× NETGEAR will be terminating ReadyCLOUD service by July 1st, 2023. For more details click here.
Orbi WiFi 7 RBE973
Reply

RN 2120 Active Directory "Import Error"

CRPearce
Aspirant

RN 2120 Active Directory "Import Error"

I have two office locations, each of which has a ReadyNAS 2120 set up for storing location-based backups as well as serving up home folders for users.  Both devices have been live for over a year and connected to our domain.  For the sake of this discussion, Location A is where the primary DC (Server 2003) is located and Location B houses the secondary DC (Server 2008).  Since Day 1, both NAS devices have pointed to the primary DC at Location A for the Directory Server Address.  Time server and DNS settings were pointed to their respective DCs.

 

First-thing Monday morning, employees at Location B were unable to connect to their individual home folders.  I reviewed the Accounts > Authentication page and it shows "Import error" under the "Authentication" heading.  For the past two days, I have been trying to troubleshoot and resolve this issue, but to no avail.

 

Beyond what I know from working with these in the past, I've done quite a bit of searching online for answers to this problem and have tried all of the suggestions that I found, but nothing has gotten this issue fixed.  Here is a list of things that I have tried:

 

- Location A's RN is working fine.  So, I mimicked its DNS, time, and authentication settings.

 

- I removed the RN from the domain and then re-added it.  It successfully joins the domain, but it fails while importing users and groups (i.e., "Import error")

 

- Instead of using information from the primary DC at Location A (i.e., original settings), I decided to use the secondary DC at Location B.  So, DNS, time, and authentication settings all pointed to the secondary DC

 

- Everything in-between the three troubleshooting steps above

 

I also downloaded and reviewed the logs.  I specifically focused on the ADS.log file.  I believe the lines below are indicative of the problem, but I do not know where to go from here...

 

[16-05-24 11:48:12] 1918 rndb_account.c:963 info: 278 domain user found
[16-05-24 11:48:15] 1918 rndb_account.c:989 info: 100/278 users imported so far
[16-05-24 11:48:17] 1918 rndb_account.c:989 info: 200/278 users imported so far
[16-05-24 11:48:19] 1918 rndb_account.c:1204 info: 278/278 users imported in 9104ms.
[16-05-24 11:48:19] 1918 rndb_account.c:2262 error: Error. Fail to insert $home_folder/$user/$group/$group_has_user
[16-05-24 11:48:19] 1918 rndb_account.c:2405 error: rndb_ads_account_import() ==> 3 (12360ms)
[16-05-24 11:48:19] 1918 rndb_api.c:956 error: rndb_import_nolock() ==> 3 (12362ms)

 

At this point, I'm left scratching my head.  I'm not sure what else to try other than backing up the data and doing a factory reset.  Before I go that route, though, does anyone have any insight regarding additional troubleshooting steps I can take?

 

I appreciate any and all assistance.  Thank you in advance and take care.

 

- Chris

Model: RN21241D|ReadyNAS 2120 1U 4- Bay
Message 1 of 72
mdgm-ntgr
NETGEAR Employee Retired

Re: RN 2120 Active Directory "Import Error"

Can you send in the logs zip files (see the Sending Logs link in my sig)?

Message 2 of 72
mobidee
Aspirant

Re: RN 2120 Active Directory "Import Error"

Same problem and the same behavior with any domain of Windows 2003, 2008, 20008R2

Message 3 of 72
mobidee
Aspirant

Re: RN 2120 Active Directory "Import Error"

sent logs.

Message 4 of 72
CRPearce
Aspirant

Re: RN 2120 Active Directory "Import Error"

I apologize for the delayed response.  I was traveling for the day and have been effectively "off the grid" until now.

 

I've e-mailed the logs per your request.  If there is any additional information that you need, please let me know.  I appreciate your assistance.

Message 5 of 72
mdgm-ntgr
NETGEAR Employee Retired

Re: RN 2120 Active Directory "Import Error"

Hi CRPearce,

 

I have sent you a PM.

Message 6 of 72
witto17
Tutor

Re: RN 2120 Active Directory "Import Error"

Does anyone have a solution to this issue?

