OS: Clustered Data ONTAP 8.x or Data ONTAP 7-Mode
CIFS shares are accessible to all clients except Windows 8 and Windows Server 2012.
All clients using Windows 8 or 2012 are affected.
The clients are not remote users across a WAN connection. Although the issue might affect remote users also, local users should be similarly affected.
SMB version 2.0 or later is enabled on the storage system.
If a packet trace is captured during session initiation, the trace might display a signed Ioctl Request
FSCTL_VALIDATE_NEGOTIATE_INFO followed by an unsigned Ioctl Response. Immediately after the exchange, a TCP reset is sent by the client:
(smb2.cmd == 11 and smb2.flags.signature == 1 and smb2.flags.response == 0) or (smb2.cmd == 11 and smb2.flags.signature == 0 and smb2.flags.response == 1) or (tcp.flags.reset == 1)
A packet trace may show a slightly different pattern in some cases. The failure may occur at a different point in the negotiation. The following filter can be helpful in identifying the problem if the able filter does not show the problem. Contact Support for assistance in reviewing the data, if needed.
(smb2.flags.signature == 1 and smb2.flags.response == 0) or (smb2.flags.signature == 0 and smb2.flags.response == 1) or (tcp.flags.reset == 1)
Clients might report any of the following errors:
Error code: 0x80004005
Error code: 0x80070035
The network path was not found
System error 2148073478 has occurred
An extended error has occurred