FAILURE: Pass-through authentication failed. (Status: 0xC000005E)

[Alvim]

3/5/2024 09:47:00 node-03 ERROR secd.cifsAuth.problem: vserver (svm_X) General CIFS authentication problem. Error: User authentication procedure failed (Retries: 2)

CIFS SMB2 Share mapping - Client Ip = 192.168.X.X

**[ 50] Attempt 1 FAILURE: Unexpected state: Error 6756 at file:src/FrameWork/ClientInfo.cpp func:RemoveAllSharesFromGlobalSession line:3585

**[ 50] Attempt 1 FAILURE: Pass-through authentication failed. (Status: 0xC000005E)

**[ 4122] Attempt 2 FAILURE: Unexpected state: Error 6756 at file:src/FrameWork/ClientInfo.cpp func:RemoveAllSharesFromGlobalSession line:3585

**[ 4122] Attempt 2 FAILURE: Pass-through authentication failed. (Status: 0xC000005E)

[4122 ms] Login attempt by domain user 'DOMAIN\adm-user' using NTLMv2 style security

[ 4123] Successfully connected to ip 10.93.0.55, port 445 using TCP

[ 4142] Successfully authenticated with DC vm-ad-wa-04.domain

**[ 4172] FAILURE: Pass-through authentication failed. (Status: 0xC000005E)

[ 4172] CIFS authentication failed

[ 4172] Retry requested, but maximum attempts (3) reached; giving up.

NetApp Release 9.3P19

[TMACMD]

Upgrade ONTAP. May be hitting the Microsoft security fix. ONTAP 9.8P latest. 

[wareer]

• Upgrade to an ONTAP version supporting AES encryption for Netlogon RPC traffic
• Enable AES encryption for Netlogon RPC traffic :

::*> cifs security modify -vserver <svm> -aes-enabled-for-netlogon-channel true

https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/NTLM_authentication_fails_due_to_the_filer_receiving_c0000418_from_DC