What can cause the secd failure: 'Error: Lookup of CIFS account name procedure failed'
Applies to
- ONTAP 9
- SMB\CIFS
- Active Directory (AD)
Answer
- The User does not exist (anymore) in the AD Domain
- Any reference in the ONTAP local user database should be removed, to prevent these errors and messages
::> local-user show -vserver <vserver> -user-name <Domain\Username>
::> local-user delete -vserver <vserver> -user-name <Domain\Username>
Additional Information
- The following messages are being logged in the secd logs.
Failure Summary:[kern_secd:info:9738] Error: Lookup of CIFS account name procedure failed[kern_secd:info:9738] [ 2 ms] Using a cached connection to dc1.domain.org[kern_secd:info:9738] [ 4] Could not find Windows name 'domain\user'[kern_secd:info:9738] **[ 4] FAILURE: Unexpected state: Error 6909 at file:src/utils/secd_cifs_utils.cpp func:lookupName line:422[kern_secd:info:9738] **[ 4] FAILURE: Error case not correctly journaled- The same messages are reported, when a reference is made to a non-existing AD Domain account.
Pim-cluster::> local-group show-members -vserver testpim -group-name builtin\users
(vserver cifs users-and-groups local-group show-members)
Vserver: testpim
Group Name: BUILTIN\Users
Member Name: PIM-ROOT-DOMAIN\Domain Users
PIM-ROOT-DOMAIN\domain-user1
Pim-cluster::> local-group add-members -vserver testpim -group-name builtin\users -member-names pim-root-domain\domain-user8
(vserver cifs users-and-groups local-group add-members)
Error: command failed: Failed to resolve name "PIM-ROOT-DOMAIN\domain-user8".
or
Pim-cluster::> local-group remove-members -vserver testpim -group-name builtin\users -member-names pim-root-domain\domain-user8
(vserver cifs users-and-groups local-group remove-members)
Error: command failed: Failed to resolve name "PIM-ROOT-DOMAIN\domain-user8".
[kern_secd:info:9817] .------------------------------------------------------------------------------.
[kern_secd:info:9817] | RPC FAILURE: |
[kern_secd:info:9817] | secd_rpc_auth_name_to_sid has failed |
[kern_secd:info:9817] | Result = 0, RPC Result = 6909 |
[kern_secd:info:9817] | RPC received at Tue Oct 6 18:47:59 2020 |
[kern_secd:info:9817] |------------------------------------------------------------------------------'
[kern_secd:info:9817] Failure Summary:
[kern_secd:info:9817] Error: Lookup of CIFS account name procedure failed
[kern_secd:info:9817] [ 0 ms] Using a cached connection to win-mu0liiirtol.pim-root-domain.local
[kern_secd:info:9817] [ 18] Could not find Windows name 'PIM-ROOT-DOMAIN\domain-user8'
[kern_secd:info:9817] **[ 18] FAILURE: Unexpected state: Error 6909 at file:src/utils/secd_cifs_utils.cpp func:lookupName line:422
[kern_secd:info:9817] **[ 20] FAILURE: Error case not correctly journaled