ドメインユーザアカウントでSystem Mangerにログインできない
環境
- ONTAP 9
- System Manager
- Active Directoryユーザ
問題
- System Managerにログインできないか、Active Directoryアカウントでクラスタにアクセスできません。問題はドメインアカウントユーザのみで構成されています。
- ローカルユーザがクラスタにアクセスできる。
- EMSログ:
[secd: secd.unexpectedFailure:error]: Unexpected SecD failure in Vserver "SVM".
Details: Error: Lookup of CIFS account SID procedure failed [ 0 ms]
Using cached S-XX-XX-XXXXXXXXX-XXXXX to 'DOMAIN\USER1' mapping [ 46]
Successfully connected to ip 10.xx.xx.xxx, port 88 using TCP [ 188]
Successfully connected to ip 172.xx.xx.xx, port 88 using TCP **[ 193]
FAILURE: Could not get credentials via S4U2Self based on full Windows user name 'USER1@cii_encrypt/bjsdjsjdbjsbdsdjsjbsjsbdjsdjsbd+0=/cii_encrypt'. Access denied. [ 193]
Could not get credentials for Windows user 'USER1' or SID 'S-XX-XX-XX-XXXXXXXXXX-XXXXXX' [ 193] SID lookup failed
- SecDログ:
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.292.441] ERR : RESULT_ERROR_SECLIB_GSSAPI_NO_SERVER_CREDS:7129 in start() at src/GssapiCtx.cpp:653
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.292.457] info : Failed to initiate Kerberos authentication. Trying NTLM.
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.334.733] ERR : Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup { in LogNtStatusCode() at src/Commands/Commands.cpp:589 }
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.334.744] ERR : SMB2 response has NT error 0xc0000016 { in ParseSmb2HeaderResponse() at src/Smb2/Smb2Utils.cpp:497 }
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.334.798] ERR : RESULT_ERROR_SPINCLIENT_INVALID_UID:6756 in LocateChannelInConn() at src/FrameWork/ClientInfo.cpp:3210
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.377.410] ERR : Encountered NT error (NT_STATUS_AUTH_LOGON_FAILURE) for SMB command SessionSetup { in LogNtStatusCode() at src/Commands/Commands.cpp:565 }
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.377.421] ERR : SMB2 response has NT error 0xc000006d { in ParseSmb2HeaderResponse() at src/Smb2/Smb2Utils.cpp:497 }
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.377.428] ERR : RESULT_ERROR_GENERAL_FAILURE:3 in Smb2ParseSessionSetupResponse() at src/Smb2/Smb2SessionSetup.cpp:185