Active Directory AuthenticationDescription A valid Active Directory user fails to authenticate.Cause Probable causes may be:• The user is trying to authenticate using a wrongpassword.• The user is locked or disabled in Active Directory.• Active Directory domain controllers are offline orunreachable.• System clock and Active Directory clock are outof sync.Workaround 1. Check the NAS cluster solution system event log inthe NAS Manager for errors.2. Verify that the user is not disabled or locked inActive Directory.3. Verify that domain controllers are online andreachable using the network.4. Kerberos requires client/server clocks to be in sync.Verify the system time is in sync with the domaincontroller time and if required, configure the NTPsetting of the system.Troubleshooting Active Directory ConfigurationDescription Unable to add Active Directory users and groups to CIFSshares.Cause Probable causes may be:• Unable to ping the domain using FQDN.• DNS may not be configured.• NTP may not be configured.Workaround When configuring the system to connect to an ActiveDirectory domain:1. Ensure that you use FQDN and not the NETBIOSname of the domain or IP address of the domaincontroller.2. Ensure that the user has permissions to add systemsto the domain.3. Use the correct password.4. See DNS Configuration tab and enter the correctinformation.5. Configure the NTP information and ensure that thesystem time matches the domain time.6. If multiple NAS systems are used, ensure that youset different NETBIOS names. The system defaults toCIFS Storage as the name.86
