CIFS server connectivity issue due to Kerberos password mismatch
Applies to
ONTAP 9
Issue
- CIFS server connectivity was lost, resulting in all domain controllers appearing as "
unavailable
" on the CIFS server. - The vserver reported a "
SecD Error: no server available
" for both nodes.
::> vserver cifs check -vserver XXX
Vserver : XXX
Cifs NetBIOS Name : XXX
Cifs Status : Running
Site :
Node Name DC Server Name DC Server IP Status Status Details
--------------- -------------- --------------- ------ --------------
XXX XXX - down SecD Error: no server available
XXX XXX - down SecD Error: no server available
- Secd log:
00000011.01f0b383017f4f5f Tue May 20 2025 12:09:19 +09:00 [kern_secd:info:16009] | [017.981.491] ERR: getKrbInitCreds: Kerberos Error: (CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED))
00000011.01f0b384017f4f5f Tue May 20 2025 12:09:19 +09:00 [kern_secd:info:16009] | [017.981.506] info: CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED)
00000011.01f0b385017f4f5f Tue May 20 2025 12:09:19 +09:00 [kern_secd:info:16009] | [017.981.516] ERR: RESULT_ERROR_SECLIB_GSSAPI_NO_SERVER_CREDS: 7129 in start() at src/GssapiCtx.cpp:653