VPLEX：配置 LDAP 并通过 SSH 登录后，客户观察到以下消息："Permissions on the password database may be too restrictive"

Summary: 本文讨论以下问题：在配置 LDAP 并尝试使用 LDAP 用户帐户登录后，用户观察到错误消息以及错误消息的含义。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

完成 LDAP for VPLEX 的配置并使用 AD 帐户登录后，用户通过 SSH 观察到以下消息："Permissions on the password database may be too restrictive"。

image.png

仅在使用 LDAP 用户帐户时，才会报告此消息。
除消息之外，用户在管理 VPLEX 时没有遇到其他问题。
 

LDAP config details
VPlexcli:/> authentication directory-service show
external-authentication-service: AD
ip: 10.x.x.x
User Search Path: dc=abcgroup,dc=com
connection-type: SSL
Server certificate is configured: No
mapped-principal:
[Groups ]: ['CN=RL VPLEX Admins,OU=Common,OU=Groups,DC=abcgroup,DC=com']


 

  • ldapsearch 输出
service@hostname:~> ldapsearch -x -LLL -l 30 -H ldap://10.x.x.x:389 -b 'CN=RL VPLEX Admins,OU=Common,OU=Groups,DC=abcgroup,DC=com' -D 'CN=svemcisilon,OU=services,DC=abcgroup,DC=com' -w XXXXXXXXXX -E pr=1000/noprompt
dn: CN=RL VPLEX Admins,OU=Common,OU=Groups,DC=abcgroup,DC=com
objectClass: top
objectClass: group
cn: RL VPLEX Admins
description: VPLEX is now AD-enabled. Group needed in order to add storage administrators for VPLEX administration and management. This group will be mapped to VPLEX management consoles in NA (2 prod and 2 dev systems).
member: CN=admssmith,OU=MA,OU=People,DC=abcgroup,DC=com
member: CN=admbjones,OU=RTP,OU=People,DC=abcgroup,DC=com
member: CN=admjdoe,OU=MA,OU=People,DC=abcgroup,DC=com
distinguishedName: CN=RL VPLEX Admins,OU=Common,OU=Groups,DC=abcgroup,DC=com
instanceType: 4
whenCreated: 20220210134131.0Z
whenChanged: 20220213205448.0Z
uSNCreated: 924908844
uSNChanged: 926986370
name: RL VPLEX Admins
objectGUID:: zwLHqEsazUysXZjpDIP0Og==
objectSid:: AQUAAAAAAAUVAAAAAwAKFqEHe0zBORr+fqgBAA==
sAMAccountName: RL VPLEX Admins
sAMAccountType: 268435456
managedBy: CN=PGedhopeful,OU=MA,OU=People,DC=abcgroup,DC=com
groupType: -2147483640
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=abcgroup,DC=com
dSCorePropagationData: 16010201000000.0Z

 

Cause

确定消息指示 SLES11 的表面问题。

Resolution

工程部门已针对此问题进行了测试，过去，已确定可以安全地忽略该消息。

Affected Products

VPLEX GeoSynchrony, VPLEX Series, VPLEX VS2, VPLEX VS6
Article Properties
Article Number: 000198102
Article Type: Solution
Last Modified: 11 Jun 2025
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.