ACL Problems with N5200

[qicric]

Hi!

We are having a very strange problem with folder acls. We have upgraded our N5200BR to firmware version 2.00.01 from 1.00.10. We did this to add more stable AD support... but we have found some odd behaviour.

1) All our AD users (not groups!) are listed twice in the ACL window.

2) If we add just AD Groups then the acl works as expected and everything is fine. (and the folders acl can be edited correctly later)

3) As soon as we add an AD user (for the first time) when you click the "apply" button you get a screen saying that the ACL has been updated. When you click "ok" on THAT screen and return to the ACL screen, you find that ALL ACL's have been removed from the lists. This is NOT actually the case on the folder and it the ACLs still works

4) After you have added a user as above the ACL can't be edited correctly...

We have NOT rebuilt the RAID array since we have upgraded our firmware. (Although I would hope that this is'nt needed).

We "Think" this could be a browser/ gui problem as IE7 or Mozzila reports an error on the page after adding the first user.



Thanks!



ps... We are pleased that the unit stays on AD more reliably since the upgrade....

[Thecus - Yvon]

Dear Sir,

I might need to confirm follwoing items:

1. Is there any other trust AD with this AD?
2. Does this AD have alias name?
3. Does Netlogon service is enabled?
4. Does Windows Time service is enabled?

Additionally, I would recommend diagnostic DC through Domain Controller Diagnostics Tool (dcdiag.exe)

http://technet2.microsoft.com/window....mspx?mfr=true

in case the problem still exist, please enable System Log through below URL

http://<N5200_IP>/adm/getform.html?name=syslog

After the System Log service is enabled, please try join to AD again, those login log will save into “tmp” folder under Nsync folder.

Please send the config.bin and all files & folders under Nsync folder. The config.bin can be downloaded from [System / Mgmt] page and then press [Download] button.


Yvon.

[qicric]

Hi Yvon!!!

Thanks for the SUPER-QUICK reply... But we have a strange fix (That maybe you could explain to us!)

If we "Sync the AD account" on the ACL page it then works as expected even between log-ons.

What does the "Sync AD Account" do and how often should we have to do it please?

Thanks!

Richard

[Thecus - Yvon]

Dear Sir,

N5200 is passive to sync with AD, while we click the "Sync AD Account" and than system jsut start to get the user list.

Yvon.