Connection to DC fails in session setup with Error STATUS_LOGON_TYPE_NOT_GRANTED
Applies to
- ONTAP 9
- Data ONTAP 8 7-mode
- CIFS
Issue
- CIFS users are unable to access the shares
- SVM (or vfiler) is unable to connect to DC and session setup fails with error
Error STATUS_LOGON_TYPE_NOT_GRANTED
Messages logs :
[NODE-A:cifs.server.errorMsg:error]: CIFS: Error for server \\DCSERVER1: Response is incorrectly signed.
[NODE-A:cifs.server.errorMsg:error]: CIFS: Error for server \\DCSERVER1: Error in session setup response STATUS_LOGON_TYPE_NOT_GRANTED.
[NODE-A:cifs.server.infoMsg:info]: CIFS: Warning for server \\DCSERVER1: Connection terminated.
[NODE-A:cifs.server.errorMsg:error]: CIFS: Error for server \\DCSERVER1: CIFS Session Setup Error STATUS_LOGON_TYPE_NOT_GRANTED.
[NODE-A:cifs.smb2.client.signing:error]: Connection to server:\\DCSERVER1 failed due to mismatch in signature.
- Auth calls are rejected by DC with error
Encountered unknown NT Error (0xc000015b) for SMB command SessionSetup
- The error
0xC000015B - STATUS_LOGON_TYPE_NOT_GRANTED
indicates that access for machine over network is not allowed. - Issue was seen after change made on the group policy for the option
Access this computer from the network
. - In 7-mode
cifs domaininfo
shows vfiler is not connected to any DC's
> cifs domaininfo
NetBIOS Domain: NETAPP-INDIA
Windows Domain Name: netapp-india.com
Domain Controller Functionality: Not Available
Domain Functionality: Not Available
Forest Functionality: Not Available
Filer AD Site: Default-First-Site-Name
Not currently connected to any DCs