CVE-2022-38023が原因でFPolicyサーバを認証できません

最後の更新
PDFとして保存

Views:: 59

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nas<a>2009553496</a>

Last Updated:

環境

ONTAP 9
FPolicy
RPC_NETLOGON
CVE-2022-38023

問題

Microsoftドメインコントローラの更新後にFPolicyサーバがONTAPと通信できない。RPC_NETLOGONパイプにSEALを適用する

表示されるEMSログの例：

[CLUSTER01-01: secd: secd.strong.auth.required:alert]: Stronger authentication enforced by LDAP server for Vserver VSV-001. 4/25/2023 10:14:51 CLUSTER01-01 ERROR secd.cifsAuth.problem: vserver (VSV-001) General CIFS authentication problem. Error: User authentication procedure failed (Retries: 2) CIFS SMB2 Share mapping - Client Ip = 10.2.1.13 **[ 64] Attempt 1 FAILURE: Unexpected state: Error 6756 at file:src/FrameWork/ClientInfo.cpp func:RemoveAllSharesFromGlobalSession line:4025 **[ 64] Attempt 1 FAILURE: Pass-through authentication failed. (Status: 0xC000005E) **[ 110] Attempt 2 FAILURE: Unexpected state: Error 6756 at file:src/FrameWork/ClientInfo.cpp func:RemoveAllSharesFromGlobalSession line:4025 **[ 110] Attempt 2 FAILURE: Pass-through authentication failed. (Status: 0xC000005E)