CIFS Error

[sidali1]

cluster1::> vserver cifs create -vserver Sales -cifs-server Sales -domain Test.lab

I get this ERROR

[ 94] Kerberos authentication failed with result: 7537.
[ 94] Unable to connect to LSA service on Test.lab
(Error: RESULT_ERROR_KERBEROS_SKEW)
[ 94] No servers available for MS_LSA, vserver: 4, domain:Test.lab.
**[ 94] FAILURE: Unable to make a connection (LSA:Test.lab),
** result: 6940
[ 94] Could not find Windows SID
'S-1-5-21-1493488758-2330868109-3368336153-512'
[ 99] Deleted existing account
'CN=DEPTA,CN=Computers,DC=Test.lab,DC=lab'

Error: command failed: Failed to create the Active Directory machine account "DEPTA". Reason: SecD Error: no server available.

[Fabian1993]

Is the DNS configuration correct for the vserver?

is the ONTAP Time matching your DomainController?

[sidali1]

Yes both are correct, and I was able to run vserver services dns create and create dns. 

[sidali1]

NVM, I fixed it by running the AD in server 2012. 

[parisi · Accepted solution]

KERBEROS _SKEW means the DC time is off more than 5 minutes from the ONTAP system. Could be a different time zone, but the Windows version difference was not your root cause

[sidali1]

Parisi, you are right, the DC time was off. That was the issue. 

[Reverett]

Hello for more information regarding this issue please see the below kb:

https://kb.netapp.com/Advice_and_Troubleshooting%2FData_Storage_Software%2FONTAP_OS%2FCIFS_shares_not_available_due_to_time_difference_(KRB5KRB_AP_ERR...)