Skip to main content
NetApp Knowledgebase

What can cause the secd failure: 'Error: Lookup of CIFS account name procedure failed'?

Views:
128
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
cifs
Last Updated:

Applies to

  • ONTAP 9
  • CIFS
  • Active Directory (AD)

Answer

  • The User does not exist (anymore) in the AD Domain
  • Any reference in the ONTAP local user database should be removed, to prevent these errors and messages

::> local-user show -vserver <vserver> -user-name <Domain\Username>

::> local-user delete -vserver <vserver> -user-name <Domain\Username>

Additional Information

The following messages are being logged in the secd logs.

Failure Summary:
 
00000015.03988610 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] Error: Lookup of CIFS account name procedure failed
00000015.03988611 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] [ 2 ms] Using a cached connection to dc1.domain.org
00000015.03988612 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] [ 4] Could not find Windows name 'domain\user'
00000015.03988613 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] **[ 4] FAILURE: Unexpected state: Error 6909 at file:src/utils/secd_cifs_utils.cpp func:lookupName line:422
00000015.03988614 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] **[ 4] FAILURE: Error case not correctly journaled
 
 
The same messages are reported, when a reference is made to a non-existing AD Domain account.
 

Pim-cluster::> local-group show-members -vserver testpim -group-name builtin\users
  (vserver cifs users-and-groups local-group show-members)

           Vserver: testpim
        Group Name: BUILTIN\Users
       Member Name: PIM-ROOT-DOMAIN\Domain Users
                    PIM-ROOT-DOMAIN\domain-user1

Pim-cluster::> local-group add-members -vserver testpim -group-name builtin\users -member-names pim-root-domain\domain-user8
  (vserver cifs users-and-groups local-group add-members)

Error: command failed: Failed to resolve name "PIM-ROOT-DOMAIN\domain-user8".

or

Pim-cluster::> local-group remove-members -vserver testpim -group-name builtin\users -member-names pim-root-domain\domain-user8
  (vserver cifs users-and-groups local-group remove-members)
Error: command failed: Failed to resolve name "PIM-ROOT-DOMAIN\domain-user8".

 

 

00000021.000a1369 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] .------------------------------------------------------------------------------.
00000021.000a136a 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |                                 RPC FAILURE:                                    |
00000021.000a136b 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |                     secd_rpc_auth_name_to_sid has failed          |
00000021.000a136c 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |                        Result = 0, RPC Result = 6909                     |
00000021.000a136d 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |                   RPC received at Tue Oct  6 18:47:59 2020       |
00000021.000a136e 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |------------------------------------------------------------------------------'
00000021.000a136f 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] Failure Summary:
00000021.000a1370 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] Error: Lookup of CIFS account name procedure failed
00000021.000a1371 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817]   [  0 ms] Using a cached connection to win-mu0liiirtol.pim-root-domain.local
00000021.000a1372 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817]   [    18] Could not find Windows name 'PIM-ROOT-DOMAIN\domain-user8'
00000021.000a1373 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] **[    18] FAILURE: Unexpected state: Error 6909 at file:src/utils/secd_cifs_utils.cpp func:lookupName line:422
00000021.000a1374 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] **[    20] FAILURE: Error case not correctly journaled