Possible AD Auth issue

Manuel Mendieta

unread,

Jul 8, 2020, 7:48:18 PM7/8/20

to Isilon Technical User Group

6 node cluster running 8.2. I do have a sr open with EMC.

All our shares are accessed via DFS so we have not had any end users report any issues but we have 1 in-house critial business application that writes to a share that is having issues accessing.

I did all checks with AD domain and everything looks to be connected and working.

Am I having some auth issues with nodes losing auth?

lsass[4421]: [lsass] Failed to find user 'root' while validating login [error code:40008]
breislnp02-1: 2020-07-08T14:19:07-05:00 <30.4> breislnp02-1 lsass[4421]: [lsass] Failed to find user 'root' while validating login [error code:40008]
breislnp02-2: 2020-07-08T07:24:28-05:00 <30.4> breislnp02-2 lsass[4286]: [lsass] Failed to find user 'root' while validating login [error code:40008]
breislnp02-3: 2020-07-08T04:21:03-05:00 <30.3> breislnp02-3 lsass[4209]: [lsass] AD_NetrlogonOpenSchannel(brhdccp01.corporate.domain.com) failed with 3221225473 (0xc0000001) (symbol: 'STATUS_UNSUCCESSFUL')
breislnp02-3: 2020-07-08T04:21:03-05:00 <30.3> breislnp02-3 lsass[4209]: [lsass] Failed to authenticate user (name = 'ddita') -> error = 40134, symbol = LW_ERROR_RPC_ERROR, client pid = 4294967295
breislnp02-3: 2020-07-08T10:42:10-05:00 <30.3> breislnp02-3 lsass[4209]: [lsass] AD_NetrlogonOpenSchannel(brvdccp02.corporate.domain.com) failed with 3221225473 (0xc0000001) (symbol: 'STATUS_UNSUCCESSFUL')
breislnp02-3: 2020-07-08T10:42:10-05:00 <30.3> breislnp02-3 lsass[4209]: [lsass] Failed to authenticate user (name = 'kofaxrec') -> error = 40134, symbol = LW_ERROR_RPC_ERROR, client pid = 4294967295
breislnp02-3: 2020-07-08T13:25:04-05:00 <30.4> breislnp02-3 lsass[4209]: [LwKrb5GetTgtImpl /b/mnt/src/isilon/fsp/lwadvapi/threaded/krbtgt.c:247] KRB5 Error code: -1765328360 (Message: Preauthentication failed)
breislnp02-3: 2020-07-08T13:26:51-05:00 <30.4> breislnp02-3 lsass[4209]: [LwKrb5GetTgtImpl /b/mnt/src/isilon/fsp/lwadvapi/threaded/krbtgt.c:247] KRB5 Error code: -1765328360 (Message: Preauthentication failed)
breislnp02-5: 2020-07-08T13:25:37-05:00 <30.4> breislnp02-5 lsass[4174]: [LwKrb5GetTgtImpl /b/mnt/src/isilon/fsp/lwadvapi/threaded/krbtgt.c:247] KRB5 Error code: -1765328360 (Message: Preauthentication failed)
breislnp02-5: 2020-07-08T13:25:47-05:00 <30.4> breislnp02-5 lsass[4174]: [LwKrb5GetTgtImpl /b/mnt/src/isilon/fsp/lwadvapi/threaded/krbtgt.c:247] KRB5 Error code: -1765328360 (Message: Preauthentication failed)
breislnp02-6: 2020-07-08T14:40:03-05:00 <30.3> breislnp02-6 lsass[4153]: [lsass] AD_NetrlogonOpenSchannel(brhdccp01.corporate.domain.com) failed with 3221225473 (0xc0000001) (symbol: 'STATUS_UNSUCCESSFUL')
breislnp02-6: 2020-07-08T14:40:03-05:00 <30.3> breislnp02-6 lsass[4153]: [lsass] Failed to authenticate user (name = 'ddita') -> error = 40134, symbol = LW_ERROR_RPC_ERROR, client pid = 4294967295

mandar kolhe

unread,

Jul 9, 2020, 1:14:54 PM7/9/20

to Isilon Technical User Group

Hello, are you just concerned about this messages or you are facing any issue ?

Manuel Mendieta

unread,

Jul 9, 2020, 1:53:26 PM7/9/20

to Isilon Technical User Group

Mostly concerned , users accessing via DFS/SMB are not seeing any issues.

Reply all

Reply to author

Forward