Skip to main content
NetApp Response to Russia-Ukraine Cyber Threat
In response to the recent rise in cyber threat due to the Russian-Ukraine crisis, NetApp is actively monitoring the global security intelligence and updating our cybersecurity measures. We follow U.S. Federal Government guidance and remain on high alert. Customers are encouraged to monitor the Cybersecurity and Infrastructure Security (CISA) website for new information as it develops and remain on high alert.
NetApp Knowledge Base

What can cause the secd failure: 'Error: Lookup of CIFS account name procedure failed'?

Views:
1,021
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
cifs
Last Updated:

Applies to

  • ONTAP 9
  • SMB\CIFS
  • Active Directory (AD)

Answer

  • The User does not exist (anymore) in the AD Domain
  • Any reference in the ONTAP local user database should be removed, to prevent these errors and messages

::> local-user show -vserver <vserver> -user-name <Domain\Username>

::> local-user delete -vserver <vserver> -user-name <Domain\Username>

Additional Information

  • The following messages are being logged in the secd logs.
Failure Summary:
 
00000015.03988610 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] Error: Lookup of CIFS account name procedure failed
00000015.03988611 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] [ 2 ms] Using a cached connection to dc1.domain.org
00000015.03988612 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] [ 4] Could not find Windows name 'domain\user'
00000015.03988613 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] **[ 4] FAILURE: Unexpected state: Error 6909 at file:src/utils/secd_cifs_utils.cpp func:lookupName line:422
00000015.03988614 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] **[ 4] FAILURE: Error case not correctly journaled
 
 
  • The same messages are reported, when a reference is made to a non-existing AD Domain account.
 

Pim-cluster::> local-group show-members -vserver testpim -group-name builtin\users
  (vserver cifs users-and-groups local-group show-members)

           Vserver: testpim
        Group Name: BUILTIN\Users
       Member Name: PIM-ROOT-DOMAIN\Domain Users
                    PIM-ROOT-DOMAIN\domain-user1

Pim-cluster::> local-group add-members -vserver testpim -group-name builtin\users -member-names pim-root-domain\domain-user8
  (vserver cifs users-and-groups local-group add-members)

Error: command failed: Failed to resolve name "PIM-ROOT-DOMAIN\domain-user8".

or

Pim-cluster::> local-group remove-members -vserver testpim -group-name builtin\users -member-names pim-root-domain\domain-user8
  (vserver cifs users-and-groups local-group remove-members)
Error: command failed: Failed to resolve name "PIM-ROOT-DOMAIN\domain-user8".

00000021.000a1369 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] .------------------------------------------------------------------------------.
00000021.000a136a 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |                                 RPC FAILURE:                                    |
00000021.000a136b 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |                     secd_rpc_auth_name_to_sid has failed          |
00000021.000a136c 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |                        Result = 0, RPC Result = 6909                     |
00000021.000a136d 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |                   RPC received at Tue Oct  6 18:47:59 2020       |
00000021.000a136e 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |------------------------------------------------------------------------------'
00000021.000a136f 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] Failure Summary:
00000021.000a1370 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] Error: Lookup of CIFS account name procedure failed
00000021.000a1371 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817]   [  0 ms] Using a cached connection to win-mu0liiirtol.pim-root-domain.local
00000021.000a1372 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817]   [    18] Could not find Windows name 'PIM-ROOT-DOMAIN\domain-user8'
00000021.000a1373 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] **[    18] FAILURE: Unexpected state: Error 6909 at file:src/utils/secd_cifs_utils.cpp func:lookupName line:422
00000021.000a1374 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] **[    20] FAILURE: Error case not correctly journaled

 

Scan to view the article on your device