跳转到主内容

Kerberos身份验证失败、结果为7556

Views:
50
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:

适用场景

ONTAP 9

问题描述

  • CIFS创建失败、存储返回:""Kerberos authentication failed with result: 7556

示例:Error: Machine account creation procedure failed
       [ 19306] Loaded the preliminary configuration.
       [ 19328] Successfully connected to 10.60.56.21:88 using TCP
       [ 19567] Entry for host-name: AD01.CTL.GDL.ENGLAB.NETAPP.COM not found in the current source: FILES. Ignoring and trying next available source
       [ 19644] Entry for host-address: 10.60.56.21 not found in the current source: FILES. Ignoring and trying next available source
       [ 19646] Source: DNS unavailable. Entry for host-address:10.60.56.21 not found in any of the available sources
       [ 19649] Successfully connected to 10.60.56.21:88 using TCP
       [ 19853] Successfully connected to 10.60.56.21:389 using TCP
       [ 19956] Entry for host-name: AD01.CTL.GDL.ENGLAB.NETAPP.COM not found in the current source: FILES. Ignoring and trying next available source
       [ 19966] Entry for host-address: 10.60.56.21 not found in the current source: FILES. Ignoring and trying next available source
       [ 19969] Unknown error: 100001
       [ 19969] Kerberos authentication failed with result: 7556.
       [ 19971] Unable to connect to LDAP (Active Directory) service on ad01.ctl.gdl.englab.netapp.com
     **[ 19971] FAILURE: Unable to make a connection (LDAP (Active Directory):CTL.GDL.ENGLAB.NETAPP.COM), result: 7556
       [ 19972] Retry requested, but the retry window (7000 ms) has expired; giving up.

  •  基于 secd.log 、可以找到以下错误日志:

| [019.968.611]  warn :  No matching EMS message for Kerberos error: Unknown error: 100001  { in logEmsEventForKrbError() at src/utils/secd_ems_utils.cpp:306 }
 | [019.968.626]  info :  Unknown error: 100001  
 | [019.968.661]  ERR  :  RESULT_ERROR_KERBEROS_UNKNOWN_ERROR:7556 in establishContext() at src/GssapiCtx.cpp:687
 | [019.968.674]  ERR  :  establishContext: GSSAPI Error: (20000), Kerberos Error: (Unknown error: 100001)
 | [019.968.686]  ERR  :  RESULT_ERROR_KERBEROS_UNKNOWN_ERROR:7556 in establishContext() at src/SpnegoCtx.cpp:760

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.