topic Re: Cannot Connect to CIFs after Windows 24h4 Update - Urgent, please help in Network and Storage Protocols

Cannot Connect to CIFs after Windows 24h4 Update - Urgent, please help

JSITSUPPORT — Thu, 05 Dec 2024 13:01:48 GMT

Hi,

We have an AFF 190 running NetApp Release 9.9.1P2

The clients who have updated to Windows 11 24h4 cannot access the filers anymore, could anyone please give us an idea why?

Anyone else having similar issues?

Thanks very much in advance for any replies.

Re: Cannot Connect to CIFs after Windows 24h4 Update - Urgent, please help

JSITSUPPORT — Thu, 05 Dec 2024 13:56:44 GMT

Sorry, I meant 24h2

Re: Cannot Connect to CIFs after Windows 24h4 Update - Urgent, please help

ChLokesh — Thu, 05 Dec 2024 19:57:34 GMT

Hello,

What is the error your clients are seeing while mapping the cifs share?

Run event log show on cluster CLI and see if there are any specific errors related to the vserver or share in question.

Re: Cannot Connect to CIFs after Windows 24h4 Update - Urgent, please help

wareer — Fri, 06 Dec 2024 04:28:45 GMT

Is only this updated post inaccessible? To see if the network can be pinged through, use the following command to see if there are any related errors
>event log show
See if the following links help you

https://kb-cn.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/CIFS_clients_are_unable_to_access_any_CIFS_shares_of_a_CIFS_server

Re: Cannot Connect to CIFs after Windows 24h4 Update - Urgent, please help

JSITSUPPORT — Fri, 06 Dec 2024 11:31:08 GMT

Hi,

Thanks for the response, we are seeing these errors ONLY for the ones who have upgraded.

12/6/2024 10:30:03 Filername ERROR secd.cifsAuth.problem: vserver (ourvserver) General CIFS authentication problem. Error: User authentication procedure failed (Retries: 2)

CIFS SMB2 Share mapping - Client Ip = 192.168.x.x

**[ 21] Attempt 1 FAILURE: Unexpected state: Error 6756 at file:src/FrameWork/ClientInfo.cpp func:RemoveAllSharesFromGlobalSession line:4034

**[ 21] Attempt 1 FAILURE: Pass-through authentication failed. (NT Status: NT_STATUS_NO_LOGON_SERVERS(0xc000005e))

**[ 52] Attempt 2 FAILURE: Unexpected state: Error 6756 at file:src/FrameWork/ClientInfo.cpp func:RemoveAllSharesFromGlobalSession line:4034

**[ 52] Attempt 2 FAILURE: Pass-through authentication failed. (NT Status: NT_STATUS_NO_LOGON_SERVERS(0xc000005e))

[ 52 ms] Login attempt by domain user 'ourdomain\ouruser' using NTLMv2 style security

[ 53] Successfully connected to ip 192.168.our.dc, port 445 using TCP

[ 59] Successfully authenticated with DC ourdc.domain.local

**[ 72] FAILURE: Pass-through authentication failed. (NT Status: NT_STATUS_NO_LOGON_SERVERS(0xc000005e))

[ 72] CIFS authentication failed

[ 72] Retry requested, but maximum attempts (3) reached; giving up.

Re: Cannot Connect to CIFs after Windows 24h4 Update - Urgent, please help

JSITSUPPORT — Fri, 06 Dec 2024 11:32:03 GMT

Hi,

Thanks for the response, this is what we are seeing, ONLY for the users who have upgraded,

12/6/2024 10:30:03 Filername ERROR secd.cifsAuth.problem: vserver (ourvserver) General CIFS authentication problem. Error: User authentication procedure failed (Retries: 2)

CIFS SMB2 Share mapping - Client Ip = 192.168.x.x

**[ 21] Attempt 1 FAILURE: Unexpected state: Error 6756 at file:src/FrameWork/ClientInfo.cpp func:RemoveAllSharesFromGlobalSession line:4034

**[ 21] Attempt 1 FAILURE: Pass-through authentication failed. (NT Status: NT_STATUS_NO_LOGON_SERVERS(0xc000005e))

**[ 52] Attempt 2 FAILURE: Unexpected state: Error 6756 at file:src/FrameWork/ClientInfo.cpp func:RemoveAllSharesFromGlobalSession line:4034

**[ 52] Attempt 2 FAILURE: Pass-through authentication failed. (NT Status: NT_STATUS_NO_LOGON_SERVERS(0xc000005e))

[ 52 ms] Login attempt by domain user 'ourdomain\ouruser' using NTLMv2 style security

[ 53] Successfully connected to ip 192.168.our.dc, port 445 using TCP

[ 59] Successfully authenticated with DC ourdc.domain.local

**[ 72] FAILURE: Pass-through authentication failed. (NT Status: NT_STATUS_NO_LOGON_SERVERS(0xc000005e))

[ 72] CIFS authentication failed

[ 72] Retry requested, but maximum attempts (3) reached; giving up.

Re: Cannot Connect to CIFs after Windows 24h4 Update - Urgent, please help

ChLokesh — Fri, 06 Dec 2024 19:52:40 GMT

Hello Again,

I found these in the shared error logs.

“Pass-through authentication failed. NT Status: NT_STATUS_NO_LOGON_SERVERS(0xc000005e))”.

- This error indicates that your system is impacted by CVE-2022-38023.

- This is a known issue with NTLM client at various ONTAP versions where access to CIFS only through IP is affected.

- Referred KB: https://kb.netapp.com/Support_Bulletins/Customer_Bulletins/SU530

- The fix here is to upgrade the ONTAP to a fixed version.

- Fixed verisons: https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-Issues/CONTAP-80033

Hope the shared information is helpful.