If "Netgroup" Functionality With Nis Is Not Working; Possible Client Misconfiguration; Trouble Accessing Exports When Server And Client Configuration Are Correct - IBM Storwize V7000 Unified Series Problem Determination Manual

domain with user Administrator
Failed to join domain: failed to find DC for domain SONAS
Error occurred due to reason : Join to Active Directory domain failed

If "netgroup" functionality with NIS is not working

If "netgroup" functionality with Network Information Service (NIS) is not working,
ensure that you have included a "@" in front of the netgroup name, as shown in
the following example:
$ mkexport testnetgrp5 /ibm/gpfs0/netgroup5 --nfs "@ng1(rw,no_root_squash)"
Do not create a netgroup with an IP address; instead, use a hostname. The
hostname that is defined in a netgroup should resolve to a valid IP that points
back to the same hostname when you query for it.

Possible client misconfiguration

Authentication problems might be due to a misconfiguration at the NAS client
side. To verify, run the lookupname command as shown in the following example
on the active management file module to check if it can authenticate with the
authentication server.
$ lookupname --user SONAS\\userr
USER GROUP
SONAS\userr SONAS\domain users
EFSSG1000I The command completed successfully.
$ chkauth -i -u SONAS\\userr
Command_Output_Data
FETCH USER INFO SUCCEED 12004360 12000513 /var/opt/IBM/sofs/scproot /usr/bin/rssh
EFSSG1000I The command completed successfully.
When the system is unable to authenticate against an external authentication
server, you need to make sure that it can obtain user information from the
authentication server. For this user information, query commands can be run from
the file modules. For example, in the case of the LDAP authentication server, you
can run a command as shown in the following example:
$ chkauth -a -u SONAS\\userr -p ******
AUTHENTICATE USER SUCCEED
EFSSG1000I The command completed successfully.
Trouble accessing exports when server and client
configuration are correct
Consider the following items if you cannot access an export even when the server
and client configuration are fine.
v When Storwize V7000 Unified authentication is configured against an LDAP
server, remember while accessing exports that user entries are case sensitive. If
the server and client configuration are correct, verify that the user entries have
the correct case.
v When Storwize V7000 Unified authentication is configured against an Active
Directory server, user entries are case insensitive with regard to accessing
exports. While accessing CIFS exports, verify that you are using the domain
name along with the user name and that you have a domain separator in
between the two (that is, syntax domain\user name). For example,
w2k3dom01\test1.
UID GID Home_Directory Template_Shell
165
Chapter 4. File module