secd.kerberos.preauth event received during domain discovery
Applies to
- ONTAP 9.12+
- CIFS
- Domain Discovery
Issue
- During periodic Domain Discovery error events are logged in
EMS.log
secd.kerberos.preauth: A Kerberos pre-authentication failure occurred for SVM "SVM1" due to invalid credentials for User$@DOMAIN.LOCAL
secd.conn.auth.failure:notice]: Vserver (SVM1) could not make a connection over the network to server (ip xxx.xxx.xxx.xx, port 389). Error: Connection refused (Service: LDAP (Active Directory), Operation: SiteDiscovery)
- This can be accompanied by other errors in
EMS.log
secd.ldap.noServers:EMERGENCY]: None of the LDAP servers configured for Vserver (SVM1) are currently accessible via the network for LDAP service type (Service: LDAP (Active Directory), Operation: SiteDiscovery)