在 GPFS 文件系统中启用 AD 身份验证时出错

Question

我在 2 linux 节点（均为运行ning RHEL 7）GPFS 集群上创建了一个文件系统。我正在尝试启用 AD 身份验证，但收到错误消息并且无法找到修复的答案。这是我在管理器节点上遵循的过程：

./spectrumscale file auth ad

是编辑模板

我用以下信息填写模板：

[file_ad]
servers = bdtestdc01 <--- my test AD server
netbios_name = gpfscluser <--- the name I gave the cluster during setup Is  this field looking for another name?
idmap_role = master
bind_username = administrator
bind_password = the domain password of the administrator account

unixmap_domains = bdtest.subdomain.company.com

我保存模板并设置密码。然后我运行:

./spectrumscale deploy

安装身份验证时出错。日志文件显示：

Error executing action run on resource 'execute[Configure file authentication]

2015-12-21 10:45:31,440 [ TRACE ] bdgpfs01.subdomain.company.com Chef Client failed. 1 resources updated in 3.641691552 seconds
2015-12-21 10:45:31,456 [ TRACE ] bdgpfs01.subdomain.company.com [2015-12-21T10:45:31-08:00] ERROR: execute[Configure file authentication] (auth::auth_file_configure line 22) had an error: Mixlib::ShellOut::ShellCommandFailed: Expected process to exit with [0], but received '1'
2015-12-21 10:45:31,456 [ TRACE ] bdgpfs01.subdomain.company.com ---- Begin output of /usr/lpp/mmfs/bin/mmuserauth service create --data-access-method file --type ad --servers 'bdtestbluedc01' --netbios-name 'gpfscluster' --idmap-role 'master' --user-name 'administrator' --password XXXXXX --unixmap-domains 'bdtest.subdomain.company.com' --idmap-range '10000000-299999999' --idmap-range-size '1000000' --enable-nfs-kerberos ----
2015-12-21 10:45:31,456 [ TRACE ] bdgpfs01.subdomain.company.com STDOUT:
2015-12-21 10:45:31,457 [ TRACE ] bdgpfs01.subdomain.company.com STDERR: mmuserauth service create: Syntax error. The correct syntax is:
2015-12-21 10:45:31,457 [ TRACE ] bdgpfs01.subdomain.company.com   --unixmap-domains domain(lower value-higher value)
2015-12-21 10:45:31,457 [ TRACE ] bdgpfs01.subdomain.company.com mmuserauth service create: Command failed. Examine previous error messages to determine cause.
2015-12-21 10:45:31,438 [ TRACE ] bdgpfs01.subdomain.company.com     mmuserauth service create: Command failed. Examine previous error messages to determine cause.

Answer 1

域字段正在寻找非空白字符和 ID 映射范围。

我没有使用配置模板，而是运行以下成功启用身份验证的命令...

mmuserauth service create --type ad --data-access-method file --netbios-name bdtestnode --user-name administrator --idmap-role master --servers myADserver --password Passwr0rd --idmap-range-size 1000000 --idmap-range 10000000-299999999

我接着运行下面的命令来测试：

id "testdomain\administrator"

它返回了正确的组和 ID

在 GPFS 文件系统中启用 AD 身份验证时出错

Error enabling AD authentication in GPFS filesystem

filesystems