NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Single domain user cannot access shares
I have two ReadyNAS 2120 devices, both of which are running Firmware v6.5.0. They have also been joined to my domain with shares and home folders available to domain users. Regarding the home folders, I have a batch script that runs when a user logs in to the domain that automatically maps the associated home folder to a drive letter based on the username used to log in with.
All of this works flawlessly with the exception of one user on one of the devices. The logon script fails and waits for a username and password to be entered into the command prompt. Entering the employee's credentials results in an "Access is denied" error before the prompt ultimately closes. From there, I try to browse to the ReadyNAS via Windows Explorer. This action brings up a Windows Security dialog requesting account credentials. This, too, fails after entering the employee's username and password (i.e., Access is denied). Not only can the user not access her home folder, but she can't browse to any of the shares (i.e., \\<readynasname>) on the device.
The user can connect to the other ReadyNAS perfectly fine. Also, no other users are having trouble accessing shares on the ReadyNAS in question. What could possibly be preventing one user out of 70 from accessing shares on one of two almost identically configured devices?
- Chris
8 Replies
Replies have been turned off for this discussion
Hello CRPearce,
When the NAS is integrated to a domain, the permission of the shares is being handled by the AD. All shares on ReadyNAS admin page should just to read/write Everyone. See ReadyNAS OS 6: Setting Active Directory folder permissions article.
Regards,
The problem is not with the shares. I initially thought that was the issue. However, this specific user cannot even browse to the ReadyNAS to see the shares.
For example, I can open Windows Explorer and browse to the ReadyNAS via "\\<ReadyNAS Name>". Doing so will display all of the shares, and from there I can map shares as drives, browse the subfolders, etc. All of my users have the ability to do this except for one. When browsing in this fashion, the user will be prompted for a username and a password. No matter what is entered, the result is "Access denied".
So, she can't even see a list of shares, thus preventing her from mapping specific shares as drives, which is what my logon script is attempting to do. I simply don't understand how all of my other domain users are fine except for this one account. Permissions on the domain match others who are able to access and view the shares, her username (i.e., "sxh") does not match a name of an existing share, etc.
- Chris
I decided to spend some time looking through the logs of the ReadyNAS and I came across something peculiar in the auth.log file...
Jun 01 16:43:52 READYNAS5 smbd[13890]: pam_unix(samba:account): could not identify user (from getpwnam(slw))
The user's domain username is "sxh". However, up until last fall, her username was "slw" and was changed after she got married. My thought is that the ReadyNAS is trying to use her old username for whatever reason. Surprisingly, I can see the ReadyNAS shares if I use the "slw" username, but that username does not work anywhere else inside of the domain for obvious reasons (i.e., it was changed to "sxh"). Furthermore, when the shares appear using the "slw" username, everything is there except for her home folder.
I believe this is why she is unable to access the ReadyNAS using her domain login credentials (i.e., "sxh"). This also explains why she is the only one affected. However, I'm not sure how to go about getting the ReadyNAS to forget her old username.
Please advise.
- Chris
Hello CRPearce,
Was she able to get to the shares before the NAS updated to 6.5.0? Was she using the "sxh" username already before the 6.5.0?
Regards,
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
