topic Re: CIFS Error in ONTAP Discussions

CIFS Error

sidali1 — Fri, 23 Apr 2021 14:53:36 GMT

cluster1::> vserver cifs create -vserver Sales -cifs-server Sales -domain Test.lab

I get this ERROR

[ 94] Kerberos authentication failed with result: 7537.
[ 94] Unable to connect to LSA service on Test.lab
(Error: RESULT_ERROR_KERBEROS_SKEW)
[ 94] No servers available for MS_LSA, vserver: 4, domain:Test.lab.
**[ 94] FAILURE: Unable to make a connection (LSA:Test.lab),
** result: 6940
[ 94] Could not find Windows SID
'S-1-5-21-1493488758-2330868109-3368336153-512'
[ 99] Deleted existing account
'CN=DEPTA,CN=Computers,DC=Test.lab,DC=lab'

Error: command failed: Failed to create the Active Directory machine account "DEPTA". Reason: SecD Error: no server available.

Re: CIFS Error

Fabian1993 — Fri, 23 Apr 2021 14:59:28 GMT

Is the DNS configuration correct for the vserver?

is the ONTAP Time matching your DomainController?

Re: CIFS Error

sidali1 — Fri, 23 Apr 2021 15:04:18 GMT

Yes both are correct, and I was able to run vserver services dns create and create dns.

Re: CIFS Error

sidali1 — Fri, 23 Apr 2021 16:24:17 GMT

NVM, I fixed it by running the AD in server 2012.

Re: CIFS Error

parisi — Sat, 24 Apr 2021 13:57:07 GMT

KERBEROS _SKEW means the DC time is off more than 5 minutes from the ONTAP system. Could be a different time zone, but the Windows version difference was not your root cause

Re: CIFS Error

sidali1 — Sun, 25 Apr 2021 22:31:38 GMT

Parisi, you are right, the DC time was off. That was the issue.

Re: CIFS Error

Reverett — Wed, 29 Sep 2021 08:20:26 GMT

Hello for more information regarding this issue please see the below kb:

https://kb.netapp.com/Advice_and_Troubleshooting%2FData_Storage_Software%2FONTAP_OS%2FCIFS_shares_not_available_due_to_time_difference_(KRB5KRB_AP_ERR_SKEW)