Skip to main content
NetApp Knowledge Base

Enabling or disabling AES encryption results in failure with Kerberos Error: KDC has no support for encryption type

Views:
827
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:

Applies to

  • ONTAP 9
  • CIFS
  • Key Distribution Center (KDC)
  • Active Directory (AD)

Issue

  • When trying to enable/disable AES the command fails :

::> vserver cifs security modify -vserver vs1 -is-aes-encryption-enabled false
Info: In order to disable CIFS AES encryption, the password for the CIFS server machine account must be reset. Enter the
username and password for the CIFS domain "NASLAB.LOCAL".
Enter your user ID: administrator
Enter your password:
Error: command failed: Password update failed. Reason: Kerberos Error: KDC has no support for encryption type.

 

  • SECD.log :

[kern_secd:info:xxx] | [xxx]  info :  [krb5 context xxx] Received error from KDC: -xxx/KDC has no support for encryption type<★★
[kern_secd:info:xxx] | [xxx]  ERR  :  CIFS server could not authenticate as 'xxx@xxx': KDC has no support for encryption type (KRB5KDC_ERR_ETYPE_NOSUPP) { in getKerberosServerCredentials() at src/utils/secd_krb_utils.cpp:435 }
[kern_secd:info:xxx] | [xxx]  ERR  :  RESULT_ERROR_KERBEROS_ETYPE_NOSUPP:7515 in getKerberosServerCredentials() at src/utils/secd_krb_utils.cpp:451
[kern_secd:info:xxx] | [xxx]  ERR  :  RESULT_ERROR_KERBEROS_ETYPE_NOSUPP:7515 in changeMachineAccountPassword() at src/utils/secd_krb_utils.cpp:720
[kern_secd:info:xxx] | [xxx]  ERR  :  RESULT_ERROR_KERBEROS_ETYPE_NOSUPP:7515 in secd_rpc_ad_change_password_1_svc_secd() at src/domain_services/secd_domain_services.cpp:1779
[kern_secd:info:xxx] | [xxx]  debug:  SecD RPC Server sending reply to RPC 5: secd_rpc_ad_change_password  { in secdSendRpcResponse() at src/server/secd_rpc_server.cpp:2262 }
[kern_secd:info:xxx] | [xxx]  ERR  :  RESULT_ERROR_CIFS_SMB_KERBEROS_ERROR:1056 in getFailureCode() at src/utils/secd_thread_task_journal.cpp:348

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.