Microsoft Active Directoryコンピュータアカウントが無効なためCIFS共有にアクセスできない
環境
- ONTAP 9
- CIFS
- Microsoft Active Directory（AD）
問題
ユーザがWindowsユーザ名を使用してCIFS共有やONTAP CLIへのSSHにアクセスしたり、System Managerにアクセスしたりすることはできません。
認証に失敗するというエラーがEMSに記録されます。
secd.cifsAuth.problem: vserver (vserver) General CIFS authentication problem. Error: Ontap admin cifs authentication basic procedure failed
アカウントが無効になっているため、コマンドを実行してユーザを認証すると、ドメインコントローラに接続できません。
cluster::> vserver security file-directory show-effective-permissions -vserver svm1 -win-user-name user1 -path /vol/shared
Vserver: svm1 (internal ID: 5)
Error: Lookup of CIFS account name procedure failed
...
using TCP
[ 6570] Clients credentials have been revoked
(KRB5KDC_ERR_CLIENT_REVOKED)
[ 6570] Failed to initiate Kerberos authentication. Trying NTLM.
[ 6657] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED)
for SMB command SessionSetup
[ 6744] Encountered NT error (NT_STATUS_AUTH_ACCOUNT_DISABLED)
for SMB command SessionSetup
[ 6744] Unable to connect to LSA service on
xxxxxxxx.xxxx.com (Error:
RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE)
[ 6830] Successfully connected to ip 10.237.200.24, port 445
using TCP
[ 6922] Clients credentials have been revoked
(KRB5KDC_ERR_CLIENT_REVOKED)
[ 6923] Failed to initiate Kerberos authentication. Trying NTLM.
[ 7007] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED)
for SMB command SessionSetup
[ 7094] Encountered NT error (NT_STATUS_AUTH_ACCOUNT_DISABLED)
for SMB command SessionSetup
[ 7094] Unable to connect to LSA service on
xxxxxxxx.xxxx.com (Error:
RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE)
[ 7181] Successfully connected to ip 10.238.113.44, port 445
using TCP
[ 7272] Clients credentials have been revoked
(KRB5KDC_ERR_CLIENT_REVOKED)
[ 7273] Failed to initiate Kerberos authentication. Trying NTLM.
[ 7358] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED)
for SMB command SessionSetup
[ 7445] Encountered NT error (NT_STATUS_AUTH_ACCOUNT_DISABLED)
for SMB command SessionSetup
[ 7445] Unable to connect to LSA service on
xxxxxxxx.xxxx.com (Error:
RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE)
**[ 7445] FAILURE: Unable to make a connection
** (xxxxxxxx.xxxx.com), Result:
** RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE
[ 7446] Could not find Windows name 'user1'
[ 7446] CIFS name lookup failed
Error: show failed: Failed to convert Windows name to SID. Reason: "SecD Error: no connections available".