 

[16-05-26 00:36:09] 2447 rndb_account.c:1204 info: 15/15 users imported in 273022ms.
[16-05-26 00:36:09] 2447 rndb_account.c:2262 error: Error. Fail to insert $home_folder/$user/$group/$group_has_user
[16-05-26 00:36:09] 2447 rndb_account.c:2405 error: rndb_ads_account_import() ==> 3 (546955ms)
[16-05-26 00:36:09] 2447 rndb_api.c:956 error: rndb_import_nolock() ==> 3 (546955ms)

Message 7 of 72
AntonyGC
Aspirant

Re: RN 2120 Active Directory "Import Error"

Hi, Im getting the same issue. The Nas was connected to the domain fine for a month or so, then we upgraded to Firmware 6.5.0 and how I cant import the Domain Users list any more. I get the same generic "Import Failure" error.

 

I've removed it from the Domain, re added it and all adds back fine but cant get it to Sync the User Accounts from AD/DC

 

Does anyone have a fix for this? I should mention the DC it based in the US and the NAS is in Australia. We have a direct VPN link to the DC/US Network

thanks

Model: RN31200|ReadyNAS 300 Series 2- Bay
Message 8 of 72
witto17
Tutor

Re: RN 2120 Active Directory "Import Error"

BTW our issue started with 6.5.0 as well. It was working just perfect last week..

Message 9 of 72
CRPearce
Aspirant

Re: RN 2120 Active Directory "Import Error"

When the issue originally started, my ReadyNAS 2120 was running firmware v6.4.2.  In an attempt to resolve the "Import error" issue, I upgraded to v6.5.0, but that did not make a difference.

 

Furthermore, the RN 2120 at my other location (i.e., Location A) is working fine.  It, too, was running v6.4.2 and continued working after updating it to v6.5.0.  Both devices are connected to the same domain.  However, I've been tweaking the AD settings within the NAS, specifically time server, DC, and DNS for troubleshooting.  Initially, though, the settings were almost identical between the two devices aside from DNS.

 

I've been told that Netgear's engineers are reviewing the logs that I sent in.  I will report back with their findings if they can be of assistance to others.

Message 10 of 72
DirkG
Aspirant

Re: RN 2120 Active Directory "Import Error"

Hello,

 

having the same problem, you should check, if the following is working, until a fix is available:

 

1. Disable AD account caching

2. Please logoff/logon on your windows machine after making changes on the AD settings of the Readynas.

3. Try to access the folders again

 

 

Best regards

Dirk

 

Message 11 of 72
CRPearce
Aspirant

Re: RN 2120 Active Directory "Import Error"

Dirk, when you suggest turning off AD account caching, are you referring to the "Do not cache ADS accounts locally" checkbox on the Authentication admin page of the RN or a GPO change for the domain?

Message 12 of 72
DirkG
Aspirant

Re: RN 2120 Active Directory "Import Error"

Hello CRPearce,

 

I am referring to enable the "Do not cache ADS accounts locally" checkbox on the Authentification admin page of the RN.

 

On my device, after submitting this setting on the RN and logoff/logon on my Winodws PC, I was able to access the folders on the RN again.

 

Moreover, the users who have connected to the folders on the RN, after I made the mentioned change, were shown on the user page of the RN again.

 

Best regards

Dirk

Message 13 of 72
AntonyGC
Aspirant

Re: RN 2120 Active Directory "Import Error"

I completely removed my NAS from the Domain and re-added it. it adds fine back to the Domain but it just cant sync the Domain Users.

 

I've never had the cached AD users option checked. If it syncs correctly, you should see all the Domain Users under the users tab/option

Message 14 of 72
mdgm-ntgr
NETGEAR Employee Retired

Re: RN 2120 Active Directory "Import Error"

It appears most of you have got current support warranty. I would suggest contacting support.

If you try leaving and rejoining AD then we won't be able to root cause what originally caused the issue in the first place until/unless we can reproduce this.

Message 15 of 72
mdgm-ntgr
NETGEAR Employee Retired

Re: RN 2120 Active Directory "Import Error"

AntonyGC, I see you already have a support case open. Support has requested remote access to your system.

