「krb5kdc_ERR_C_PRINCIAL_UNKNOWN」エラーでDC接続が失敗すると、CIFS問題が発生します。

環境

• ONTAP 9
• Kerberos
• CIFS

問題

• ユーザにCIFS共有へのアクセス権がない
• マシンアカウントを使用しているドメインコントローラへの接続を示すログがエラーKRB5KDC_ERR_C_PRINCIPAL_UNKNOWN で失敗します。

8/18/2022 09:15:58 cluster-01
ERROR secd.cifsAuth.problem: vserver (svm_cifs) General CIFS authentication problem. Error: User authentication procedure failed
CIFS SMB2 Share mapping - Client Ip = 192.168.1.1
[ 0 ms] Login attempt by domain user 'netapp\cifs' using NTLMv1 style security
[ 0] Successfully connected to ip 192.168.0.1, port 445 using TCP
[ 8] Unknown user (KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN)
[ 8] Failed to initiate Kerberos authentication. Trying NTLM.
[ 9] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup
[ 10] Encountered NT error (NT_STATUS_AUTH_LOGON_FAILURE) for SMB command SessionSetup
[ 10] Unable to connect to NetLogon service on dcsvr.tekunasas.local (Error: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE)
[ 11] No servers available for MS_NETLOGON, vserver: 6, domain: netapp.local.
**[ 11] FAILURE: Unable to make a connection (NetLogon:NETAPP.LOCAL), result: 6940
[ 12] CIFS authentication failed

• Active Directory側で、CIFSサーバのマシンアカウントが見つからない