Skip to main content
NetApp Knowledge Base

What can cause the secd failure: 'Error: Lookup of CIFS account name procedure failed'

Views:
1,989
Visibility:
Public
Votes:
1
Category:
ontap-9
Specialty:
nas
Last Updated:

Applies to

  • ONTAP 9
  • SMB\CIFS
  • Active Directory (AD)

Answer

  • The User does not exist (anymore) in the AD Domain
  • Any reference in the ONTAP local user database should be removed, to prevent these errors and messages

::> local-user show -vserver <vserver> -user-name <Domain\Username>

::> local-user delete -vserver <vserver> -user-name <Domain\Username>

Additional Information

  • The following messages are being logged in the secd logs.
Failure Summary:
 
00000015.03988610 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] Error: Lookup of CIFS account name procedure failed
00000015.03988611 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] [ 2 ms] Using a cached connection to dc1.domain.org
00000015.03988612 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] [ 4] Could not find Windows name 'domain\user'
00000015.03988613 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] **[ 4] FAILURE: Unexpected state: Error 6909 at file:src/utils/secd_cifs_utils.cpp func:lookupName line:422
00000015.03988614 0484a217 Wed Jun 03 2020 00:18:27 +01:00 [kern_secd:info:9738] **[ 4] FAILURE: Error case not correctly journaled
 
 
  • The same messages are reported, when a reference is made to a non-existing AD Domain account.
 

Pim-cluster::> local-group show-members -vserver testpim -group-name builtin\users
  (vserver cifs users-and-groups local-group show-members)

           Vserver: testpim
        Group Name: BUILTIN\Users
       Member Name: PIM-ROOT-DOMAIN\Domain Users
                    PIM-ROOT-DOMAIN\domain-user1

Pim-cluster::> local-group add-members -vserver testpim -group-name builtin\users -member-names pim-root-domain\domain-user8
  (vserver cifs users-and-groups local-group add-members)

Error: command failed: Failed to resolve name "PIM-ROOT-DOMAIN\domain-user8".

or

Pim-cluster::> local-group remove-members -vserver testpim -group-name builtin\users -member-names pim-root-domain\domain-user8
  (vserver cifs users-and-groups local-group remove-members)
Error: command failed: Failed to resolve name "PIM-ROOT-DOMAIN\domain-user8".

00000021.000a1369 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] .------------------------------------------------------------------------------.
00000021.000a136a 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |                                 RPC FAILURE:                                    |
00000021.000a136b 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |                     secd_rpc_auth_name_to_sid has failed          |
00000021.000a136c 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |                        Result = 0, RPC Result = 6909                     |
00000021.000a136d 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |                   RPC received at Tue Oct  6 18:47:59 2020       |
00000021.000a136e 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] |------------------------------------------------------------------------------'
00000021.000a136f 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] Failure Summary:
00000021.000a1370 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] Error: Lookup of CIFS account name procedure failed
00000021.000a1371 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817]   [  0 ms] Using a cached connection to win-mu0liiirtol.pim-root-domain.local
00000021.000a1372 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817]   [    18] Could not find Windows name 'PIM-ROOT-DOMAIN\domain-user8'
00000021.000a1373 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] **[    18] FAILURE: Unexpected state: Error 6909 at file:src/utils/secd_cifs_utils.cpp func:lookupName line:422
00000021.000a1374 08a158ce Tue Oct 06 2020 18:47:59 +02:00 [kern_secd:info:9817] **[    20] FAILURE: Error case not correctly journaled

 

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.