secd.rpc events
secd.rpc.authRequest.blocked
- Severity
-
ALERT
- Description
-
This message occurs when a user with the same domain and same client IP address is blocked due to continuous authentication requests with an invalid login password.
- Corrective Action
-
Check if there is an unexpected increase in the number of authentication requests with an invalid login password from a particular CIFS client. Use "statistics show -raw -object secd -instance secd -counter num_rpcs_blocked_due_to_wrong_password" command to check the number of clients blocked due to an invalid password.
- Syslog Message
-
Too many CIFS authentication attempts with an invalid password from a client with IP "%s", user name "%s" and domain "%s" on SVM "%s".
- Parameters
-
clientIP (STRING): IP address of the client that has been blocked.
userName (STRING): User who is trying to mount with an invalid password.
domain (STRING): Domain to which the user belongs.
vserverName (STRING): Storage virtual machine(SVM) associated with this operation.
secd.rpc.server.ready
- Severity
-
INFORMATIONAL
- Description
-
This message occurs when SecD successfully loads the configuration and is ready to serve all RPCs.
- Corrective Action
-
(None).
- Syslog Message
-
SecD is ready to serve all RPCs.
- Parameters
-
(None).
secd.rpc.server.request.dropped
- Severity
-
ERROR
- Description
-
This message occurs when a remote procedure call(RPC) is dropped by SecD due to a lack of memory space. It might occur either when SecD receives too many requests than it can handle or when a number of requests have accumulated due to server connectivity issues.
- Corrective Action
-
Check whether there is an unexpected increase in the number of authentication requests from NFS/CIFS clients. Verify that there are no connectivity issues to the external servers like DNS, LDAP, and DC.
- Syslog Message
-
RPC "%s" that was sent from "%s" was dropped by SecD due to a lack of memory space.
- Parameters
-
rpcName (STRING): Name of the RPC that has been dropped.
callerName (STRING): Caller of the RPC that has been dropped.
secd.rpc.thread.limit.hit
- Severity
-
NOTICE
- Description
-
This message occurs when a maximum number of allowed RPC threads are running for an SVM. SecD has a fixed number of threads to serve the RPC requests triggered from CIFS/NFS. When this limit is hit, incoming RPC requests for that SVM will remain in queue and will be processed once any thread is available.
- Corrective Action
-
Check whether there is an unexpected increase in the number of authentication requests from NFS/CIFS clients. Verify that there are no connectivity issues to the external servers like DNS, LDAP, and DC.
- Syslog Message
-
Limit of maximum number of running threads("%d") is hit for SVM "%s".
- Parameters
-
MaxThreadsPerVserver (INT): Maximum threads allowed for an SVM.
vserverName (STRING): SVM associated with this operation.
secd.rpc.vserver.req.dropped
- Severity
-
ERROR
- Description
-
This message occurs when a remote procedure call (RPC) is dropped by SecD due to a lack of memory space allocated for a particular vserver. It might occur either when SecD receives more requests than it can handle, or when a number of requests have accumulated due to server connectivity issues.
- Corrective Action
-
Check whether there is an unexpected increase in the number of authentication requests from CIFS clients. Verify that there are no connectivity issues to the external servers like DNS, LDAP, and DC.
- Syslog Message
-
RPC "%s" for the SVM "%s" was dropped by SecD due to a lack of memory space.
- Parameters
-
rpcName (STRING): Name of the RPC that has been dropped.
vserverName (STRING): Name of the SVM that is having the error.
secd.rpc.vserverQ.threshold
- Severity
-
ALERT
- Description
-
This message occurs when SecD RPC queue usage has reached 80% of its maximum capacity. This indicates that SecD is receiving a high volume of requests, which could lead to an RPC request being dropped due to insufficient memory space.
- Corrective Action
-
Check whether there is an unexpected increase in the number of authentication requests from CIFS clients. Verify that there are no connectivity issues to the external servers like DNS, LDAP, and DC.
- Syslog Message
-
Too many "%s" RPC requests for SVM "%s".
- Parameters
-
rpcName (STRING): Name of the RPC.
vserverName (STRING): Name of the SVM.