LDAP servers unavailable after October 2026 DC patches
Applies to
- NetApp ONTAP 9
- Microsoft Active Directory (AD)
- LDAP (Lightweight Directory Access Protocol)
- CIFS/SMB
Issue
- After rolling out Domain Controller security patches in October 2026, the AD LDAP servers were marked unavailable and CIFS authentication failures began occurring.
- EMS alert:
None of the LDAP servers configured for Vserver are currently accessible via the network for LDAP service typesecd:secd.conn.auth.failure:notice]: Vserver(svm1) could not authenticate over the network to server(dc1). Error: Invalid credentials (Service: LDAP (ActiveDirectory), Operation: SiteDiscovery).- SECD errors:
AdditionalErrorMessage: 80090303: LdapErr: DSID-0C0906D1, comment: The GSSAPI target name does not match any LDAP SPN's registered for this server., data 0, v4f7c RESULT_ERROR_LDAPSERVER_INVALID_CREDENTIALS:7627 ldapSaslBindSpnego: LDAP Error (49): 'Invalid credentials'
