删除 CIFS 服务器的计算机帐户导致其无法向 DC 进行身份验证

最后更新
另存为PDF

Views:: 56

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nas

Last Updated:

适用于

ONTAP 9
Active Directory

问题

使用已从 AD 中删除计算机帐户的 SVM 时，无法针对 Active Directory 进行身份验证
可能出现多种症状：
- 无法为共享访问创建 CIFS 会话
- 基于域的身份验证无法访问 CLI 或 System Manager
  - svm-01 ERROR secd.cifsAuth.problem: vserver (svm-01) General CIFS authentication problem. Error: Ontap admin cifs authentication basic procedure failed
EMS：

[ 1042] Encountered NT error (NT_STATUS_AUTH_LOGON_FAILURE) for SMB command SessionSetup [ 1042] Unable to connect to NetLogon service on xyz.xyz.net (Error: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE) [ 1157] Successfully connected to ip 1.2.x.135, port 445 using TCP [ 1290] Successfully connected to ip 1.3.x.167, port 88 using TCP [ 1305] Unknown user (KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN) [ 1305] Failed to initiate Kerberos authentication. Trying NTLM. [ 1414] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup [ 1522] Encountered NT error (NT_STATUS_AUTH_LOGON_FAILURE) for SMB command SessionSetup [ 1522] Unable to connect to NetLogon service on xyz.xyz.net (Error: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE) [ 3525] TCP connection to ip 1.4.x.137, port 445 failed: Operation timed out. [ 3525] Unable to connect to NetLogon service on xyz.xyz.net (Error: RESULT_ERROR_SPINCLIENT_UNABLE_TO_RESOLVE_SERVER) [ 5535] TCP connection to ip 10.103.17.139, port 445 failed: Operation timed out. [ 5535] Unable to connect to NetLogon service on xyz.xyz.net (Error: RESULT_ERROR_SPINCLIENT_UNABLE_TO_RESOLVE_SERVER) [ 7552] TCP connection to ip 1.4.x.141, port 445 failed: Operation timed out. [ 7552] Unable to connect to NetLogon service on 1.5.x.net (Error: RESULT_ERROR_SPINCLIENT_UNABLE_TO_RESOLVE_SERVER) [ 9573] TCP connection to ip 1.6.x.180, port 445 failed: Operation timed out. [ 9573] Unable to connect to NetLogon service on xyz.xyz.xyz.net (Error: RESULT_ERROR_SPINCLIENT_UNABLE_TO_RESOLVE_SERVER) **[ 9573] FAILURE: Unable to make a connection (NetLogon:XYZ.XYZ.NET)...[Please refer to secd log for more detail!]