QNAP does not work with AD, anymore!

Questions about using Windows AD service.
Post Reply
superataru
Starting out
Posts: 11
Joined: Wed Apr 07, 2010 10:21 pm

QNAP does not work with AD, anymore!

Post by superataru »

Hi all.
I have AD comunication problem with my TS-410s, lately. They already have latest firmware (4.1.1) with shell lock patch on.
Now i'm working on one of these devices. While, manually, i can add the NAS to the domain, it seems NAS has not a full communications with the DCs: NAS loads AD Groups and Users lists, but does not allow user to browse their nas-folders.
I can browse the main sharing area, while, trying to open \\username-folder... i'm asked to provide username and password. I also tried to give them (domain\username and pw), without results.
I tested also ZyXEL USG to verify if, remote SSL-AD users, could suffer same problems, but they are correctly joined to domain: Firewall has not problems with the same AD. AD has not problems.
Dunno if i must reset and restart from zero... but i have so many GBytes data on, and many users.
What could be helpful to fix these problems?

My Test:
TS-410 (FW: 4.1.1 - build 1003)
Clients: Windows 2003 Srv, Windows XP-SP3, Windows 7 and 8
Active directory with Windows 2008 Srv, Windows 2003 DCs

DCDIAG TESTS: ALL OK.
C:\Programmi\Support Tools>dcdiag
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site\PDC-NEW2
Starting test: Connectivity
......................... PDC-NEW2 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site\PDC-NEW2
Starting test: Replications
......................... PDC-NEW2 passed test Replications
Starting test: NCSecDesc
......................... PDC-NEW2 passed test NCSecDesc
Starting test: NetLogons
......................... PDC-NEW2 passed test NetLogons
Starting test: Advertising
......................... PDC-NEW2 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... PDC-NEW2 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... PDC-NEW2 passed test RidManager
Starting test: MachineAccount
......................... PDC-NEW2 passed test MachineAccount
Starting test: Services
......................... PDC-NEW2 passed test Services
Starting test: ObjectsReplicated
......................... PDC-NEW2 passed test ObjectsReplicated
Starting test: frssysvol
......................... PDC-NEW2 passed test frssysvol
Starting test: frsevent
......................... PDC-NEW2 passed test frsevent
Starting test: kccevent
......................... PDC-NEW2 passed test kccevent
Starting test: systemlog
......................... PDC-NEW2 passed test systemlog
Starting test: VerifyReferences
......................... PDC-NEW2 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : osr
Starting test: CrossRefValidation
......................... osr passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... osr passed test CheckSDRefDom

Running enterprise tests on : osr.local
Starting test: Intersite
......................... osr.local passed test Intersite
Starting test: FsmoCheck
......................... osr.local passed test FsmoCheck

C:\Programmi\Support Tools>


Tnx in advance
superataru
Starting out
Posts: 11
Joined: Wed Apr 07, 2010 10:21 pm

Re: QNAP does not work with AD, anymore!

Post by superataru »

Going on: Devices find the DC... but they can't match on authentication.
Here the log, trying to join with Domain Security Wizard:

======== DEBUG START =======
/usr/local/samba/bin/net time set -S PDC-NEW2.osr.local
[command] echo ******** | /usr/bin/kinit "administrator@osr.local"
Password for administrator@osr.local:
kinit(v5): Preauthentication failed while getting initial credentials
[command] echo ******** | /usr/bin/kinit "administrator@osr.local"
Password for administrator@osr.local:
======== DEBUG START =======
Now, i'm sure credentials are right. If i add it manually, i got no logs and all should work fine ... but i cannot browse the folders!!!
patgerber
New here
Posts: 4
Joined: Mon Jan 09, 2012 9:03 pm

Re: QNAP does not work with AD, anymore!

Post by patgerber »

I have the same problem. I updated my TS 459 Pro II to version 4.1.1. Now my domain integration is no more working!
Please help!
superataru
Starting out
Posts: 11
Joined: Wed Apr 07, 2010 10:21 pm

Re: QNAP does not work with AD, anymore!

Post by superataru »

patgerber wrote:I have the same problem. I updated my TS 459 Pro II to version 4.1.1. Now my domain integration is no more working!
Please help!
Added a new Domain admin with a shorter password: finally i can rejoin NAS to AD (.... ...).
Anyway NAS suks again .... so: cloning RAID in external USB Disk and going to nuke this damned device.
patgerber
New here
Posts: 4
Joined: Mon Jan 09, 2012 9:03 pm

Re: QNAP does not work with AD, anymore!

Post by patgerber »

Now it is working.
I disabled the MS Network function and enabled and configured it again together with the nfs service. Now it works.
Post Reply

Return to “Windows Domain & Active Directory”