CONTAP-54647: CIFS authentication fails until manual rediscovery
Issue
- CIFS Vserver not accessible due to lack of credentials and KRB5_CONFIG_BADFORMAT
- New CIFS sessions will fail
- EMS:
Mon Nov 09 08:29:37 CET [clus1-02: secd: secd.cifsAuth.problem:error]: vserver (VS1) General CIFS authentication problem. Error: User authentication procedure failed CIFS SMB2 Share mapping - Client Ip = 10.10.10.11 **[ 2] FAILURE: CIFS authentication failed
- SECD:
ERR : RESULT_ERROR_SECLIB_GSSAPI_NO_SERVER_CREDS:7129 in acceptContext() at src/GssapiCtx.cpp:182 ERR : acceptContext: GSSAPI Error: (d0000) ERR : RESULT_ERROR_SECLIB_GSSAPI_NO_SERVER_CREDS:7129 in acceptContext() at src/SpnegoCtx.cpp:248 ERR : RESULT_ERROR_SECLIB_GSSAPI_NO_SERVER_CREDS:7129 in secd_rpc_auth_extended_1_svc() at src/authentication/secd_rpc_auth.cpp:1221 ERR : CIFS authentication failed { in secd_rpc_auth_extended_1_svc() at src/authentication/secd_rpc_auth.cpp:1249 } debug: SecD RPC Server sending reply to RPC 151: secd_rpc_auth_extended { in secdSendRpcResponse() at src/server/secd_rpc_server.cpp:2070 } ERR : RESULT_ERROR_SECLIB_GSSAPI_NO_SERVER_CREDS:7129 in getFailureCode() at src/utils/secd_thread_task_journal.cpp:348 [kern_secd:info:12745] | [000.006.626] ERR : RESULT_ERROR_KERBEROS_UNKNOWN_ERROR:7556 in getKrbInitCreds() at src/GssapiCtx.cpp:487 [kern_secd:info:12745] | [000.006.644] ERR : getKrbInitCreds: Kerberos Error: (Improper format of Kerberos configuration file (KRB5_CONFIG_BADFORMAT)) [kern_secd:info:12745] | [000.006.678] info : Improper format of Kerberos configuration file (KRB5_CONFIG_BADFORMAT)