CIFS Shares Inaccessible After SVM Migration Due to Kerberos Authentication Failure
Applies to
- ONTAP 9
- CIFS
Issue
After migrating a Storage Virtual Machine (SVM) and joining its CIFS server to the Active Directory domain, end users were unable to connect to CIFS shares. The following errors were observed:
- Windows error messages:
- System error 59 has occurred. An unexpected network error occurred.
- System error 1311 has occurred. We can't sign you in with this credential because your domain isn't available.
- net view showing error 53
- ONTAP logs:
secd.cifsAuth.problem: vserver(SVM1) General CIFS authentication problem. Error: User authentication procedure failed (Retries:2)...Pass-through authentication failed. (NTStatus:NT_STATUS_NO_LOGON_SERVERS(0xc000005e))...[secd.kerberos.tktnyv:error]: Kerberos client ticket not yet valid for vserver(SVM1)....etKrbInitCreds: Kerberos Error: (Unknown user (KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN))
- Packet traces showed both Kerberos and NTLM authentication attempts failing.
