NTLM authentication fails due to the filer receiving "c0000418" from DC
Applies to
- ONTAP 9
- NTLM authentication
Issue
Despite using a version of ONTAP supporting RPC sealing for Netlogon RPC traffic, NTLM authentication fails with the error:
ERROR secd.cifsAuth.problem: vserver (svm1) General CIFS authentication problem.
Error: User authentication procedure failed (Retries: 2)
CIFS SMB2 Share mapping - Client Ip = xx.xx.xx.x
**[ 31] Attempt 1 FAILURE: Unexpected state: Error 6756 at file:src/FrameWork/ClientInfo.cpp func:RemoveAllSharesFromGlobalSession line:4025
**[ 31] Attempt 1 FAILURE: Pass-through authentication failed. (Status: 0xC000005E)
**[ 2107] Attempt 2 FAILURE: Unexpected state: Error 6756 at file:src/FrameWork/ClientInfo.cpp func:RemoveAllSharesFromGlobalSession line:4025
**[ 2107] Attempt 2 FAILURE: Pass-through authentication failed. (Status: 0xC000005E)
[2107 ms] Login attempt by domain user 'domain\username' using NTLMv2 style security
[ 2107] No servers available for MS_NETLOGON, vserver: 53, domain: domain.com.
[ 2116] Hostname found in Name Service Cache
[ 2124] Successfully connected to ip xx.xxx.xx.xx, port 445 using TCP
[ 2135] Successfully authenticated with DC domain.com
**[ 2180] FAILURE: Pass-through authentication failed. (Status: 0xC000005E)
[ 2180] CIFS authentication failed
[ 2185] Retry requested, but maximum attempts (3) reached; giving up.