CONAP-54647:CIFS身份验证失败、直到手动重新发现为止
问题描述
- 由于无法执行 Kerberos 身份验证,CIFS Vserver 无法访问
- 新的 CIFS 会话将失败
- EMS:
Mon Nov 09 08:29:37 CET [clus1-02: secd: secd.cifsAuth.problem:error]: vserver (VS1) General CIFS authentication problem. Error: User authentication procedure failed CIFS SMB2 Share mapping - Client Ip = 10.10.10.11 **[ 2] FAILURE: CIFS authentication failed
- SECD:
ERR : RESULT_ERROR_SECLIB_GSSAPI_NO_SERVER_CREDS:7129 in
acceptContext() at src/GssapiCtx.cpp:182
ERR : acceptContext: GSSAPI Error: (d0000)
ERR : RESULT_ERROR_SECLIB_GSSAPI_NO_SERVER_CREDS:7129 in
acceptContext() at src/SpnegoCtx.cpp:248
ERR : RESULT_ERROR_SECLIB_GSSAPI_NO_SERVER_CREDS:7129 in
secd_rpc_auth_extended_1_svc() at
src/authentication/secd_rpc_auth.cpp:1221
ERR : CIFS authentication failed
{ in secd_rpc_auth_extended_1_svc() at src/authentication/secd_rpc_auth.cpp:1249 }
debug: SecD RPC Server sending reply to RPC 151: secd_rpc_auth_extended
{ in secdSendRpcResponse() at src/server/secd_rpc_server.cpp:2070 }
ERR : RESULT_ERROR_SECLIB_GSSAPI_NO_SERVER_CREDS:7129 in
getFailureCode() at src/utils/secd_thread_task_journal.cpp:348
[kern_secd:info:12745] | [000.006.626] ERR : RESULT_ERROR_KERBEROS_UNKNOWN_ERROR:7556 in getKrbInitCreds() at src/GssapiCtx.cpp:487
[kern_secd:info:12745] | [000.006.644] ERR : getKrbInitCreds: Kerberos Error: (Improper format of Kerberos configuration file (KRB5_CONFIG_BADFORMAT))
[kern_secd:info:12745] | [000.006.678] info : Improper format of Kerberos configuration file (KRB5_CONFIG_BADFORMAT)