跳转到主内容

间歇性CIFS授权失败

i
Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用场景

  • ONTAP 9
  • CIFS
  • Active Directory

问题描述

  • CIFS授权间歇性失败
  • 域用户处于活动状态
  • CIFS计算机帐户处于活动状态
  • login-CIFS命令已成功:

cluster1::*>vserver services access-check authentication login-cifs -node <node_name> -vserver <Vserver_name> -user Domain\user

  • EMS Log 中:

[?] Mon Feb 07 14:57:34 +0100 [<node_name>: secd: secd.cifsAuth.problem:error]: vserver (<Vserver_Name>) General CIFS authentication problem. Error: Ontap admin cifs authentication basic procedure failed (Retries: 2) **[  3263] Attempt 1 FAILURE: Unexpected state: Error 6776 at file:src/FrameWork/Socket.cpp func:ReceiveDataOnSocket line:1233 **[  3263] Attempt 1 FAILURE: Pass-through authentication request failed.

  • Secd Log 中:
Mon Feb 07 2022 14:57:34 +01:00 [kern_secd:info:8995] | [000.261.243]  ERR  : SMB2 response has NT error 0x103  { in ParseSmb2HeaderResponse() at src/Smb2/Smb2Utils.cpp:350 }
Mon Feb 07 2022 14:57:34 +01:00 [kern_secd:info:8995] | [009.716.488]  ERR  :  NetrRpcFunc failed with error: 6776 and ntstatus 0x103  { in NetrRpcFunc() at src/Actions/MsrpcServices.cpp:3252 }
Mon Feb 07 2022 14:57:34 +01:00 [kern_secd:info:8995] | [009.716.493]  ERR  :  RESULT_ERROR_SPINCLIENT_COMMAND_TIMED_OUT:6776 in NetrRpcFunc() at src/Actions/MsrpcServices.cpp:3255
 
  • 在数据包跟踪中:
筛选器- smb2.nt_status = 0x00000103
 
88471  2022-02-07 14:57:34.096756  192.168.0.25  192.168.0.201  SMB2 Read Request Len:8192 Off:0 File: netlogon  0x00006c46d800001d
88473  2022-02-07 14:57:34.108730  192.168.0.201  192.168.0.25  SMB2 Read Response, Error: STATUS_PENDING 0x00006c46d800001d