CIFS creation fails with KDC Unreachable due service policy misconfiguration
Applies to
- ONTAP 9.11.1 and later
- CIFS
- Service policy
Issue
CIFS creation fails:
::>cifs create -vserver vserver1 -cifs-server COMP1 -domain domain -ou CN=Computers -default-site "" -status-admin upError: Machine account creation procedure failed[ 9611] Loaded the preliminary configuration.[ 9628] TCP connection to ip 10.xx.xx.xx, port 88 failed: Network is unreachable.[ 9629] TCP connection to ip 10.xx.xx.xx, port 88 failed: Network is unreachable.[ 9631] TCP connection to ip 10.xx.xx.xx, port 88 failed: Network is unreachable.[ 9632] TCP connection to ip 10.xx.xx.xx, port 88 failed: Network is unreachable.[ 9634] FAILURE: Could not authenticate as 'user1@domain': Cannot contact any KDC for requested realm (KRB5_KDC_UNREACH)Error: command failed: Failed to create the Active Directory machine account "COMP1". Reason: Kerberos Error: KDC Unreachable.