CIFS認証エラーが断続的に発生する
環境
- ONTAP 9
- CIFS
- Active Directory
問題
- CIFS許可が断続的に失敗する
- ドメインユーザはアクティブです
- CIFSマシンアカウントがアクティブです
- login-cifsコマンドが正常に実行されました。
cluster1::*>vserver services access-check authentication login-cifs -node <node_name> -vserver <Vserver_name> -user Domain\user
EMS Log
で:
[?] Mon Feb 07 14:57:34 +0100 [<node_name>: secd: secd.cifsAuth.problem:error]: vserver (<Vserver_Name>) General CIFS authentication problem. Error: Ontap admin cifs authentication basic procedure failed (Retries: 2) **[ 3263] Attempt 1 FAILURE: Unexpected state: Error 6776 at file:src/FrameWork/Socket.cpp func:ReceiveDataOnSocket line:1233 **[ 3263] Attempt 1 FAILURE: Pass-through authentication request failed.
Secd Log
で:
Mon Feb 07 2022 14:57:34 +01:00 [kern_secd:info:8995] | [000.261.243] ERR : SMB2 response has NT error 0x103 { in ParseSmb2HeaderResponse() at src/Smb2/Smb2Utils.cpp:350 }
Mon Feb 07 2022 14:57:34 +01:00 [kern_secd:info:8995] | [009.716.488] ERR : NetrRpcFunc failed with error: 6776 and ntstatus 0x103 { in NetrRpcFunc() at src/Actions/MsrpcServices.cpp:3252 }
Mon Feb 07 2022 14:57:34 +01:00 [kern_secd:info:8995] | [009.716.493] ERR : RESULT_ERROR_SPINCLIENT_COMMAND_TIMED_OUT:6776 in NetrRpcFunc() at src/Actions/MsrpcServices.cpp:3255
- Packet Traceの場合:
フィルタ- SMB2.NT_STATUS== 0x00000103
88471 2022-02-07 14:57:34.096756 192.168.0.25 192.168.0.201 SMB2 Read Request Len:8192 Off:0 File: netlogon 0x00006c46d800001d
88473 2022-02-07 14:57:34.108730 192.168.0.201 192.168.0.25 SMB2 Read Response, Error: STATUS_PENDING 0x00006c46d800001d