由于另一个CIFS服务器使用相同的CIFS NetBIOS名称、导致出现secd.keros.preauth
适用场景
- ONTAP 9
- CIFS/SMB
- Active Directory (AD)
问题描述
- 多个EMS日志中出现
secd.kerberos.preauth错误：
secd.kerberos.preauth: A Kerberos pre-authentication failure occurred for SVM "<vserver_name>" due to out-of-sync machine account password.- SECD日志：
[000.138.342] info : [krb5 context 09C5C000] Received error from KDC: -1765328360/Preauthentication failed
[000.138.380] ERR : RESULT_ERROR_KERBEROS_PREAUTH_FAILED:7525 in getKrbInitCreds() at src/GssapiCtx.cpp:532
[000.138.391] ERR : getKrbInitCreds: Kerberos Error: (CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED))
[000.139.730] debug: Vserver's operational state: running { in isVserverRunning() at src/configuration_manager/secd_configuration_manager.cpp:2860 }
[000.139.748] debug: Logged secd.kerberos.preauth to EMS { in logEmsEventForKrbError() at src/utils/secd_ems_utils.cpp:335 }
[000.139.758] info : CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED)
[000.139.783] ERR : RESULT_ERROR_SECLIB_GSSAPI_NO_SERVER_CREDS:7129 in start() at src/GssapiCtx.cpp:653
[000.139.791] info : Failed to initiate Kerberos authentication. Trying NTLM.
[000.147.345] ERR : Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup { in LogNtStatusCode() at src/Commands/Commands.cpp:589 }
[000.147.354] ERR : SMB2 response has NT error 0xc0000016 { in ParseSmb2HeaderResponse() at src/Smb2/Smb2Utils.cpp:497 }
[000.389.375] ERR : Encountered NT error (NT_STATUS_AUTH_LOGON_FAILURE) for SMB command SessionSetup { in LogNtStatusCode() at src/Commands/Commands.cpp:565 }
[000.389.393] ERR : SMB2 response has NT error 0xc000006d { in ParseSmb2HeaderResponse() at src/Smb2/Smb2Utils.cpp:497 }
[000.389.406] ERR : RESULT_ERROR_GENERAL_FAILURE:3 in Smb2ParseSessionSetupResponse() at src/Smb2/Smb2SessionSetup.cpp:185- 重置密码成功、但一段时间后再次出现错误
- 同一错误出现在另一集群中的另一个Vserver上