在CIFS设置、创建、修改或重置密码期间、由于krb5kdc_ERR_etype_NOSUPP而发生故障

适用场景

• ONTAP 9
• CIFS

问题描述

• ONTAP命令行界面命令 cifs setup 、 vserver cifs create  或vserver cifs password-reset 失败
• secd日志：
  • KRB5KDC_ERR_ETYPE_NOSUPP 
  • KDC_ERR_ETYPE_NOTSUPP (KDC不支持加密类型)。

示例：

[kern_secd:info:12090] | [000.028.994] debug: Supported encryption types are RC4 and DES { in getEtypeList() at src/utils/secd_krb_utils.cpp:103 }
[kern_secd:info:12090] Failure Summary:
[kern_secd:info:12090] Error: Machine account creation procedure failed
[kern_secd:info:12090] [ 28] Loaded the preliminary configuration.
[kern_secd:info:12090] [ 31] Successfully connected to ip xx.xx.0.1, port 88 using TCP
[kern_secd:info:12090] **[ 40] FAILURE: Could not authenticate as 'user@DOMAIN.LOCAL': KDC has no support for encryption type (KRB5KDC_ERR_ETYPE_NOSUPP)