Firmware Upgrade + AD user/groups failure

Questions about using Windows AD service.

Firmware Upgrade + AD user/groups failure

Postby minion01 » Mon Nov 29, 2010 5:06 pm

I am having a problem with domain user/group access to the network shares on both of my QNAPs (from Win7, XP, and S2008R2). I recently upgraded the firmware on my TS-419U to 3.3.6 Build 1109T and my TS-809U to 3.3.6 Build 1110T. Before the upgrade they were both around 2.3.X. The access rights were working fine before the upgrade.

Now, when I try to use the net use command with my domain account I receive this error:

System error 1326 has occurred.
Logon failure: unknown user name or bad password.


They both work fine if I use the admin local account. I saw the thread about IP works but hostname does not - I get the same results on both. I tried troubleshooting on the TS-419U.

I wasn't worried about re-creating the access rights so I tried changing it to a workgroup and joining it back to the domain. The domain join succeeded. I granted a domain group that I am a member of to the share. I got the error message above. I then tried adding my domain user account to the share directly. Same thing. I enabled logging and I am only seeing a login failure when my account password is incorrect. It does not log when my password is correct but access to the share does not work.

What I found interesting is that our domain accounts lock out after three failed attempts. When I spammed the net use command about 10 times, my AD account did not lock out (same error message as above at each attempt), but when i typed my password incorrectly, after the third attempt my AD account did lock out, and it still failed to connect to the share.

In the Access Rights\Shared Folders\Access Control of the share I am trying to give access, I can see both the Domain Users and Domain Groups sections and have granted both my domain account and domain group the same Full Control access that I had in the previous firmware.

One other thing that I noticed was that before the firmware upgrade, I was able to browse \\QNAPNASNAME and by default it would show the standard QNAP shares (QDownload, QMultimedia, etc.) without a password. When I double clicked on a folder it would then prompt for a password. After the firmware upgrade it now asks for a password just going to the \\QNAPNASNAME share.

I have tried creating a brand new share and I am still getting the same results.

I am not sure how to troubleshoot any further.

Thanks in advance.
minion01
New here
 
Posts: 3
Joined: Mon Nov 29, 2010 3:56 pm
NAS Model: TS-809 Pro

Re: Firmware Upgrade + AD user/groups failure

Postby minion01 » Tue Nov 30, 2010 1:10 am

Update - I found something else interesting.

I am using the QNAP for Windows 7 deployment with the Microsoft Deployment Toolkit (http://technet.microsoft.com/en-us/library/ee376932.aspx). The MDT is a bootable disk that loads a stripped down version of Windows 7, maps a drive letter to the QNAP nas' shared folder, installs Windows 7 on a new system, then installs applications automatically.

The MDT wizard goes through like normal. It accepts my domain credentials, maps the drive to Z like normal, and goes on its merry way. Still, I cannot access the same share in Windows 7 or S2008R2.
minion01
New here
 
Posts: 3
Joined: Mon Nov 29, 2010 3:56 pm
NAS Model: TS-809 Pro

Re: Firmware Upgrade + AD user/groups failure

Postby minion01 » Wed Dec 01, 2010 9:26 am

Another update --

I verified that it is the 3.3.6 firmware that was causing the issue I am having. When I downgraded the QNAP to 3.2.4 (both QNAPS were originally 3.2.4; I thought they were 2.3.x when I posted the original post) and rebooted, the network shares worked fine with domain users. I did not touch the admin config page after downgrading the firmware.

With 3.3.6, QNAP was talking to Active Directory, because AD was able to lock my account out with a wrong password. QNAP was just not able to open the door to the share.
minion01
New here
 
Posts: 3
Joined: Mon Nov 29, 2010 3:56 pm
NAS Model: TS-809 Pro

Re: Firmware Upgrade + AD user/groups failure

Postby sut123 » Tue Dec 14, 2010 8:21 pm

Same Problem here. Computer running 2 days. On the first day no Problem. On the second day "unknown username or bad password". User works fine from any other machine. If i use ip instead of hostname it also works. When i reboot or log off and log on again it is working again.
sut123
New here
 
Posts: 8
Joined: Tue Dec 14, 2010 8:13 pm
NAS Model: TS-439 Pro

Re: Firmware Upgrade + AD user/groups failure

Postby mot256 » Tue Jul 17, 2012 8:25 pm

We are getting the same problem. Did you get a solution to the problem?
mot256
New here
 
Posts: 2
Joined: Tue Jul 17, 2012 8:18 pm
NAS Model: TS-219P

Re: Firmware Upgrade + AD user/groups failure

Postby sut123 » Tue Jul 17, 2012 10:31 pm

I am on the latest release and not having this issue any more.
sut123
New here
 
Posts: 8
Joined: Tue Dec 14, 2010 8:13 pm
NAS Model: TS-439 Pro

Re: Firmware Upgrade + AD user/groups failure

Postby mot256 » Wed Jul 18, 2012 8:57 pm

Thx, latest firmware did the job.
mot256
New here
 
Posts: 2
Joined: Tue Jul 17, 2012 8:18 pm
NAS Model: TS-219P


Return to Windows Domain & Active Directory

Who is online

Users browsing this forum: No registered users and 2 guests