Kerberos 身份验证失败，错误：消息流已修改 (KRB5KRB_AP_ERR_MODIFIED)

适用于

• ONTAP 9
• CIFS
• Kerberos 身份验证

问题描述

Kerberos 身份验证因以下 secd 错误而失败：

00000016.0087cce3 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] .------------------------------------------------------------------------------. 00000016.0087cce4 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] | !!! NOTE: The logging below contains a SERIOUS ISSUE. !!! | 00000016.0087cce5 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] | Check for entries of type: CRIT, ALERT, or EMERG. | 00000016.0087cce6 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] | The RPC may or may not have failed. | 00000016.0087cce7 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] .------------------------------------------------------------------------------. 00000016.0087cce8 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] | RPC FAILURE: | 00000016.0087cce9 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] | secd_rpc_auth_extended has failed | 00000016.0087ccea 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] | Result = 0, RPC Result = 6942 | 00000016.0087cceb 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] | RPC received at Sun Jul 27 06:35:00 2025 | 00000016.0087ccec 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] |------------------------------------------------------------------------------' 00000016.0087cced 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] Failure Summary: 00000016.0087ccee 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] Error: User authentication procedure failed 00000016.0087ccef 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] CIFS SMB2 Share mapping - Client Ip = 10.128.14.XXX 00000016.0087ccf0 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 0 ms] Login attempt by domain user 'user\domain' using NTLMv2 style security 00000016.0087ccf1 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 1] Successfully connected to ip 192.168.92.XXX, port 445 using TCP 00000016.0087ccf2 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 8] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup 00000016.0087ccf3 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 12] Message stream modified (KRB5KRB_AP_ERR_MODIFIED) 00000016.0087ccf4 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 12] Kerberos authentication failed with result: 7541. 00000016.0087ccf5 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 14] Unable to connect to NetLogon service on XXXXA.XXX.XXXX (Error: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE) 00000016.0087ccf6 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 2016] TCP connection to ip 10.128.13.61, port 445 failed: Operation timed out. 00000016.0087ccf7 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 2016] Unable to connect to NetLogon service on XXXXB.XXX.XXXX (Error: RESULT_ERROR_SPINCLIENT_UNABLE_TO_RESOLVE_SERVER) 00000016.0087ccf8 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 4017] TCP connection to ip 10.128.17.29, port 445 failed: Operation timed out. 00000016.0087ccf9 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 4017] Unable to connect to NetLogon service on XXXC.XXX.XXXX (Error: RESULT_ERROR_SPINCLIENT_UNABLE_TO_RESOLVE_SERVER) 00000016.0087ccfa 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 6018] TCP connection to ip 192.168.101.200, port 445 failed: Operation timed out. 00000016.0087ccfb 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 6018] Unable to connect to NetLogon service on XXXXD.XXX.XXXX (Error: RESULT_ERROR_SPINCLIENT_UNABLE_TO_RESOLVE_SERVER) 00000016.0087ccfc 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 8019] TCP connection to ip 192.168.160.200, port 445 failed: Operation timed out. 00000016.0087ccfd 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 8019] Unable to connect to NetLogon service on XXXXE.XXX.XXXX (Error: RESULT_ERROR_SPINCLIENT_UNABLE_TO_RESOLVE_SERVER) 00000016.0087ccfe 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] **[ 8019] FAILURE: Unable to make a connection (NetLogon:XXX.XXXX), result: 6942 00000016.0087ccff 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 8022] CIFS authentication failed 00000016.0087cd00 1413767c Sun Jul 27 2025 06:35:08 +09:00 [kern_secd:info:9970] [ 8022] Retry requested, but the retry window (7000 ms) has expired; giving up.