Solved

Access is Denied:New DNS server with EMC San

Posted on 2013-05-24
5
487 Views
Last Modified: 2013-06-11
I just added a new DNS+AD server to my environment and as soon as I did that, I had numerous users come up to me with issues connecting to our EMC SAN unit. We have a NX4 running with a Clarion system.

We are running a complete Windows environment with Server 2008 non-R1 AND R2 running as AD, DNS, and DHCP.

When the issue comes up, the user is prompted to enter their credentials when they try to access our local SAN unit. After entering those in, they'll get the same Windows prompt asking to re-enter their credentials, but it will also say Access is Denied. It is not exactly this screenshot, but it is VERY similar.

access denied
Is there some sort of trust issue between my new server and the SAN?

Does anyone have any idea on what's going on?
0
Comment
Question by:jumpassociates
  • 3
  • 2
5 Comments
 
LVL 38

Expert Comment

by:ChiefIT
Comment Utility
Typically, "Access Denied", means that it's not a block via say a firewall or trafficking data. Instead, the authentication database (Active Directory in this case) is not authenticating, like a bad username or password.

Can you logon to the SAN storage servers using the Local administrative passwords of the storage device. If so, you may have to re-join the domain.

Also, did adding this NEW server, as an AD server go well? Otherwise, you may have two domains with the same domain name. I know it sounds odd, but I have seen it happen. Did DCpromo go well, when adding the new DC, and can you check that using DCdiag utility.

I also notice that it's asking for a smart card. That mean you may be authenticating via PKI and CA server certificates. Is this storage server using PKI or Active Directory for access to the storage server.
0
 

Author Comment

by:jumpassociates
Comment Utility
Thanks for the response..

I checked the username and password, and the credentials are fine...It only happens with some of the users, but not all. Would re-adding the SAN to the domain fix this issue?

Adding the new server as AD and DNS went well (as far as I know). AD replicated over to this new server so I figured it was good. DNS works because the clients were able to ping this SAN using our internal alias (even after a dns flush).

The screenshot I embedded wasn't the actual screenshot, but very similar. I took it off the web, but the point I was trying to relay was that Windows was popping up with the authentication prompt and an Access is Denied msg. The smart card thing is unrelated...sorry!

Is there anything I can check to see what exactly is authenticating my users to the SAN? Maybe there is something in the SAN I have to configure to allow authentication from this new server?
0
 
LVL 38

Expert Comment

by:ChiefIT
Comment Utility
Ok, so what' s different with this DC. You said after adding it, you started having problems.
0
 

Author Comment

by:jumpassociates
Comment Utility
that's the tricky thing....I don't know! heh

its a brand new 2008 R2 server that only has AD and DNS set up on it. The other servers are 2008, NON-R2.

I wonder if there is any type of trust relationship the SAN needs with this new server to pass on the credentials..but I don't know for sure.
0
 
LVL 38

Accepted Solution

by:
ChiefIT earned 500 total points
Comment Utility
There are differences in authentication between R2 and 08 server.

http://technet.microsoft.com/en-us/library/dd391932%28v=ws.10%29.aspx

Check the authentication part.
0

Featured Post

New My Cloud Pro Series - organize everything!

With space to keep virtually everything, the My Cloud Pro Series offers your team the network storage to edit, save and share production files from anywhere with an internet connection. Compatible with both Mac and PC, you're able to protect your content regardless of OS.

Join & Write a Comment

Suggested Solutions

This is the first one of a series of articles I’ll be writing to address technical issues that are always referred to as network problems. The network boundaries have changed, therefore having an understanding of how each piece in the network  puzzl…
How to update Firmware and Bios in Dell Equalogic PS6000 Arrays and Hard Disks firmware update.
This video teaches viewers how to encrypt an external drive that requires a password to read and edit the drive. All tasks are done in Disk Utility. Plug in the external drive you wish to encrypt: Make sure all previous data on the drive has been …
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now