Introducing a new FAS into a Hyper-V 2019 cluster, ONTAP 9.15.1P8, SVM joined to AD domain and configured with SMB, shares set up for Hyper-V usage, options and permissions configured per NetApp instructions. Everything seems to work, VMs are running, but if I try to edit (expand) a VHD using failover cluster console running on a host different from the one hosting the VM, I get the following message:
-----------------------------
Unable to edit virtual disk \\svm\share\path\disk.vhdx
Failed to get the disk information.
Account does not have permission to open attachment.
Failed to get the disk information:
": account does not have permission required to open attachment '\\svm\share\path\disk.vhdx'. Error: 'General access denied error' (0x80070005). (Virtual machine ID )
-----------------------------
This does not happen if I RDP into the the host that is running the VM and use the same console there. Delegation is enabled in AD between hyper-v hosts, and SMB delegation is also enabled from the filer's computer object in AD to the hyper-v computer host objects. Referral is enabled in the SVM CIFS options. Filesystem permissions seem fine; both the user making the changes and the hyper-v servers themselves have full control defined at the share/volume root. This happens both to new VMs and VMs migrated from previous storage. Anything I'm missing here?
