CIFS命令失败并显示"Kerberos错误：网络地址不正确"

适用场景

• ONTAP 9
• SMB/CIFS

问题描述

某些CIFS 管理命令 失败并显示Kerberos错误 (KRB5KRB_AP_ERR_BADADDR)Incorrect net address ：

• CIFS密码重置在事件日志中返回错误：

Kerberos password set for 'ACCOUNT@DOMAIN.COM' failed with Incorrect net address (KRB5KRB_AP_ERR_BADADDR)

• CIFS创建失败、并在SECD日志中显示以下错误消息：

Error: Machine account creation procedure failed

  [   733] Loaded the preliminary configuration.
  [  1024] Created a machine account in the domain
  [  1024] SID to name translations of Domain Users and Admins completed successfully
  [  1035] Successfully connected to ip 10.10.10.1, port 88 using TCP
  [  1067] Successfully connected to ip 10.10.10.2, port 464 using TCP
**[  1186] FAILURE: Kerberos password set for
**         '<ACCOUNT$@DOMAIN.COM>' failed with Incorrect
**         net address (KRB5KRB_AP_ERR_BADADDR)
  [  1221] Deleted existing account CN=ACCOUNT$ OU=COMPUTERS
 
Error: command failed: Failed to create the Active Directory machine account "<CIFS_ACCOUNT>". Reason: Kerberos Error: Incorrect net address.

• CIFS密码重置过程失败、EMS日志中发现错误：

secd: secd.unexpectedFailure:error: Unexpected SecD failure in Vserver "SVM_1". 
Details: Error: CIFS server password reset procedure failed  
[ 10 ms] Successfully connected to ip XX.XX.XX.01, port 88 using TCP  
[    24] Successfully connected to ip XX.XX.XX.01, port 88 using TCP  
[    47] Successfully connected to ip XX.XX.XX.05, port 389 using TCP  
[    49] Entry for host-address: XX.XX.XX.05 not found in the current source: FILES. 
Ignoring and trying next available source  
[    54] Successfully connected to ip XX.XX.XX.06, port 88 using TCP  
[    83] Successfully connected to ip XX.XX.XX.06, port 464 using TCP **
[   123] FAILURE: Kerberos password set for 'SVM_1$@DOMAIN.COM' failed with Incorrect net address (KRB5KRB_AP_ERR_BADADDR)