Receiving required key not available error when mounting cifs share using Kerberos

Applies to

• ONTAP 9 and later
• CIFS mount on Linux clients

Issue

• When mounting a CIFS share using kerberos authentication from a Unix client, the mount fails with a "Required key not available" error.

Example:

[root@client ~]# mount -t cifs -o username=user@domain.com,password='xxxx',sec=krb5,nounix,iocharset=utf8,file_mode=0777,dir_mode=0777 //cifserver/share /mnt
mount error(126): Required key not available
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

• When mounting cifs share  without using sec=krb5 option(where password needs to typed manually for username), scripts folder is accessible.
• When mounting cifs share using with sec=krb5 option(where password is not typed manually), scripts folder is not accessible.

Error seen:
abdcd@xyz:~$ ls -la /mnt/test/dev-krb/scripts
ls: cannot access '/mnt/test/dev-krb/scripts': Required key not available

symlink details
Vserver   UNIX Path CIFS Share CIFS Path Remote NetBIOS Server Name Local or Wide Symlink Home Directory
netapp /h/abc/ abc  /  netapp  widelink  falseCollect traces while mounting with and without sec=krb5 for review.