Re: LDAP timeout errors since upgrade to 9.13.1

Randy Rue <[email protected]> Thu, 27 Jul 2023 14:33:19 -0700
Newsgroups gmane.comp.hardware.netapp
Message-ID <[email protected]>
This is a multi-part message in MIME format.
--===============6870578147229466328==
Content-Type: multipart/alternative;
 boundary="------------wX6lfZSYg9hnrqnd4pUpfCMk"
Content-Language: en-US

This is a multi-part message in MIME format.
--------------wX6lfZSYg9hnrqnd4pUpfCMk
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

why would this have changed with the upgrade?

On 7/18/23 09:26, tmac wrote:
>
> Sometimes, if you have multiple default routes and they all have a 
> metric of 20, odd issues crop up like this. Sometimes modifying 
> (actually delete/recreate the route) may help
>
>
> On Tue, Jul 18, 2023 at 10:51 AM Randy Rue <[email protected]> wrote:
>
>     Got a case open with NA and sent autosupports, will let you know
>     what they come back with
>
>     On 7/17/23 14:56, tmac wrote:
>>     Check the routing inside the svm. Might be a route issue. Still
>>     works just a false positive going out the wrong route?
>>
>>     On Mon, Jul 17, 2023 at 4:57 PM Randy Rue <[email protected]> wrote:
>>
>>         Hi All,
>>
>>         Since upgrading to 9.13.1 our AFF/FAS on-premise cluster has
>>         an alert in the System Manager dashboard and shows us
>>         receiving these errors every hour or two:
>>
>>         secd.ldap.noServers: None of the LDAP servers configured for
>>         Vserver (vfiler_name) are currently accessible via the
>>         network for LDAP service type (Service: LDAP (Active
>>         Directory), Operation: SiteDiscovery).
>>
>>         We run a redundant pair of slapd LDAP servers presented via
>>         an F5 BigIP at a single IP. The SVMs LDAP settings include of
>>         a list of the F5's highly available IP and then the two back
>>         end servers.
>>
>>         Nothing has changed with our LDAP service. The LDAP servers
>>         don't seem to be distressed and no other systems/services
>>         that touch our LDAP are complaining. Our NetApp SVMs don't
>>         seem to be dropping or bouncing any filer traffic.
>>
>>         Has anything changed from 9.9 to 9.13 in the way ONTAP talks
>>         to LDAP? Is it chattier? More sensitive to lags?
>>
>>
>>         Randy
>>
>>         _______________________________________________
>>         Toasters mailing list
>>         [email protected]
>>         https://www.teaparty.net/mailman/listinfo/toasters
>>
>>     -- 
>>     Sent from Gmail Mobile.
>     _______________________________________________
>     Toasters mailing list
>     [email protected]
>     https://www.teaparty.net/mailman/listinfo/toasters
>
> -- 
> Sent from Gmail Mobile.
--------------wX6lfZSYg9hnrqnd4pUpfCMk
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>why would this have changed with the upgrade?<br>
    </p>
    <div class="moz-cite-prefix">On 7/18/23 09:26, tmac wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CAL9X-_E--wEW9tBRkPfhWPkT3dVD+zXS47ZnU1yhYYuh6eahOA@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div><br>
      </div>
      <div dir="auto">Sometimes, if you have multiple default routes and
        they all have a metric of 20, odd issues crop up like this.
        Sometimes modifying (actually delete/recreate the route) may
        help</div>
      <div dir="auto"><br>
      </div>
      <div dir="auto"><br>
        <div class="gmail_quote" dir="auto">
          <div dir="ltr" class="gmail_attr">On Tue, Jul 18, 2023 at
            10:51 AM Randy Rue &lt;<a href="mailto:[email protected]"
              moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a>&gt;
            wrote:<br>
          </div>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div>
              <p>Got a case open with NA and sent autosupports, will let
                you know what they come back with<br>
              </p>
            </div>
            <div>
              <div>On 7/17/23 14:56, tmac wrote:<br>
              </div>
              <blockquote type="cite">
                <div dir="auto">Check the routing inside the svm. Might
                  be a route issue. Still works just a false positive
                  going out the wrong route?</div>
                <div><br>
                  <div class="gmail_quote">
                    <div dir="ltr" class="gmail_attr">On Mon, Jul 17,
                      2023 at 4:57 PM Randy Rue &lt;<a
                        href="mailto:[email protected]" target="_blank"
                        moz-do-not-send="true"
                        class="moz-txt-link-freetext">[email protected]</a>&gt;
                      wrote:<br>
                    </div>
                    <blockquote class="gmail_quote" style="margin:0 0 0
                      .8ex;border-left:1px #ccc solid;padding-left:1ex">
                      <div>
                        <p>Hi All,</p>
                        <p>Since upgrading to 9.13.1 our AFF/FAS
                          on-premise cluster has an alert in the System
                          Manager dashboard and shows us receiving these
                          errors every hour or two:</p>
                        <p> <span>secd.ldap.noServers: None of the LDAP
                            servers configured for Vserver (vfiler_name)
                            are currently accessible via the network for
                            LDAP service type (Service: LDAP (Active
                            Directory), Operation: SiteDiscovery).</span>
                          <br>
                        </p>
                        <p>We run a redundant pair of slapd LDAP servers
                          presented via an F5 BigIP at a single IP. The
                          SVMs LDAP settings include of a list of the
                          F5's highly available IP and then the two back
                          end servers.</p>
                        <p>Nothing has changed with our LDAP service.
                          The LDAP servers don't seem to be distressed
                          and no other systems/services that touch our
                          LDAP are complaining. Our NetApp SVMs don't
                          seem to be dropping or bouncing any filer
                          traffic.</p>
                        <p>Has anything changed from 9.9 to 9.13 in the
                          way ONTAP talks to LDAP? Is it chattier? More
                          sensitive to lags?</p>
                        <p><br>
                        </p>
                        <p>Randy<br>
                        </p>
                      </div>
                      _______________________________________________<br>
                      Toasters mailing list<br>
                      <a href="mailto:[email protected]"
                        target="_blank" moz-do-not-send="true"
                        class="moz-txt-link-freetext">[email protected]</a><br>
                      <a
                        href="https://www.teaparty.net/mailman/listinfo/toasters"
                        rel="noreferrer" target="_blank"
                        moz-do-not-send="true"
                        class="moz-txt-link-freetext">https://www.teaparty.net/mailman/listinfo/toasters</a></blockquote>
                  </div>
                </div>
                <span class="gmail_signature_prefix">-- </span><br>
                <div dir="ltr" class="gmail_signature"
                  data-smartmail="gmail_signature">Sent from Gmail
                  Mobile.</div>
              </blockquote>
            </div>
            _______________________________________________<br>
            Toasters mailing list<br>
            <a href="mailto:[email protected]" target="_blank"
              moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a><br>
            <a href="https://www.teaparty.net/mailman/listinfo/toasters"
              rel="noreferrer" target="_blank" moz-do-not-send="true"
              class="moz-txt-link-freetext">https://www.teaparty.net/mailman/listinfo/toasters</a></blockquote>
        </div>
      </div>
      <span class="gmail_signature_prefix">-- </span><br>
      <div dir="ltr" class="gmail_signature"
        data-smartmail="gmail_signature">Sent from Gmail Mobile.</div>
    </blockquote>
  </body>
</html>

--------------wX6lfZSYg9hnrqnd4pUpfCMk--

--===============6870578147229466328==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Toasters mailing list
[email protected]
https://www.teaparty.net/mailman/listinfo/toasters
--===============6870578147229466328==--