CIFS command fails with 'Kerberos Error: Incorrect net address'
Applies to
- ONTAP 9
- SMB/CIFS
Issue
Some CIFS administrative commands fail with Kerberos error (KRB5KRB_AP_ERR_BADADDR)Incorrect net address
:
- CIFS password reset returns error in event log:
Kerberos password set for 'ACCOUNT@DOMAIN.COM' failed with Incorrect net address (KRB5KRB_AP_ERR_BADADDR)
- CIFS creation fails with the following error message seen in SECD log:
Error: Machine account creation procedure failed
[ 733] Loaded the preliminary configuration.
[ 1024] Created a machine account in the domain
[ 1024] SID to name translations of Domain Users and Admins completed successfully
[ 1035] Successfully connected to ip 10.10.10.1, port 88 using TCP
[ 1067] Successfully connected to ip 10.10.10.2, port 464 using TCP
**[ 1186] FAILURE: Kerberos password set for
** '<ACCOUNT$@DOMAIN.COM>' failed with Incorrect
** net address (KRB5KRB_AP_ERR_BADADDR)
[ 1221] Deleted existing account CN=ACCOUNT$ OU=COMPUTERS
Error: command failed: Failed to create the Active Directory machine account "<CIFS_ACCOUNT>". Reason: Kerberos Error: Incorrect net address.
- CIFS password reset process fails, error found in EMS log:
secd: secd.unexpectedFailure:error: Unexpected SecD failure in Vserver "SVM_1".
Details: Error: CIFS server password reset procedure failed
[ 10 ms] Successfully connected to ip XX.XX.XX.01, port 88 using TCP
[ 24] Successfully connected to ip XX.XX.XX.01, port 88 using TCP
[ 47] Successfully connected to ip XX.XX.XX.05, port 389 using TCP
[ 49] Entry for host-address: XX.XX.XX.05 not found in the current source: FILES.
Ignoring and trying next available source
[ 54] Successfully connected to ip XX.XX.XX.06, port 88 using TCP
[ 83] Successfully connected to ip XX.XX.XX.06, port 464 using TCP **
[ 123] FAILURE: Kerberos password set for 'SVM_1$@DOMAIN.COM' failed with Incorrect net address (KRB5KRB_AP_ERR_BADADDR)