由于AD域中的SVM计算机帐户名称重复、ONTAP管理员CIFS身份验证基本操作步骤失败
适用场景
- ONTAP 9
- CIFS
- 域身份验证
问题描述
- ONTAP管理员CIFS身份验证基本操作步骤在EMS中失败
示例
secd.cifsAuth.problem: vserver (svm1) General CIFS authentication problem. Error: Ontap admin cifs authentication basic procedure failed
[ 11 ms] Successfully connected to ip 10.11.12.13, port 88 using TCP
[ 27] Successfully connected to ip 10.11.12.13, port 88 using TCP
[ 35] Error accepting security context for Vserver identifier (3). Decrypt integrity check failed (KRB5KRB_AP_ERR_BAD_INTEGRITY).
[ 35] Kerberos authentication failed. Trying NTLM
[ 35] Login attempt by domain user 'DOMAIN\user' using NTLMv2 style security
[ 36] Successfully connected to ip 10.11.12.13, port 445 using TCP
[ 41] Successfully connected to ip 10.11.12.13, port 88 using TCP
[ 50] CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED)
[ 50] Failed to initiate Kerberos authentication. Trying NTLM.
[ 51] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup
[ 58] Encountered NT error (NT_STATUS_AUTH_LOGON_FAILURE) for SMB command SessionSetup
[ 58] Unable to connect to NetLogon service on dc1.domain.local (Error: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE)
[ 58] Successfully connected to ip 10.11.12.14, port 445 using TCP
[ 63] Successfully connected to ip 10.11.12.13, port 88 using TCP
[ 70] CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED)