Intermittent CIFS Authorization failure
Applies to
- ONTAP 9
- CIFS
- Active Directory
Issue
- CIFS Authorization intermittently fails
- Domain user is active
- CIFS machine account is active
- The login-cifs command is succesfull :
cluster1::*>vserver services access-check authentication login-cifs -node <node_name> -vserver <Vserver_name> -user Domain\user
- In
EMS Log:
[?] Mon Feb 07 14:57:34 +0100 [<node_name>: secd: secd.cifsAuth.problem:error]: vserver (<Vserver_Name>) General CIFS authentication problem. Error: Ontap admin cifs authentication basic procedure failed (Retries: 2) **[ 3263] Attempt 1 FAILURE: Unexpected state: Error 6776 at file:src/FrameWork/Socket.cpp func:ReceiveDataOnSocket line:1233 **[ 3263] Attempt 1 FAILURE: Pass-through authentication request failed.
- In
Secd Log:
Mon Feb 07 2022 14:57:34 +01:00 [kern_secd:info:8995] | [000.261.243] ERR : SMB2 response has NT error 0x103 { in ParseSmb2HeaderResponse() at src/Smb2/Smb2Utils.cpp:350 }Mon Feb 07 2022 14:57:34 +01:00 [kern_secd:info:8995] | [009.716.488] ERR : NetrRpcFunc failed with error: 6776 and ntstatus 0x103 { in NetrRpcFunc() at src/Actions/MsrpcServices.cpp:3252 }Mon Feb 07 2022 14:57:34 +01:00 [kern_secd:info:8995] | [009.716.493] ERR : RESULT_ERROR_SPINCLIENT_COMMAND_TIMED_OUT:6776 in NetrRpcFunc() at src/Actions/MsrpcServices.cpp:3255- In Packet Trace :
Filter - smb2.nt_status == 0x00000103
88471 2022-02-07 14:57:34.096756 192.168.0.25 192.168.0.201 SMB2 Read Request Len:8192 Off:0 File: netlogon 0x00006c46d800001d
88473 2022-02-07 14:57:34.108730 192.168.0.201 192.168.0.25 SMB2 Read Response, Error: STATUS_PENDING 0x00006c46d800001d