Kerberos身份验证失败、结果为7556
适用场景
问题描述
- CIFS创建失败、存储返回：""
Kerberos authentication failed with result: 7556。
示例：Error: Machine account creation procedure failed
[ 19306] Loaded the preliminary configuration.
[ 19328] Successfully connected to 10.60.56.21:88 using TCP
[ 19567] Entry for host-name: AD01.CTL.GDL.ENGLAB.NETAPP.COM not found in the current source: FILES. Ignoring and trying next available source
[ 19644] Entry for host-address: 10.60.56.21 not found in the current source: FILES. Ignoring and trying next available source
[ 19646] Source: DNS unavailable. Entry for host-address:10.60.56.21 not found in any of the available sources
[ 19649] Successfully connected to 10.60.56.21:88 using TCP
[ 19853] Successfully connected to 10.60.56.21:389 using TCP
[ 19956] Entry for host-name: AD01.CTL.GDL.ENGLAB.NETAPP.COM not found in the current source: FILES. Ignoring and trying next available source
[ 19966] Entry for host-address: 10.60.56.21 not found in the current source: FILES. Ignoring and trying next available source
[ 19969] Unknown error: 100001
[ 19969] Kerberos authentication failed with result: 7556.
[ 19971] Unable to connect to LDAP (Active Directory) service on ad01.ctl.gdl.englab.netapp.com
**[ 19971] FAILURE: Unable to make a connection (LDAP (Active Directory):CTL.GDL.ENGLAB.NETAPP.COM), result: 7556
[ 19972] Retry requested, but the retry window (7000 ms) has expired; giving up.
- 基于
secd.log、可以找到以下错误日志：
| [019.968.611] warn : No matching EMS message for Kerberos error: Unknown error: 100001 { in logEmsEventForKrbError() at src/utils/secd_ems_utils.cpp:306 }
| [019.968.626] info : Unknown error: 100001
| [019.968.661] ERR : RESULT_ERROR_KERBEROS_UNKNOWN_ERROR:7556 in establishContext() at src/GssapiCtx.cpp:687
| [019.968.674] ERR : establishContext: GSSAPI Error: (20000), Kerberos Error: (Unknown error: 100001)
| [019.968.686] ERR : RESULT_ERROR_KERBEROS_UNKNOWN_ERROR:7556 in establishContext() at src/SpnegoCtx.cpp:760