Domain user unable to authenticate to cluster using Domain-Tunnel
Applies to
- ONTAP 9
- AV Connector
- Domain Tunnel
Issue
A Domain user is defined on the AV Connector and NTLMv2 Authentication is disallowed.
2 Known Causes:
- vserver 'lm-compatibility-level' parameter is set to support 'krb' only
- Active Directory GPO disallows NTLM
This impacts anything that wants to use domain-tunnel for CIFS authentication