Message 16 of 72
CRPearce
Aspirant

Re: RN 2120 Active Directory "Import Error"

The engineers reviewed my logs.  However, they could not determine a root cause because I had removed the ReadyNAS from my domain, which muddied up the logs.

 

As of right now, all of my users and groups are appearing and the "Import error" is no longer a thing.  Refreshing the ADS accounts results in the "Import was successful" message.  I will confirm with my users that they can successfully access their home folders and other shares when they return after the holiday weekend.

 

I am waiting to hear back regarding what fix was implemented in the event that it can help others with the same or similar issue.  However, try to avoid removing the RN from the domain as a troubleshooting step and contact support first.  That way, they stand a better chance of determining a root cause.

 

- Chris

Message 17 of 72
mdgm-ntgr
NETGEAR Employee Retired

Re: RN 2120 Active Directory "Import Error"

The fix in this particular case was something that would have to be done via support. This system had been having import errors for nearly 2 years.

Message 18 of 72
AntonyGC
Aspirant

Re: RN 2120 Active Directory "Import Error"

Thanks mdgm

I have an open support ticket with them now so hoping they can resolve the issue as staff havent been able to access it for over a week now and there are a lot of files on there that they need/

Message 19 of 72
cclvg
Aspirant

Re: RN 2120 Active Directory "Import Error"

Hello

 

I have the same problem on my two readynas Rn312 since i have upgrade it To 6.5 OS

I've removed it from the Domain, re added i, downgrade to 6.4.2,

I also try to remove the user folder's on /home but only a factory reset resolve this problem.

I can't do this on the second nas. If anyone have a idea

 

Thanks

 

 

Model: RN31211D|ReadyNAS 300 Series 2- Bay
Message 20 of 72
mdgm-ntgr
NETGEAR Employee Retired

Re: RN 2120 Active Directory "Import Error"

cclvg, have you contacted support?

You should not downgrade to 6.4.2.

Also if you try removing from domain, rejoining etc. we can't find clues to the root cause of the issue if there is a common issue involved.

Message 21 of 72
CRPearce
Aspirant

Re: RN 2120 Active Directory "Import Error"

Just to reiterate, if you're experiencing the "Import error" issue, do NOT attempt to remove the ReadyNAS from the domain and then readd it.  This action prevents support from being able to find a potential common root cause.  If one does exist, a firmware update could likely be developed and released to prevent this from happening in the future.

 

Ultimately, support was able to remote into my ReadyNAS and resolve the problem.  The actions taken involved resetting a couple of things, which is why performing a factory reset appears to be resolving this issue for users.  So, save yourself the time and aggravation, contact support, and let them remote in.

 

- Chris

Message 22 of 72
witto17
Tutor

Re: RN 2120 Active Directory "Import Error"

Hi All,

Support did remote into my device but so far no dice.. Perhaps they'll get it fix this week.

They thought it was a timeout issue but changing that setting didn't work.

Message 23 of 72
kohdee
NETGEAR Expert

Re: RN 2120 Active Directory "Import Error"

I don't recommend leaving/rejoining the domain... You could just have something strange cached. 

This might help from SSH -- use at your own risk.

 

# systemctl stop readynasd

# sqlite3 /var/readynasd/db.sq3 'delete from "$home_folder";'

# net cache flush

# systemctl start readynasd

Message 24 of 72
SCP
Guide
Guide

Re: RN 2120 Active Directory "Import Error"

Hello, i have got the same problem of everybody here on the same version (6.5.0)..
I have got twice NAS 314, with the same configuration.
In one all is ok, and in the second, same problem, it could not connect...
It happen aftter the maj to the 6.5.0 all was ok before

If i try what you say, i have got an error from the sqlite commande:

 "Error: no such table"


But in fact i have found a solution that work a time, but will not work if you refresh an other time the accout.

If i do that:

# systemctl stop readynasd
# cd /var/readynasd
# mv db.sq3 db.sq3.old
# systemctl start readynasd

From this time i get the list of all the account.


But if i reboot the nas, or if i make an update of account in the option ==> error and there is no account any more....

Does it help?

Message 25 of 72
Top Contributors
Discussion stats
Announcements