OneFS 8 - missing SPNs and --repair switch

Question

Hi All,

I've joined my OneFS cluster to my AD domain but in the events I get warnings saying there is missing SPNs.

I ran the command 'isi auth ads spn check domainname.local' and it shows that I have possible missing SPNs

Possible missing SPNs:

HOST/admin

HOST/admin.domainname.local

nfs/admin.domainname.local

HOST/nfs

HOST/nfs.domainname.local

nfs/nfs.domainname.local

HOST/cifs

HOST/cifs.domainname.local

nfs/cifs.domainname.local

After looking at the documentation for OneFS 8 for this specific event ID 700030005 (https://support.emc.com/docu65069_OneFS-8.0.0-Event-Reference.pdf?language=en_US) it says to run this command to resolve the issue 'isi auth ads spn check --repair '

The --repair switch does not exist in OneFS 8 but is available on our OneFs 7.2 cluster.

Is anyone else experiencing this same issue?

Regards,

Alex

Peter_Sero · Accepted Answer

How about: isi auth ads spn fix ... ? -- Peter

Stdekart · Answer

lexd, @Peter_Sero, is correct you will need to use the isi auth ads spn fix. I have also reached out to the documentation team to make sure this is corrected as well, thanks for pointing it out!

lexd · Answer

thanks guys! the command works on OneFS8, but looks like i dont have access to modify the SPN in Active Directory for my company.

The issue was resolved by asking the L3 team to modify the SPN manually.

sluetze · Answer

couldn't find documentation if this also works in OneFS8 but OneFS7 has a switch called --maschine-creds which makes OneFS use the ad-credentials of the Maschine, which mostly is able to modify itself (if not restricted by acls in ad)

NagdewaniR · Answer

Getting this error WINNET_AUTH_AD_SPN_MISSING while running isi auth ads spn fix

DELL-Sam L · Answer

Hello NagdewaniR, Here is a link to a kb that maybe of assistance.  https://dell.to/3xa0CKJ

Phil.Lam · Answer

thanks Peter!

Isilon

OneFS 8 - missing SPNs and --repair switch

Was this post helpful?