CIFS身份验证错误：krb5kdc_ERR_etype_NOSUPP
适用场景
- ONTAP 9
- CIFS/SMB
- Kerberos
问题描述
KRB5KDC_ERR_ETYPE_NOSUPP 在日志记录中显示CIFS身份验证错误：
secd.cifsAuth.problem:error: vserver (VS1) General CIFS authentication problem. Error: User authentication procedure failed CIFS SMB2 Share mapping - Client Ip = 10.10.10.110 [0 ms] Login attempt by domain user 'domain\john.doe' using NTLMv2 style security [0] Successfully connected to ip 10.10.10.11, port 445 using TCP [6] Successfully connected to ip 10.10.10.11, port 88 using TCP [10] KDC has no support for encryption type (KRB5KDC_ERR_ETYPE_NOSUPP) [10] Failed to initiate Kerberos authentication. Trying NTLM. [10] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup [11] Successfully authenticated with DC vs1.domain.local [13] Unable to connect to NetLogon service on vs1.domain.local (Error: RESULT_ERROR_GENERAL_OUT_OF_MEMORY) [13] Successfully connected to ip 10.10.10.12, port 445 using TCP [19] Successfully connected to ip 10.10.10.12, port 88 using TCP [23] KDC has no support for encryption type (KRB5KDC_ERR_ETYPE_NOSUPP) [23] Failed to initiate Kerberos authentication. Trying NTLM. [23] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup [24] Successfully authenticated with DC vs1.domain.local [24] Unable to connect to NetLogon service on vs1.domain.local (Error: RESULT_ERROR_GENERAL_OUT_OF_MEMORY) [25] No servers available for MS_NETLOGON, vserver: 8, domain: domain.local. [25] FAILURE: Unable to make a connection (NetLogon:DOMAIN.LOCAL), result: 6940 [26] CIFS authentication failed