Decrypt integrity check failed is observed after SVM DR failover for ONTAP
Applies to
- ONTAP 9
- SVM DR
- NFS utilizing Kerberos
Issue
- After a SVM DR failover, the following error can be found in SECD of either the source SVM or DR SVM:
ERROR secd.nfsAuth.problem: vserver (SVM1) General NFS authorization problem. Error: RPC accept GSS token procedure failed [ 0 ms] Using the NFS service credential for logical interface 1031 (SPN='nfs/FQDN@EXAMPLE.COM') from cache.
**[ 0] FAILURE: Failed to accept the context: Unspecified GSS failure. Minor code may provide more information (minor: Decrypt integrity check failed).