Start a Conversation

This post is more than 5 years old

Solved!

Go to Solution

3221

March 21st, 2012 08:00

It is going to hung mode whenever I run Nas_checkup command on celerra.

Why below  errors are coming in nas check.


  check_CIFS_file_server_configuration
  Warning


  external

<BR /> <BR /> * <STRONG>server_2: The DNS server is not up-to-date. The IP address 10.105.2.115 of the CIFS server 'vwvickfnas01.apac.vwg' is not registered in DNS. Depending on the configured update mode (parameter dns.updateMode), the issue may concern a manual update that has not occurred on the DNS server or a Kerberos problem. </STRONG><BR />


<BR /> If the DNS update mode is manual (dns.updateMode=0), update the IP address of the CIFS server in the DNS manually. If not, try a 'server_cifs' command to figure out the problem with the FQDN. Take a look also in the logs using server_log to figure out the Kerberos issue, if any.<BR />



  2012-03-20T16:08:45+00:00
Warn


  2012-03-20T16:08:45+00:00
Data Movers
  check_domain_controller_connectivity_and_configuration
  Warning


  external

<BR /> <BR /> * server_2: PingDC failure: The compname 'vwvickfnas01' could not successfully contact the DC '*SMBSERVER' because of NT errors (SUCCESS) at step Open NETLOGON Secure Channel. Details of the issue:   ' ' DC='DC NETLOGON pipe failure'/'INVALID_COMPUTER_NAME' This issue may prevent user authentication to this domain. <BR />


<BR /> Make sure the CIFS server is correctly joined in the Windows domain. Check the server configuration (especially naming services, usermapper) and/or DC policies according to reported error.<BR />



  external

<BR /> <BR /> * server_2: The compname 'vwvickfnas01' received the GSSAPI error 'Miscellaneous failure. Server not found in Kerberos database. ' from DC '*SMBSERVER' when trying to get the compname account credential (step 'Logon IPC$). This is a Kerberos issue. Operations on Active Directory like join or GPO queries might fail. <BR />


<BR /> Check time synchronization between server and DC. Check DC is a valid Microsoft Domain Controller. Check domain or Domain Controller access policies. As a workaround, clear Kerberos credential on server cache after resetting compname account password in Active Directory.<BR />



  external

<BR /> <BR /> * server_2: The compname 'vwvickfnas01' received a status error ('There are currently no logon servers available to service the logon request') concerning the trusted domain '<A href="http://vgs.com.sg/" rel="nofollow noopener noreferrer">vgs.com.sg</A>' from DC 'APACLHD00001'. Users from this domain might not be able to logon the CIFS server. <BR /> * server_2: The compname 'vwvickfnas01' received a status error ('There are currently no logon servers available to service the logon request') concerning the trusted domain '<A href="http://vgs.com.sg/" rel="nofollow noopener noreferrer">vgs.com.sg</A>' from DC 'APACCKD00002'. Users from this domain might not be able to logon the CIFS server. <BR /> * server_2: The compname 'vwvickfnas01' received a status error ('There are currently no logon servers available to service the logon request') concerning the trusted domain '<A href="http://vgs.com.sg/" rel="nofollow noopener noreferrer">vgs.com.sg</A>' from DC 'APACSYD00001'. Users from this domain might not be able to logon the CIFS server. <BR /> * server_2: The compname 'vwvickfnas01' received a status error ('There are currently no logon servers available to service the logon request') concerning the trusted domain '<A href="http://vgs.com.sg/" rel="nofollow noopener noreferrer">vgs.com.sg</A>' from DC 'VGJ0TYSD0000008'. Users from this domain might not be able to logon the CIFS server. <BR /> * server_2: The compname 'vwvickfnas01' received a status error ('There are currently no logon servers available to service the logon request') concerning the trusted domain '<A href="http://vgs.com.sg/" rel="nofollow noopener noreferrer">vgs.com.sg</A>' from DC 'APACSED00001'. Users from this domain might not be able to logon the CIFS server. <BR /> * server_2: The compname 'vwvickfnas01' received a status error ('There are currently no logon servers available to service the logon request') concerning the trusted domain '<A href="http://vgs.com.sg/" rel="nofollow noopener noreferrer">vgs.com.sg</A>' from DC 'APACCKD00001'. Users from this domain might not be able to logon the CIFS server. <BR /> * server_2: The compname 'vwvickfnas01' received a status error ('There are currently no logon servers available to service the logon request') concerning the trusted domain '<A href="http://vgs.com.sg/" rel="nofollow noopener noreferrer">vgs.com.sg</A>' from DC '*SMBSERVER'. Users from this domain might not be able to logon the CIFS server. <BR /> * server_2: The compname 'vwvickfnas01' received a status error ('There are currently no logon servers available to service the logon request') concerning the trusted domain '<A href="http://vgs.com.sg/" rel="nofollow noopener noreferrer">vgs.com.sg</A>' from DC 'VGJ0TYSD0000009'. Users from this domain might not be able to logon the CIFS server. <BR />


