Data Domain: Active Directory authentication stops working when upgrading to DDOS 5.7 or higher if the Global Catalog is unreachable

이 문서는 다음에 적용됩니다. 이 문서는 다음에 적용되지 않습니다. 이 문서는 특정 제품과 관련이 없습니다. 모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.
기타 리소스 확인

증상



Upon upgrading the DDOS to version 5.7 or higher, Active Directory authentication stops working if the Global Catalog is unreachable.
This issue causes login, CIFS share access and CIFS backup failures if an Active Directory user is used for these tasks.

원인

This is due to a change in DDOS from version 5.7 and higher which requires a Global Catalog query at each authentication.
From the DDOS CLI, as an admin user, run the following command to check connectivity to the domain, including the GC:

# cifs troubleshooting domaininfo


If the Global Catalog is unreachable, the above output will contain the following line:

[0x0020 - GC offline]



해결

  • The DataDomain will attempt to reach the Global Catalog on TCP port 3268. Make sure that there is no firewall rule to block this port.
  • Additionally, from DDOS 5.7.4.0 and DDOS 6.0.1, a new option to avoid global catalog queries during user authentication has been added to DDOS:
  • The new option is named global-catalog-query-disable. The default value for the option will be 0 or false. It can be set to 1 or true to skip the ldap query to the global catalog to fetch Universal groups info.
For example, the following command: 
#cifs option set global-catalog-query-disable true
This will disable GC queries.
 
To apply the changes, restart the CIFS service: #cifs restart force

Check that the option is indeed set:

#cifs option show Currently Set Options: Option                             Value --------------------------------   ------- global-catalog-query-disable       1 --------------------------------   -------


If the issue persists, please contact EMC Dell support.

해당 제품

Data Domain

제품

Data Domain
문서 속성
문서 번호: 000064171
문서 유형: Solution
마지막 수정 시간: 13 6월 2025
버전:  3
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.