Unable to login to System Manger with the domain user account
Applies to
- ONTAP 9
- System Manager
- Active Directory User
Issue
- Unable to login to system manager or unable to access the cluster with the Active Directory account, issue is only with domain account users.
- Local users are able to access the Cluster.
- EMS log:
[secd: secd.unexpectedFailure:error]: Unexpected SecD failure in Vserver "SVM".
Details: Error: Lookup of CIFS account SID procedure failed [ 0 ms]
Using cached S-XX-XX-XXXXXXXXX-XXXXX to 'DOMAIN\USER1' mapping [ 46]
Successfully connected to ip 10.xx.xx.xxx, port 88 using TCP [ 188]
Successfully connected to ip 172.xx.xx.xx, port 88 using TCP **[ 193]
FAILURE: Could not get credentials via S4U2Self based on full Windows user name 'USER1@cii_encrypt/bjsdjsjdbjsbdsdjsjbsjsbdjsdjsbd+0=/cii_encrypt'. Access denied. [ 193]
Could not get credentials for Windows user 'USER1' or SID 'S-XX-XX-XX-XXXXXXXXXX-XXXXXX' [ 193] SID lookup failed
- Secd log:
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.292.441] ERR : RESULT_ERROR_SECLIB_GSSAPI_NO_SERVER_CREDS:7129 in start() at src/GssapiCtx.cpp:653
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.292.457] info : Failed to initiate Kerberos authentication. Trying NTLM.
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.334.733] ERR : Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup { in LogNtStatusCode() at src/Commands/Commands.cpp:589 }
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.334.744] ERR : SMB2 response has NT error 0xc0000016 { in ParseSmb2HeaderResponse() at src/Smb2/Smb2Utils.cpp:497 }
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.334.798] ERR : RESULT_ERROR_SPINCLIENT_INVALID_UID:6756 in LocateChannelInConn() at src/FrameWork/ClientInfo.cpp:3210
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.377.410] ERR : Encountered NT error (NT_STATUS_AUTH_LOGON_FAILURE) for SMB command SessionSetup { in LogNtStatusCode() at src/Commands/Commands.cpp:565 }
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.377.421] ERR : SMB2 response has NT error 0xc000006d { in ParseSmb2HeaderResponse() at src/Smb2/Smb2Utils.cpp:497 }
Mon Mar 18 2024 17:44:57 +05:30 [kern_secd:info:9676] | [000.377.428] ERR : RESULT_ERROR_GENERAL_FAILURE:3 in Smb2ParseSessionSetupResponse() at src/Smb2/Smb2SessionSetup.cpp:185