Checking the Active Directory Service Principal Name Status

A customer has encounter situations where they try and access a
SMB share and they will be prompted for credentials even though they have
already authenticated into a AD domain.   This is because, Active Directory needs every SmartConnect zone name to be

present in Active Directory.  If an SPN is missing you will be prompted for credentials, and even after entering in credentials, they may be denied access to a share that they should be able to access.

Verify the SPN status by:

isi auth ads spn check

Add all the missing SPN entries to Active Directory .