Active Directory Authentication; Troubleshooting Active Directory Configuration - Dell PowerVault NX3600 Administrator's Manual

Active Directory Authentication

Description
Cause
Workaround

Troubleshooting Active Directory Configuration

Description
Cause
Workaround
86
A valid Active Directory user fails to authenticate.
Probable causes may be:
• The user is trying to authenticate using a wrong
password.
• The user is locked or disabled in Active Directory.
• Active Directory domain controllers are offline or
unreachable.
• System clock and Active Directory clock are out
of sync.
1. Check the NAS cluster solution system event log in
the NAS Manager for errors.
2. Verify that the user is not disabled or locked in
Active Directory.
3. Verify that domain controllers are online and
reachable using the network.
4. Kerberos requires client/server clocks to be in sync.
Verify the system time is in sync with the domain
controller time and if required, configure the NTP
setting of the system.
Unable to add Active Directory users and groups to CIFS
shares.
Probable causes may be:
• Unable to ping the domain using FQDN.
• DNS may not be configured.
• NTP may not be configured.
When configuring the system to connect to an Active
Directory domain:
1. Ensure that you use FQDN and not the NETBIOS
name of the domain or IP address of the domain
controller.
2. Ensure that the user has permissions to add systems
to the domain.
3. Use the correct password.
4. See DNS Configuration tab and enter the correct
information.
5. Configure the NTP information and ensure that the
system time matches the domain time.
6. If multiple NAS systems are used, ensure that you
set different NETBIOS names. The system defaults to
CIFS Storage as the name.