#ONTAP 9.8p3 to p21 upgrade

1 messages · Page 1 of 1 (latest)

weak crypt
#

Hi all, I’ve been having an issue after windows patching where I am no longer able to access my nas via IP address (\serverip) I can only access using dns name. Apparently this is a know issue and it can be fixed by upgrading ONTAP to version 9.8 p21. Would anyone be kind enough to provide a step by step guide or instructions on how I can do this upgrade hopefully without causing any disruption to my clients

simple jackal
#

probably related to kerberos/ntlm. Access by IP usually only works with NTLM as the SPN for the IP is not set up in AD. The easiest fix is to set the IP address as SPN in the AD computer object for the NAS and set the registry key on the client to use Kerberos even when connecting via IP. here is an Article from MS describing this

Kerberos support for IP-based SPNs

weak crypt
#

Kerberos is already enabled, it used to work before. It’s after the windows patches to my AD server that it started causing issues.

simple jackal
#

yeah, Microsoft removed (disabled) NTLM. When you connect via IP, your client uses NTLM. That is why it doesn't work anymore. Either re-enable NTLM on the Windows side (DC/GPO), or enable Kerberos to work for connections to an IP (which is what I linked above)

mighty osprey