Unsolved

This post is more than 5 years old

1524

November 30th, 2011 06:00

problems authenticating to Celerra via Win 7 client

We have had a number of issues trying to get the Celerra to accept authentication from our Windows clients. Its a long story involving a number of manufacturers.

However we are having issues with Win 7 clients. The Win 7 client gets refused access, and the following error is logged in the Celerra log files:

Cannot build kerbPAC Client=PC03123 Asn1Error=-1073741715 origin=0x1

The Celerra is an NS120 running 6.0.40-5; the shares are CIFS shares and are now accessible by Win XP clients. Packet tracing and shown that kerberos ticketing is ok, but the SMB protocol on the Celerra is dropping the request.

If anyone could shelf some light on this I'd be grateful.

Many thanks

6 Operator

 • 

8.6K Posts

November 30th, 2011 08:00

Since XP clients work this smells like either a SMB2 or Kerberos problem (in case Win7 doesn’t try NTLM)

First I would suggest to upgrade to the very latest DART code.

No sense in chasing problems that are long fixed.

If you want to see if its SMB2 related you can just disable SMB2 with server_cifs server_2 –add security=NT,dialect=NT1

The best is to open a service request – since you have network traces it makes it a lot easier to figure out whats happening.

Rainer

6 Operator

 • 

8.6K Posts

November 30th, 2011 09:00

You’re welcome

There is going to be a new maintenance release in a few days - 6.0.51.6 - I suggest to ask/wait for that

Rainer

November 30th, 2011 09:00

Ranier

Many thanks for your response - I'll see if disabling SMB2 make any difference. I assume this can be done on the Celerra without having to restart the system?

I'll also request a DART update.

Many thanks

6 Operator

 • 

8.6K Posts

November 30th, 2011 09:00

Yes, disabling and enabling SMB2 can be done online – see the CIFS manual

Alternatively you can configure a Windows7 client to not use SMB2 – I think there is some registry change for that

November 30th, 2011 10:00

Hi,

I've disabled SMB2 on the cifs_server and tried connections and that didn't help and I also tried disabling on the Win7 client and that didn't work either.

I've reset both back to SMB2

6 Operator

 • 

8.6K Posts

November 30th, 2011 13:00

Then please open a service request

December 1st, 2011 07:00

Thanks for your help. I'll get an SR raised.

Much appreciated.

No Events found!

Top