CIFS サーバアカウントパスワードが、 Active Directory に格納されているパスワードと一致しません( krb5kdc_ERR_preauth_failed )
- Views:
- 582
- Visibility:
- Public
- Votes:
- 0
- Category:
- ontap-9
- Specialty:
- nas<a>1087595</a><a>共有にアクセス</a>できません
- Last Updated:
環境
- ONTAP 9
- CIFS / SMB
問題
- クライアントは
\\svm_ip
、またはを使用してSMB/CIFS共有にアクセスできない\\svm_ip\share_name
\\fqdn
- EMSログのエラー:
Wed Sep 27 02:50:49 +0000 [node-01: secd: secd.cifsAuth.problem:error]: vserver (svm_name) General CIFS authentication problem. Error: User authentication procedure failed CIFS SMB2 Share mapping - Client Ip = 10.79.xx.xx ... [ 3398] CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED) [ 3398] Failed to initiate Kerberos authentication. Trying NTLM. [ 3465] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup [ 3576] Encountered NT error (NT_STATUS_AUTH_LOGON_FAILURE) for SMB command SessionSetup [ 3576] Unable to connect to NetLogon service on perdc13.cii_encrypt/6paND1Yv5/XpQmorhxb0Pz9/WdPLjSxxxxx73E=/cii_encrypt (Error: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE) [ 3632] Successfully connected to ip 10.58.xx.xx, port 445 using TCP [ 3700] Successfully connected to ip 10.80.xx.xx, port 88 using TCP [ 3727] CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED) [ 3727] Failed to initiate Kerberos authentication. Trying NTLM. [ 3788] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup [ 3913] Encountered NT error (NT_STATUS_AUTH_LOGON_FAILURE) for SMB command SessionSetup [ 3913] Unable to connect to NetLogon service on pemdc01.cii_encrypt/6paND1Yv5/XpQmorhxb0Pz9/WdPLjSExxxxxxcx873E=/cii_encrypt (Error: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE) [ 4514] Successfully connected to ip 10.xx.x.xx, port 445 using TCP [ 5139] Successfully connected to ip 10.80.xx.xx, port 88 using TCP [ 5162] CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED) [ 5162] Failed to initiate Kerberos authentication. Trying NTLM. [ 6388] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup [ 9391] Unable to connect to NetLogon service on bucdc01.cii_encrypt/6paND1Yv5/XpQmorhxb0Pz9/WdPLjSEKxxxx3E=/cii_encrypt (Error: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE) **[ 9391] FAILURE: Unable to make a connection (NetLogon:SANTOS.CO...[Please refer to secd log for more detail!]
Wed Sep 27 02:50:40 +0000 [node-01: secd: secd.kerberos.preauth:error]: Kerberos pre-authentication failure due to out-of-sync machine account password for vserver (svm_name).
- セキュリティデーモンSecDログ:
00000008.005bdd68 0493a463 Wed Sep 27 2023 02:50:49 +00:00 [kern_secd:info:88xx] | [002.382.xxx] info : [krb5 context 087D0xxx] Received error from KDC: -17653xxxxx/Additional pre-authentication required