NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
There is no access to the NAS which is a member of AD from computers not in the domain
Hello.
My NAS is member AD domain 2008R2
I removed the checkbox allow anonimus access, and my domain users from windows pc which in domain have access well.
But i have several win and linux pc and MFU (which should save scans in smb folder) which not in domain. I used domain user's credentials (like domain\user), but dont got acces to share.
On linux i tried several methods (fstab, in filemanager in smbclient) to check access, but without success.
smbclient -W domain -U user //nas/test
session setup failed: NT_STATUS_LOGON_FAILURE
How can I access from a computer that is not in the domain?
4 Replies
The acceptance of the logon from a computer not in the domain is up to the AD server, not the NAS. So you might look into the policies there.
II can log on to other computers on the network by just entering the domain/username and password of the domain users or administrator.
//nas/test - anonymous access is disabled
smbclient -U username (domain's username) //nas/test Domain=[DOMAIN] OS=[Windows 6.1 (why?)] Server=[Samba 4.7.0] tree connect failed: NT_STATUS_ACCESS_DENIED smbclient -U domain/username //nas/test session setup failed: NT_STATUS_LOGON_FAILURE smbclient -U domain/domainadmin //nas/test session setup failed: NT_STATUS_LOGON_FAILURE smbclient -U nas/local_nas_admin //nas/test OK
//nas/test1 - anonymous access is enabled smbclient -U domain/username //nas/test1 session setup failed: NT_STATUS_LOGON_FAILURE smbclient -U nas/anyname //nas/test1 OK smbclient -U anyname //nas/test1 OKWork with local account of nas, but setup local accounts disabled when nas is domain's member.
I think the case may be in the authorized authorization methods for NAS, but where and what to change I do not know.
Experimenting with configs of samba I'm afraid
When you have AD enabled on the NAS, it asks the AD for authentication. So I don't think this is related to the NAS authentication policies, it would have to be in the domain controller. Are the other computers you are testing with in the domain? (which is different from the user account being a domain account).
You could also check to see if your smbclient is up to date. One setting you could check on the NAS is whether SMB encryption is required. If it is, you might try resetting that to desired or enabled. Go into the share settings for Test, select Network Access, and then click on the advanced control on the bottom left. That will show you the encryption setting.
Another approach is to enable NFS on the NAS, and use that instead of SMB. You'd change the mount point to data/test (assuming your volume name is the default name data).
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
