CIFS/SMB Authentication Fails After reboot
Applies to
- ONTAP 9
- CIFS/SMB protocol environments
- Active Directory-integrated authentication
Issue
After an ONTAP reboot and Active Directory Domain Controller (ADDC) replacement, users are unable to authenticate to CIFS shares.
The issue affects all clusters and results in production outages and compliance failures.
Symptoms and Log Output:
- Unable to connect to domain controllers (
SecD errors: “noserveravailable”) - Password reset failures:
Error: command failed: Password update failed. Reason: SecD Error: noserveravailable. - Authentication errors in logs:
- Kerberos:
KRB5KDC_ERR_PREAUTH_FAILED - LDAP bind errors:
FAILURE: Unable to SASL bind to LDAP server using GSSAPI: Local error - EMS:
Unable to connect to LDAP (Active Directory) service... Result: RESULT_ERROR_SECD_NO_SERVER_AVAILABLE
- Kerberos:
- Users cannot access CIFS shares
