domain example.com -preferred-dc 192.168.0.100,192.168.0.101

• Finally, engage you DC team to why the DC’s are showing unavailable.

Hope this information is helpful.

[Miranto]

Hello,

apologize for my late response.

the discovery-mode is set to all in our case, and there is no default-site with the command vserver cifs show -fields default-site

i will follow your suggestion and give feedback

Regards,