AV Connector install failed with service account member of local admin group
Applies to
- ONTAP 9
- AV Connector 1.0.6
- AV Connector 1.0.7
Issue
- AV connector installation fails with error: "The service account must have administrative rights to the local machine"
- Same error is received even running installation with administrator privileges
- Service account is already member of local administrator group. Issue persists even by adding domain account directly:
Vserver: Svm1
Scanner Pool: Pool1
Applied Policy: idle
Current Status: off
Cluster on Which Policy Is Applied: -
Scanner Pool Config Owner: cluster
List of IPs of Allowed Vscan Servers: 10.0.0.1, 10.0.0.2
List of Host Names of Allowed Vscan Servers: vscan1.domain.com,
vscan2.domain.com
List of Privileged Users: domain\vscan_user
- Packet Trace:
2953 KRB5 1434732973 1434733288 2243055000 14 krbtgt,domain vscan_user AS-REQ
2955 KRB5 2243056460 2243056860 1434733288 14 krbtgt,domain.com vscan_user AS-REP
2963 KRB5 3919473281 3919475149 3830882386 15 krbtgt,domain.com,hostname TGS-REQ
2966 KRB5 3830883846 3830884322 3919475149 15 hostname vscan_user TGS-REP
2976 KRB5 3247395272 3247403148 429417592 16 krbtgt,domain.com,hostname,krbtgt,domain.com TGS-REQ
2997 KRB5 429417592 429417685 3247403148 16 hostname KRB Error: KRB5KRB_AP_ERR_BADMATCH