IBM Storwize V7000 Unified Problem Determination Manual page 179

$ lookupname --user SONAS\\userr
USER
SONAS\userr SONAS\domain users
EFSSG1000I The command completed successfully.
$ chkauth -i -u SONAS\\userr
Command_Output_Data
FETCH USER INFO SUCCEED 12004360 12000513 /var/opt/IBM/sofs/scproot /usr/bin/rssh
EFSSG1000I The command completed successfully.
When the system is unable to authenticate against an external authentication
server, you must ensure that it can obtain user information from the authentication
server. For this user information, query commands can be run from the file
modules. For example, in the case of the LDAP authentication server, you can issue
a command as shown in the following example:
$ chkauth -a -u SONAS\\userr -p ******
AUTHENTICATE USER SUCCEED
EFSSG1000I The command completed successfully.
Trouble accessing exports when server and client
configurations are correct
About this task
If you cannot access an export and the server and client configurations are correct,
it could be because of the following reasons.
v If Storwize V7000 Unified authentication is configured against an LDAP server,
v If Storwize V7000 Unified authentication is configured against an Active
Checking client access
Verify that your client workstation can successfully ping the full host name of the
cluster and all of the IP addresses that are associated with it.
About this task
The following example shows how to ping an cluster. When the client connects to
the host name of the cluster, the DNS server responds with IP addresses. You must
then ping each IP address from the client machine.
If clients cannot successfully ping the IP addresses, then they are not able to access
Storwize V7000 Unified whenever the DNS returns the IP address on name
resolution requests. This can cause some clients have access while others do not.
Procedure
1. To obtain the IP addresses of your Storwize V7000 Unified cluster, issue the
GROUP
UID
the user entries are case-sensitive when you access exports . If the server and
client configurations are correct, ensure that the user entries have the correct
case.
Directory server, user entries are not case-sensitive when you access exports.
When you access CIFS exports, ensure that you use the domain name and user
name, separated by a backslash (\), for example, w2k3dom01\test1.
nslookup command; this non-disruptive command requires "root" access and
your domain name. .
Information similar to the following example is displayed:
GID Home_Directory Template_Shell
159
Chapter 4. File module