CityOfRome
asked on
How do I join a NAS Buffalo LinkStation to the domain?
I recently purchased a Buffalo LinkStation Pro LS-1000GL NAS to be used as additional storage on my network. In the Workgroup/Domain Properties, I have correctly entered the Active Directory NetBIOS name, AD domain name, AD domain controller name, administrator username & password, and the correct WINS server IP address. I have also followed the steps outlined on Buffalo's website about how to configure the NAS for Active Directory. Initially, authentication seems to be working, but I keep getting an error message that says: "Failed to join Active Directory Domain.
Please confirm the Active Directory Domain setting information, Administrator user name and password." I
Also, on the home page of the management software, I get a warning message that says: "Access permission for the domain controller is invalid." Do you have any idea of what might be causing these problems?
Buffalo-NAS.doc
Please confirm the Active Directory Domain setting information, Administrator user name and password." I
Also, on the home page of the management software, I get a warning message that says: "Access permission for the domain controller is invalid." Do you have any idea of what might be causing these problems?
Buffalo-NAS.doc
I would also run DCDIAG and Netdiag in verbose mode to see if anything is amiss.
I hope this helps !
I hope this helps !
ASKER
I tried both solutions, but I'm still getting the same error message. "Failed to join Active Directory Domain". Is there anything else I can try?
Okay, if it is not an authentication issue, can you make sure that you are up to date with the latest firmware? (1.11 dated 2007-09-04) http://www.buffalotech.com
There is also a NAS navigator utility that may help with the diagnosis.
Please check the domain name and password yet again. SOmetime the domian name is seperate and other times it is part of the authentication "domain\logname" and get the correct slash (backslash). Also, when you put the domain controller name in the Linkstation, try the IP address instead of the name.
Can you send a snapshot of the Network page after you put that stuff in?
There is also a NAS navigator utility that may help with the diagnosis.
Please check the domain name and password yet again. SOmetime the domian name is seperate and other times it is part of the authentication "domain\logname" and get the correct slash (backslash). Also, when you put the domain controller name in the Linkstation, try the IP address instead of the name.
Can you send a snapshot of the Network page after you put that stuff in?
Also, are you selecting the Windows NT, or Active Directory check box?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
I found an answer!!!!
After spending literally hours and hours on this, trying dozens of different suggestions from a variety of online suggestions and resources, it came down to this:
SPECIAL CHARACTERS in the NT Password account!!! We were using the dollar sign instead of the letter "S" and that messed it up!
If you have any characters outside of the alpha-numeric set, it will NOT work!
I tried everything else:
- Confirming NTP and time settings
- Adding the NAS as a pre-Windows 2000 machine
- Verifying forward and reverse DNS lookup entries
- Setting up WINS on the DC
- Verifying and triple-checking every IP and domain setting
- Verifying the DNS/Realm name
- Changing the Default Domain Policy setting in Group Policy Management (ie "Default Domain Policy/Computer Configuration/Windows Settings/Security Settings/Security Options/Network Security: LAN manager Authentication Level/Send LM & NTLM - use NTLMv2 session security if negotiated")
- Sacrificing small animals under a full moon (kidding on that last one)
And it all came down to that the password for the administrator account used for this NAS used dollar signs ("$") in place of the letter "s" for complexity.
So evidently, even though all of the documentation from Buffalo saids they support special character, they DON'T!!!!
So for anyone who finds this in the future, you may have to do all of those other things I listed, but for goodness sakes, start with an alpha-num password first!!!
After spending literally hours and hours on this, trying dozens of different suggestions from a variety of online suggestions and resources, it came down to this:
SPECIAL CHARACTERS in the NT Password account!!! We were using the dollar sign instead of the letter "S" and that messed it up!
If you have any characters outside of the alpha-numeric set, it will NOT work!
I tried everything else:
- Confirming NTP and time settings
- Adding the NAS as a pre-Windows 2000 machine
- Verifying forward and reverse DNS lookup entries
- Setting up WINS on the DC
- Verifying and triple-checking every IP and domain setting
- Verifying the DNS/Realm name
- Changing the Default Domain Policy setting in Group Policy Management (ie "Default Domain Policy/Computer Configuration/Windows Settings/Security Settings/Security Options/Network Security: LAN manager Authentication Level/Send LM & NTLM - use NTLMv2 session security if negotiated")
- Sacrificing small animals under a full moon (kidding on that last one)
And it all came down to that the password for the administrator account used for this NAS used dollar signs ("$") in place of the letter "s" for complexity.
So evidently, even though all of the documentation from Buffalo saids they support special character, they DON'T!!!!
So for anyone who finds this in the future, you may have to do all of those other things I listed, but for goodness sakes, start with an alpha-num password first!!!
SamGliksman: Just tried your suggestion and the special characters were the issue on mine as well.
Can you check in AD to see if there is a computer object created for the LS-1000? Or, if there is another computer already with that name? If you know there is not, try deleting the computer object in ad (if one exists) and try again. Also, go back and reenter the authentication information. Also, you may need to use the format "DOMAIN\Administrator" rather than just the administratove user name.