ドメインでのグループポリシー変更が原因で CIFS 共有へのアクセスが拒否されました

最後の更新
PDFとして保存

Views:: 42

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nas

Last Updated:

環境

ONTAP 9
CIFS / SMB

問題

cifs 共有へのアクセスが拒否されています

secd.log抽出：

debug:  Establishing a new SChannel key for domainserver  { in ensureSChannelKeyEstablished() at src/connection_manager/secd_connection.cpp:357 }

debug:  AES key for secure channel: disabled  { in getIsAesSecureChannelEnabled() at src/configuration_manager/secd_configuration_manager.cpp:2606 }

ERR  :  Encountered NT error (NT_STATUS_PENDING) for SMB command Read  { in LogNtStatusCode() at src/Commands/Commands.cpp:369 }

ERR : SMB2 response has NT error 0x103 { in ParseSmb2HeaderResponse() at src/Smb2/Smb2Utils.cpp:497 }

debug:  SIGNING: The response from the server is async. NOTE: async responses are not signed.  { in ParseSmb2HeaderResponse() at src/Smb2/Smb2Utils.cpp:536 }

info : Async Read response received { in Smb2Read() at src/Smb2/Smb2Read.cpp:272 }

ERR  :  NetrServerAuthenticate2 failed with strong key. Result: 0 Error: NT_STATUS_ACCESS_DENIED(0xC0000022)  { in NetrEstablishSecureChannel() at src/Actions/MsrpcServices.cpp:4494 }

ERR : RESULT_ERROR_GENERAL_FAILURE:3 in NetrEstablishSecureChannel() at src/Actions/MsrpcServices.cpp:4529
ERR : NetrServerAuthenticate2 failed with weak key. Error: NT_STATUS_DOWNGRADE_DETECTED(0xC0000388)

ERR  :  RESULT_ERROR_GENERAL_FAILURE:3 in ensureSChannelKeyEstablished() at src/connection_manager/secd_connection.cpp:359

ERR : RESULT_ERROR_GENERAL_FAILURE:3 in connect() at src/connection_manager/secd_connection.cpp:1680

debug:  Removing SMB2 session: serverName = domain_server.example.com, Uid = 123456755559999  { in RemoveSmb2SessionFromGlobalSessionsMap() at src/FrameWork/ClientInfo.cpp:2736 }

ERR  :  RESULT_ERROR_SPINCLIENT_INVALID_UID:6756 in RemoveAllSharesFromGlobalSession() at src/FrameWork/ClientInfo.cpp:4037

debug:  It is OK to not find Uid here, as we have already cleanly removed this session and its shares and files  { in ~Smb2Session() at src/FrameWork/../Include/ClientInfo.h:202 }

debug:  Marking NetLogon connection to IP 10.1.1.228 unusable for vserver 41  { in makeConnectionAttempt() at src/connection_manager/secd_connection_manager.cpp:1088 }

info :  Unable to connect to NetLogon service on domain_server.example.com (Error: RESULT_ERROR_GENERAL_FAILURE) { in addFailedConnectionJournal() at src/connection_manager/secd_connection_manager.cpp:582 }

ERR  :  RESULT_ERROR_GENERAL_FAILURE:3 in makeConnectionAttempt() at src/connection_manager/secd_connection_manager.cpp:1098