ACL permission change fails with error "Cannot determine whether the computer is part of a domain"
Applies to
- ONTAP 9
- LDAP
Issue
- ACL permissions change fails with the following error message:
The program cannot open the required dialog box because it cannot determine whether the computer named "host's FQDN" is joined to a domain. Close this message and try again.
- Although the
cifs domain password reset
command executes successfully, the issue persists. - In the SECD log, a Kerberos ticket cannot be found, and the following error is returned: "
Server not found in Kerberos database.
"
Example Indicators:
Discovery returned ldap1.domain.local (XX.XX.XX.XX)
Entry for host-address: XX.XX.XX.XX not found in any of the available sources
Requesting tickets for ldap/ XX.XX.XX.XX @domain.local
Error code: -1765328377/Server not found in Kerberos database
AD-LDAP SASL bind failed. Trying again with a new password.