What can cause the secd failure: 'Error: Lookup of CIFS account name procedure failed'

Last updated
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 2,529

Visibility:: Public

Votes:: 1

Category:: ontap-9

Specialty:: nas

Last Updated:

Applies to

ONTAP 9
SMB\CIFS
Active Directory (AD)

Answer

The User does not exist (anymore) in the AD Domain
Any reference in the ONTAP local user database should be removed, to prevent these errors and messages

::> local-user show -vserver <vserver> -user-name <Domain\Username>

::> local-user delete -vserver <vserver> -user-name <Domain\Username>

Additional Information

The following messages are being logged in the secd logs.

Failure Summary:

00000015.03988610 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] Error: Lookup of CIFS account name procedure failed

00000015.03988611 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] [ 2 ms] Using a cached connection to dc1.domain.org

00000015.03988612 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] [ 4] Could not find Windows name 'domain\user'

00000015.03988613 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] **[ 4] FAILURE: Unexpected state: Error 6909 at file:src/utils/secd_cifs_utils.cpp func:lookupName line:422

00000015.03988614 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] **[ 4] FAILURE: Error case not correctly journaled

The same messages are reported, when a reference is made to a non-existing AD Domain account.

Pim-cluster::> local-group show-members -vserver testpim -group-name builtin\users (vserver cifs users-and-groups local-group show-members)

Vserver: testpim Group Name: BUILTIN\Users Member Name: PIM-ROOT-DOMAIN\Domain Users PIM-ROOT-DOMAIN\domain-user1

Pim-cluster::> local-group add-members -vserver testpim -group-name builtin\users -member-names pim-root-domain\domain-user8 (vserver cifs users-and-groups local-group add-members)

Error: command failed: Failed to resolve name "PIM-ROOT-DOMAIN\domain-user8".

Pim-cluster::> local-group remove-members -vserver testpim -group-name builtin\users -member-names pim-root-domain\domain-user8 (vserver cifs users-and-groups local-group remove-members) Error: command failed: Failed to resolve name "PIM-ROOT-DOMAIN\domain-user8".

00000021.000a1369 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] .------------------------------------------------------------------------------. 00000021.000a136a 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] | RPC FAILURE: | 00000021.000a136b 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] | secd_rpc_auth_name_to_sid has failed | 00000021.000a136c 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] | Result = 0, RPC Result = 6909 | 00000021.000a136d 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] | RPC received at Tue Oct 6 18:47:59 2020 | 00000021.000a136e 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |------------------------------------------------------------------------------' 00000021.000a136f 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] Failure Summary: 00000021.000a1370 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] Error: Lookup of CIFS account name procedure failed 00000021.000a1371 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] [ 0 ms] Using a cached connection to win-mu0liiirtol.pim-root-domain.local 00000021.000a1372 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] [ 18] Could not find Windows name 'PIM-ROOT-DOMAIN\domain-user8' 00000021.000a1373 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] **[ 18] FAILURE: Unexpected state: Error 6909 at file:src/utils/secd_cifs_utils.cpp func:lookupName line:422 00000021.000a1374 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] **[ 20] FAILURE: Error case not correctly journaled