Cannot Connect to CIFs after Windows 24h4 Update - Urgent, please help

[JSITSUPPORT]

Hi,

We have an AFF 190 running NetApp Release 9.9.1P2

The clients who have updated to Windows 11 24h4 cannot access the filers anymore, could anyone please give us an idea why?

Anyone else having similar issues?

Thanks very much in advance for any replies.

[JSITSUPPORT]

Sorry, I meant 24h2

[ChLokesh]

Hello,

What is the error your clients are seeing while mapping the cifs share?

Run event log show on cluster CLI and see if there are any specific errors related to the vserver or share in question.

[JSITSUPPORT]

Hi,

Thanks for the response, we are seeing these errors ONLY for the ones who have upgraded.

12/6/2024 10:30:03 Filername ERROR secd.cifsAuth.problem: vserver (ourvserver) General CIFS authentication problem. Error: User authentication procedure failed (Retries: 2)

CIFS SMB2 Share mapping - Client Ip = 192.168.x.x

**[ 21] Attempt 1 FAILURE: Unexpected state: Error 6756 at file:src/FrameWork/ClientInfo.cpp func:RemoveAllSharesFromGlobalSession line:4034

**[ 21] Attempt 1 FAILURE: Pass-through authentication failed. (NT Status: NT_STATUS_NO_LOGON_SERVERS(0xc000005e))

**[ 52] Attempt 2 FAILURE: Unexpected state: Error 6756 at file:src/FrameWork/ClientInfo.cpp func:RemoveAllSharesFromGlobalSession line:4034

**[ 52] Attempt 2 FAILURE: Pass-through authentication failed. (NT Status: NT_STATUS_NO_LOGON_SERVERS(0xc000005e))

[ 52 ms] Login attempt by domain user 'ourdomain\ouruser' using NTLMv2 style security

[ 53] Successfully connected to ip 192.168.our.dc, port 445 using TCP

[ 59] Successfully authenticated with DC ourdc.domain.local

**[ 72] FAILURE: Pass-through authentication failed. (NT Status: NT_STATUS_NO_LOGON_SERVERS(0xc000005e))

[ 72] CIFS authentication failed

[ 72] Retry requested, but maximum attempts (3) reached; giving up.

[wareer]

Is only this updated post inaccessible? To see if the network can be pinged through, use the following command to see if there are any related errors
>event log show
See if the following links help you

https://kb-cn.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/CIFS_clients_are_unable_to_access_any_CIFS_shares_of_a_CIFS_server 

[JSITSUPPORT]

Hi,

Thanks for the response, this is what we are seeing, ONLY for the users who have upgraded,

12/6/2024 10:30:03 Filername ERROR secd.cifsAuth.problem: vserver (ourvserver) General CIFS authentication problem. Error: User authentication procedure failed (Retries: 2)

CIFS SMB2 Share mapping - Client Ip = 192.168.x.x

**[ 21] Attempt 1 FAILURE: Unexpected state: Error 6756 at file:src/FrameWork/ClientInfo.cpp func:RemoveAllSharesFromGlobalSession line:4034

**[ 21] Attempt 1 FAILURE: Pass-through authentication failed. (NT Status: NT_STATUS_NO_LOGON_SERVERS(0xc000005e))

**[ 52] Attempt 2 FAILURE: Unexpected state: Error 6756 at file:src/FrameWork/ClientInfo.cpp func:RemoveAllSharesFromGlobalSession line:4034

**[ 52] Attempt 2 FAILURE: Pass-through authentication failed. (NT Status: NT_STATUS_NO_LOGON_SERVERS(0xc000005e))

[ 52 ms] Login attempt by domain user 'ourdomain\ouruser' using NTLMv2 style security

[ 53] Successfully connected to ip 192.168.our.dc, port 445 using TCP

[ 59] Successfully authenticated with DC ourdc.domain.local

**[ 72] FAILURE: Pass-through authentication failed. (NT Status: NT_STATUS_NO_LOGON_SERVERS(0xc000005e))

[ 72] CIFS authentication failed

[ 72] Retry requested, but maximum attempts (3) reached; giving up.

[ChLokesh]

Hello Again,

I found these in the shared error logs. 

“Pass-through authentication failed. NT Status: NT_STATUS_NO_LOGON_SERVERS(0xc000005e))”.

- This error indicates that your system is impacted by CVE-2022-38023.

- This is a known issue with NTLM client at various ONTAP versions where access to CIFS only through IP is affected.

- Referred KB: https://kb.netapp.com/Support_Bulletins/Customer_Bulletins/SU530

- The fix here is to upgrade the ONTAP to a fixed version.

- Fixed verisons: https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-Issues/CONTAP-80033 

Hope the shared information is helpful.