N7700PRO Fails to connect to ADS

[sander]

Hi,

I am trying to connect an N7700PRO with the latest firmware (3.0.1.X) to our Active Directory server (W2K8). It however fails to connect with this error message:

Incorrect administrator ID or password
Fail to join ADS domain!

In the logs on the AD server I see that the admin pw provided is correct but that it tries to change the computer account and after that fails to reconnect.

Does anyone know how to get around this?


A computer account was changed.

Subject:
Security ID: <DOMAIN>\Administrator
Account Name: Administrator
Account Domain: <DOMAIN>
Logon ID: 0xc20df350

Computer Account That Was Changed:
Security ID: <DOMAIN>\<SERVER>$
Account Name: <SERVER>$
Account Domain: <DOMAIN>


An account failed to log on.

Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0

Logon Type: 3

Account For Which Logon Failed:
Security ID: NULL SID
Account Name: <SERVER>$
Account Domain: <DOMAIN>

Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xc000006d
Sub Status: 0xc000006a

[krun2]

Sander,

It is very likely your W2K8 is running Kerberos or NTLM V2. I do not remember what one is setup by default, however Kerberos is much faster and more secure. I saw in the latest BETA release notes state it now has support for NTLM V2, however no mention of Kerberos . You can utilize a different protocol NTLM V2 for better security over the alternative LDAP or NTLM (not secure), on the W2K8 AD/Group Policy controller.

wiki Kerberos NTLM and LDAP for a ton of info.

Regards,

[dpankros]

I have an 8800 connected fine to a 2k3 server with firmware 3.00.06. I believe the 7700 is basically the same. However, I'm not sure what changed between 2k3 and 2k8 and between firmware 3.00.06 and 3.0.1.X. (Basically nothing between our configs is the same, but it is all similar.)

My configuration looks something like this:

Work Group/Domain Name: EXAMPLE
ADS/NT Support : Enable
Authentication Method : ADS
ADS/NT Server Name : ADS_SERVER
ADS/NT Realm : EXAMPLE.COM
Administrator ID : DOMAIN_ADMIN
Administrator Password : DOMAIN_ADMIN_PASSWORD

I know I had problems when I put a ".com" in the domain, for example. The first step is always to verify your settings. Beyond that, I'm not sure what to tell you. Maybe stiffing the traffic between the ADS server and the NAS would lend some clues.

-Dave

[sander]

Thank you both for your comments, however they do not solve the issue and unfortunately the response I have getting from Thecus support is rather poor. I will therefor continue with local accounts for now.