Users Cannot Access The Nsa - ZyXEL Communications NSA-2401 User Manual

12.4 Users Cannot Access the NSA

A local user cannot access a share
• Check that the NSA is turned on and connected to the network. The local user should try
to ping the NSA or use the NDU to discover it.
• The local user should check that he entered his login name and password correctly.
• Check if the share exists and has the correct access settings for this user.
• Check the Access Control List (ACL) of read/write permissions associated with specific
files and/or folders. Account names added to the list are linked to the files and folders that
they are allowed to access, along with what kinds of actions they are allowed to perform
with those files and folders (delete, move, rename, and so on).
• Check if the share has an ANONMYOUS or EVERYONE access right. If the user is
already logged into a share using her username and password, she will NOT be able to
access a share that has ANONYMOUS FTP only access rights (as these require 'no
login'). In this case she should log out and try to access the share again without logging in.
See Section 8.4.2.3 on page 193
• Check if the shared folder is a subfolder of another (parent) share. Check that the parent
share's access rights do not conflict with the subfolder share. It is recommended that you
do not create subfolder shares.
• Check if the user belongs to a group with conflicting access rights. DENY always takes
precedence. If you allow a user FULL access to a share but set his group to DENY, then
he will NOT be able to access the share.
• The local user should check if there are any existing mapped network drives to the NSA.
He may need to disconnect existing CIFS connections as new CIFS connection may use
previously-saved login information that may be different to NSA login.
• Check that the array in which the share resides, exists and is not down or degraded. If the
array is down or degraded, see
• If the user is using DFS links, then he can only access the NSA using CIFS and not FTP.
• Check that the share has not been disabled.
I cannot import domain user or user group information even though testing of
the connection to the domain controller is OK.
• Check the NSA's DNS setting. The DNS server the NSA is using must be able to resolve
the domain controller's address. If the domain controller uses a private IP address, the
NSA needs to use a private DNS server. If the domain controller uses a public IP address,
the NSA needs to use a public DNS server.
• Leave the domain and re-join it.
NSA-2401 User's Guide
for more details.
Section 12.2 on page 247.
Chapter 12 Troubleshooting
251