After deploy the environment by "How to configure LDAP in ONTAP TR-4835"
Environment
1. Windows server 2019 with LDAP services
2. CentOS7 client use sssd and realm add to the AD Domain, and use two methods according to TR, shows below
[root@centos7 ~]# id u01
uid=2000(u01) gid=3000(Domain Users) groups=3000(Domain Users)
[root@centos7 ~]# id [email protected]
uid=1596602150([email protected]) gid=1596600513(domain [email protected]) groups=1596600513(domain [email protected]),1596602153(all test [email protected])
3. From ONTAP SVM, the name services query returns correct results, shows below
::*> getxxbyyy getpwbyname -node FAS2750-01 -vserver SVM_LDAP -show-source true -use-cache false -username u01
(vserver services name-service getxxbyyy getpwbyname)
Source used for lookup: LDAP
pw_name: u01
pw_passwd:
pw_uid: 2000
pw_gid: 3000
pw_gecos:
pw_dir:
pw_shell: /bin/bash
Problem
The LDAP user [email protected] cannot access the directory in the ONTAP NFS volume with NFSv4 ACL, shows below
[[email protected]@centos7 ldap]$ nfs4_getfacl root
# file: root
A::OWNER@:rwaDxtTnNcCy
A::[email protected]:rwaDxtTnNcCy
[[email protected]@djwcentos7 ldap]$ cd root/
bash: cd: root/: access denied
Any things set wrong?
