Unable to access CIFS share with CIFS check fail due to PREAUTH FAILED error
Applies to
- ONTAP 9
- CIFS
Issue
- Windows clients are unable to access cifs shares
- Secd logs showed the following errors:
Tue Feb 25 2025 02:05:54 +00:00 [kern_secd:info:9013] | [012.426.140] ERR : getKrbInitCreds: Kerberos Error: (CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED))
- cifs check shows DC server status as down
::> cifs check -vserver svm1
Vserver : svm1
Cifs NetBIOS Name : svm1_cifs
Cifs Status : Running
Site :
Node Name DC Server Name DC Server IP Status Status Details
--------- -------------- ------------ ------ --------------
node-01 domain.local - down SecD Error: no connections available
node-02 domain.local - down SecD Error: no connections available
- SECD:
00000011.01f0b383017f4f5f Tue May 20 2025 12:09:19 +09:00 [kern_secd:info:16009] | [017.981.491] ERR: getKrbInitCreds: Kerberos Error: (CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED))
00000011.01f0b384017f4f5f Tue May 20 2025 12:09:19 +09:00 [kern_secd:info:16009] | [017.981.506] info: CIFS server account password does not match password stored in Active Directory (KRB5KDC_ERR_PREAUTH_FAILED)
00000011.01f0b385017f4f5f Tue May 20 2025 12:09:19 +09:00 [kern_secd:info:16009] | [017.981.516] ERR: RESULT_ERROR_SECLIB_GSSAPI_NO_SERVER_CREDS: 7129 in start() at src/GssapiCtx.cpp:653