The Windows GID map range is full. Authentication might fail until the range is increased.

The group ID (GID) range for mapping Microsoft Active Directory groups has run out of IDs and must be expanded. This condition might occur if there is a large Active Directory Services hierarchy or an unusually small GID range.

Administrator action

  1. Verify the current GID range by running the following command:
    isi auth settings mapping view --zone=<zone_name>
  2. Expand the UID range according to the instructions in the OneFS CLI Administration Guide and OneFS Web Administration Guide.

If the event persists, gather logs, and then contact EMC Isilon Technical Support for additional troubleshooting. For instructions, see Gathering cluster logs.