Data Domain: Active Directory Authentication not working because the global catalog is disabled

Summary: Active Directory (AD) Authentication not working because the global catalog (GC) is disabled in Data Domain.

Acest articol se aplică pentru Acest articol nu se aplică pentru Acest articol nu este legat de un produs specific. Acest articol nu acoperă toate versiunile de produs existente.
Consultați alte resurse

Symptoms

Unable to log in.

Active Directory (AD) has been successfully configured.

The following commands provide a list of the AD users and groups:

cifs troubleshooting list-users 
cifs troubleshooting list-groups
 
Checking an Admin AD user with the following command is successful:
cifs troubleshooting user <AD-User>

Cause

Cause:

Active Directory (AD) Authentication does not work if the global catalog (GC) is disabled in Data Domain.

Verification:

Check the output of the "cifs troubleshooting domaininfo" command.

For example:

cifs troubleshooting domaininfo
 
LSA Server Status:

Compiled daemon version: 6.4.2.0
Packaged product version: 6.4.0.70728
Uptime:        0 days 0 hours 6 minutes 5 seconds

[Authentication provider: lsa-activedirectory-provider]

        Status:        Online
        Mode:          Un-provisioned
        Domain:        XX.COM
        Domain SID:    S-1-5-21-326852099-1603424837-312552118
        Forest:        YY.COM
        Site:          xxxxxx

        Online check interval:  300 seconds

        [Trusted Domains: 28]

    [Domain: PART]

                DNS Domain:       YY.com
                Netbios name:     PART
                Forest name:      YY.com
                Trustee DNS name: XX.com
                Client site name:
                Domain SID:       S-1-5-21-2025429265-448539723-725345543
                Domain GUID:      0b13dbf9-d636-9c4e-ae15-d54243951480
                Trust Flags:      [0x0027]
                                  [0x0001 - In forest]
                                  [0x0002 - Outbound]
                                  [0x0004 - Tree root]
                                  [0x0020 - Inbound]
                Trust type:       Up Level
                Trust Attributes: [0x800000]
                Trust Direction:  Twoway Trust
                Trust Mode:       In my forest Trust (MFT)
                Domain flags:     [0x0022]
                                  [0x0002 - Offline]
                                  [0x0020 - GC offline]
 

From this output, the primary domain is reporting offline while the user is trying to access.

  • The forest (YY.COM) GC seems to be the issue.

Resolution

In DD-CLI (SSH), Disable the Global Catalog query on the Data Domain system:

cifs option set global-catalog-query-disable true

Produse afectate

Data Domain

Produse

Data Domain
Proprietăți articol
Article Number: 000081183
Article Type: Solution
Ultima modificare: 02 Jun 2026
Version:  5
Găsiți răspunsuri la întrebările dvs. de la alți utilizatori Dell
Servicii de asistență
Verificați dacă dispozitivul dvs. este acoperit de serviciile de asistență.