Show-creds fails with "CIFS server account password does not match password stored in Active Directory"
Applies to
- ONTAP 9
- CIFS
Issue
- All access to CIFS is down.
- Running a "diag secd authentication show-creds" for a user fails with the following errors:
Successfully connected to 10.7.66.10:88 using TCP
CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED)
Failed to initiate Kerberos authentication. Trying NTLM.
Encountered NT error (NT_STATUS_AUTH_LOGON_FAILURE) for SMB command Unknown
Logon attempt failed with NT Status: 0xc000006d
Unable to connect to LSA service on vmimstdom002.sonangol.pvt (Error: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE)
Successfully connected to 10.1.35.13:445 using TCP
Successfully connected to 10.7.66.10:88 using TCP
CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED)
Failed to initiate Kerberos authentication. Trying NTLM.
Encountered NT error (NT_STATUS_AUTH_LOGON_FAILURE) for SMB command Unknown
Logon attempt failed with NT Status: 0xc000006d
Unable to connect to LSA service on vmimstdom003.sonangol.pvt (Error: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE)
Successfully connected to 10.73.255.23:445 using TCP
Successfully connected to 10.7.66.10:88 using TCP
CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED)
Failed to initiate Kerberos authentication. Trying NTLM.
Encountered NT error (NT_STATUS_AUTH_LOGON_FAILURE) for SMB command Unknown
Logon attempt failed with NT Status: 0xc000006d
Unable to connect to LSA service on srvbl03dc001.sonangol.pvt (Error: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE)
No servers available for MS_LSA, vserver: 5, domain: sonangol.pvt.
FAILURE: Unable to make a connection (LSA:SONANGOL.PVT), result: 6940
Could not find Windows SID 'S-1-5-21-451066337-507558778-3870338749-175775'
SID lookup failed