在数据 LIF 上启用 Kerberos 失败,并显示错误:加密类型错误
适用场景
- ONTAP 9
- 密钥分发中心( KDC )
- MIT Kerberos 1.18
问题描述
在数据 LIF 上启用 NFS Kerberos 后显示的错误:
Error: NFS Kerberos bind SPN procedure failed
[ 1 ms] Creating account in Unix KDC
[ 50] Successfully connected to ip 10.20.30.40, port 749 using TCP
**[ 80] FAILURE: Unexpected state: Error 1142 at
** file:src/utils/secd_kadmin_utils.cpp
** func:createVifKrbAccountUsingKadmin line:223
**[ 80] FAILURE: Failed to create spn
** 'nfs/lif_1.demo.centos-ldap.local@DEMO.CENTOS-LDAP.LOCAL' using admin spn
** 'root/admin@DEMO.CENTOS-LDAP.LOCAL', error: Bad encryption type
[ 81] Uncaptured failure while creating account
Error: command failed: Failed to enable NFS Kerberos on LIF "lif_1".
Failed to bind service principal name on LIF "lif_1".cifs smb kadmin error.