NAS Login Password is reverting to previous password after being changed

Question

Dear Netgear Community,We are experiencing an issue with our Netgear NAS, where our Login (administrator) Password is reverting to the old password unexpectedly after having been changed.&nbsp;Our device details are as follows:Hardware: RN312Firmware version: 6.5.1&nbsp;Recently we changed the Login administrator password on all of our customer’s NAS as a security measure. After changing the password we confirmed that it was possible to login normally with the new password.&nbsp;After this, the password on the AD Server was also changed by our customer, so we then changed the password in the Authentication setup of the NAS, as follows:&nbsp;1. Log in to the NAS admin page2. Select "Account"3. Select "Authentication"4. Select "Active Directory" for the Access Type5. Change the Administrator password to the new AD server password&nbsp;When we tried to login again to the NAS Administrator page though, we found that the recently changed password did not work, and it was only possible to login with the old login password. It seems as though the new login password was rewritten to the previous password.&nbsp;Has anyone ever experienced a similar problem?If there is someone who has, could you please share any information or advice or countermeasures?&nbsp;*Also, for operational reasons, we are not able to update to the latest firmware version.&nbsp;Thank you in advance or your support.

Sandshark · Answer

To be frank, don't expect a lot of help until you update to a more recent version of the OS.&nbsp; You are way out of date, and numerous fixes and enhancements have been implemented since the 2016 release of that firmware version.&nbsp; I recommend you move to the current Long Term Support version, 6.9.6, then decide if anything in 6.10.x is something you need or want.

chris_modica · Answer

Sandshark&nbsp;Thank you for your response. Understood. My IT department would like to upgrade the FW, but our customer's policy is not to.Do you happen to know of any password issues that any of the past firmware updates have addressed?Thanks

StephenB · Answer

chris_modica&nbsp;wrote:
Do you happen to know of any password issues that any of the past firmware updates have addressed?
&nbsp;

I'm not seeing any linked to AD, though there are several AD bugs that have been addressed:

6.5.2 Fixed a bug in the Kerberos library that could cause Active Directory connections to hang.
6.6.0 Fixed an issue where ADS groups would show a GID instead of the group name in the GUI on new shares.
6.6.0 Adjusted the ADS realm name restrictions to allow number based labels.
6.7.1 ADS environment performance.
6.8.0 GUI performance issues in ADS mode with trusted domains when using share-level ACLs.
6.9.0 Home directory creation in ADS mode will now be skipped for machine accounts.
6.9.1 Fixed an issue where anonymous connections to guest-enabled shares may fail in ADS mode.
6.9.1 Fixed an issue where ADS authentication may fail to work during the first boot after updating to 6.9.0.
6.9.1 Fixed a GUI offline issue after joining ADS where the domain contained a group named "users".

The list of bugs in the release notes is not complete though.
&nbsp;
chris_modica&nbsp;wrote:
but our customer's policy is not to.

If they care about network security, you could search the release notes and get a list of CVEs and other security updates to them fairly quickly (perhaps using&nbsp;"readynas OS 6 software version" CVE site:kb.netgear.com as a search string).&nbsp; That might motivate them to reconsider their policy.
&nbsp;
chris_modica&nbsp;wrote:
When we tried to login again to the NAS Administrator page though, we found that the recently changed password did not work, and it was only possible to login with the old login password. It seems as though the new login password was rewritten to the previous password.

Did you try resetting the local admin password in the NAS again, to see if it sticks this time?
&nbsp;

Sandshark · Answer

chris_modica&nbsp;wrote:Sandshark&nbsp;Thank you for your response. Understood. My IT department would like to upgrade the FW, but our customer's policy is not to.&nbsp;That is a very naive&nbsp;position.&nbsp; Do they fail to update Windows, too?&nbsp; I suspect that they are confusing what the NAS calls "firmware" to what most others do (which is more like BIOS).&nbsp; The firmware is the Linux based operating system.&nbsp;My point is that few are going to be able to test your situation, and Netgear will most likely simply refuse to, because the NAS is running such outdated firmware, not that there may already be a fix for it.

chris_modica · Answer

StephenB&nbsp;Thank you for the list of bug fixes. Can't say if any of them are responsible in this case...&nbsp;Also, we did try to change the admin password back after it reverted. On most of the NAS we were successful, but there was one were the old password persisted. We are planning to try again to reset it later. There was a slow response time in getting the usual "successful" message back after changing the AD server password, so&nbsp;there may be a network component as well.

Forum Discussion

NAS Login Password is reverting to previous password after being changed

10 Replies

Related Content

Revert New Volume creation

RBS750 drops wired connection to RBR 750 and reverts to wireless

Password pppoe

MR1100: Password ändern

App refusing Password

NETGEAR Academy

ProSupport for Business