通过主机名访问 CIFS 服务器失败,并显示以下错误: Key table entry not found ( KRB5_KT_NOTFOUND )
状态信息
适用场景
- ONTAP 9
- CIFS
- Kerberos身份验证(ET)
- 域控制器(DC)
- Windows操作系统
问题描述
- 使用主机名打开共享时拒绝访问
- 示例:
\\svm_hostname
- 示例:
- 如果通过IP访问、则会按预期打开同一共享
- 示例:
\\ip_address_of_SVM
- 示例:
- 在日志中、我们可以看到:
EMS.log
:
[?] Mon Jan 14 00:27:40 IST [Cluster1: secd: secd.cifsAuth.problem:error]: vserver (SVM1) General CIFS authentication problem. Error: User authentication procedure failed CIFS SMB2 Share mapping - Client Ip = a.b.c.d [ 4 ms] Error accepting security context for Vserver identifier (4). Key table entry not found (KRB5_KT_NOTFOUND). **[ 7] FAILURE: CIFS authentication failed
- in
SECD.log
:enctype aes256
或enctype aes256
已记录:
00000015.0056f642 01e038b1 Mon Jan 14 2019 00:29:31 +05:30 [kern_secd:info:7104] | [000.000.125] debug: secd_rpc_auth_extended_1_svc called with vserver = SVM1 { in secd_rpc_auth_extended_1_svc() at src/authentication/secd_rpc_auth.cpp:1204 }
00000015.0056f643 01e038b1 Mon Jan 14 2019 00:29:31 +05:30 [kern_secd:info:7104] | [000.004.281] info : [krb5 context 09658600] Retrieving cifs/SVM1@testlab.com from SPINKT:kt:C:4 (vno 3, enctype aes256-cts) with result: -1765328203/Key table entry not found
00000015.0056f644 01e038b1 Mon Jan 14 2019 00:29:31 +05:30 [kern_secd:info:7104] | [000.004.356] info : Error accepting security context for Vserver identifier (4). Key table entry not found (KRB5_KT_NOTFOUND).
- SPN条目 已在车窗侧正确更新:
C:\Windows\system32>setspn -l SVM1
Registered ServicePrincipalNames for CN=SVM1,OU=Computers,DC=TESTLAB,DC=COM:
HOST/SVM1.testlab.com
HOST/SVM1