间歇性CIFS授权失败
适用场景
- ONTAP 9
- CIFS
- Active Directory
问题描述
- CIFS授权间歇性失败
- 域用户处于活动状态
- CIFS计算机帐户处于活动状态
- login-CIFS命令已成功:
cluster1::*>vserver services access-check authentication login-cifs -node <node_name> -vserver <Vserver_name> -user Domain\user
- 在
EMS Log
中:
[?] Mon Feb 07 14:57:34 +0100 [<node_name>: secd: secd.cifsAuth.problem:error]: vserver (<Vserver_Name>) General CIFS authentication problem. Error: Ontap admin cifs authentication basic procedure failed (Retries: 2) **[ 3263] Attempt 1 FAILURE: Unexpected state: Error 6776 at file:src/FrameWork/Socket.cpp func:ReceiveDataOnSocket line:1233 **[ 3263] Attempt 1 FAILURE: Pass-through authentication request failed.
- 在
Secd Log
中:
Mon Feb 07 2022 14:57:34 +01:00 [kern_secd:info:8995] | [000.261.243] ERR : SMB2 response has NT error 0x103 { in ParseSmb2HeaderResponse() at src/Smb2/Smb2Utils.cpp:350 }
Mon Feb 07 2022 14:57:34 +01:00 [kern_secd:info:8995] | [009.716.488] ERR : NetrRpcFunc failed with error: 6776 and ntstatus 0x103 { in NetrRpcFunc() at src/Actions/MsrpcServices.cpp:3252 }
Mon Feb 07 2022 14:57:34 +01:00 [kern_secd:info:8995] | [009.716.493] ERR : RESULT_ERROR_SPINCLIENT_COMMAND_TIMED_OUT:6776 in NetrRpcFunc() at src/Actions/MsrpcServices.cpp:3255
- 在数据包跟踪中:
筛选器- smb2.nt_status = 0x00000103
88471 2022-02-07 14:57:34.096756 192.168.0.25 192.168.0.201 SMB2 Read Request Len:8192 Off:0 File: netlogon 0x00006c46d800001d
88473 2022-02-07 14:57:34.108730 192.168.0.201 192.168.0.25 SMB2 Read Response, Error: STATUS_PENDING 0x00006c46d800001d