<BR /> Try to access DC using a user from the faulted trusted domain, then run the 'server_cifssupport -pingdc' command to see if DC still reports the same problem. Check DC is a valid Microsoft Domain Controller. Check domain or Domain Controller access policies.<BR />


1 Attachment

23 Posts

March 23rd, 2012 04:00

[nasadmin@celerra5 ~]$ server_param server_2 -facility dns -info updateMode -verbose

server_2 :

name = updateMode

facility_name = dns

default_value = 2

current_value = 2

configured_value = 2

user_action = none

change_effective = immediate

range = (0,2)

description = Update mode for DNS (default: secure)

Could you tell me how to identify DNS update mode.

I have paste output of above command.

March 22nd, 2012 04:00

Hi,

Are you able to access CIFS shares ? are you able to join the CIFS server to Domain ?


Can you check and make sure that there is no more than 5 minutes of time difference between  the data mover and Domain Controller


Thanks
Vanitha

296 Posts

March 22nd, 2012 05:00

Hi,

I think this issue is more of DNS update mode configured in the environment and on the Data Movers.

What is the update mode configured for the DNS on Data Mover ? Is that manual ?

$ server_param server_x -f dns -i updareMode

If you have dynamic DNS disabled from AD or if the parameter is set to maual update, make sure you have updated the Cifs server in the DNS manually.

Sameer Kulkarni

23 Posts

March 22nd, 2012 19:00

Sameer, please could you give me command to enable daynamic DNS update.

296 Posts

March 23rd, 2012 03:00

before running any commands it would be good to know, what is the current update mode configured ?

23 Posts

March 23rd, 2012 04:00

Sameer, I have only one doubt what about value 0 and 1.

I'm little confuse in value 0/1/2.

296 Posts

March 23rd, 2012 04:00

0 = Do not issue updates.

1 = Issue nonsecure updates.

2 = Issue secure updates.

Thanks and Regards

Sameer Kulkarni

eServices

Customer Support Services

EMC²

Where information lives

Email - kulkarni_samer@emc.com

E-service at your fingertips: http://powerlink.emc.com

296 Posts

March 23rd, 2012 04:00

the parameter is set to 2 which means dynamic updates are allowed. please check from the AD as well if the dynamic updates are enabled.

Thanks and Regards

Sameer Kulkarni

eServices

Customer Support Services

EMC²

Where information lives

Email - kulkarni_samer@emc.com

E-service at your fingertips: http://powerlink.emc.com

23 Posts

March 23rd, 2012 07:00

Thanks a lot Sameer.

23 Posts

March 27th, 2012 05:00

Please clear this doubt, What is default_value, current_value, configured_value and dynamic updates are working as per below output.

[nasadmin@VWVICKSCSM01 ~]$ server_param server_2 -facility dns -info updateMode -verbose

server_2 :

name                    = updateMode

facility_name           = dns

default_value           = 2

current_value           = 0

configured_value        = 0

user_action             = none

change_effective        = immediate

range                   = (0,2)

description             = Update mode for DNS (default: secure)

No Events found!

Top