topic Failed to join AD Domain on Win2012 7-Mode in ONTAP Discussions

Failed to join AD Domain on Win2012 7-Mode

PedroMaldonado — Wed, 04 Jun 2025 14:53:39 GMT

Hi!,

I'm having issues when trying to joing an AD Domain on Windows 2012, when I provide the account name and password on cifs setup, I'm receiving the following error:

"Could not authenticate with domain controller: No Kerberos keys for this account in Active Directory.
To recover, reset account password on DC, then either wait for or force
Active Directory synchronization."

We have tried several times and we still have the same issue.

I'm using a vfiler on a DoT Version of 8.1.4P4 7-Mode and my domain is a Windows 2012 Domain.

Did anyone have seen this error before?

Regards,

Pedro

Re: Failed to join AD Domain on Win2012 7-Mode

mbeattie — Wed, 05 Jul 2017 02:16:17 GMT

Hi Pedro,

Have you verified the account in AD you are using to join the vFiler to the domain using cifs setup is not disabled or locked out and that the password is valid?

I checked the support database and found an old (but possibly) related bug (31832) which suggests reseting the password in AD for the account being used for cifs setup.

/Matt

Re: Failed to join AD Domain on Win2012 7-Mode

PedroMaldonado — Thu, 06 Jul 2017 16:03:54 GMT

Hi Matt,

I reviewed with the owner of the account and the account has been able to add some windows servers to this domain without any issue, the issue was pressented only when we use the account fo the vfiler join process.

I will check the bug you listed.

Thanks,

Regards,

Pedro

Re: Failed to join AD Domain on Win2012 7-Mode

Cbrowne20 — Fri, 11 May 2018 16:11:16 GMT

Hello,

We are experiencing the same issue you did. We created a case and they recommeneded blowing out the old objects in AD (which we did) and still having the same Kerberos error with known good domain admin credentials.

Did you all find a solution? If so what was it?