Solved

Access is Denied:New DNS server with EMC San

Posted on 2013-05-24
5
493 Views
Last Modified: 2013-06-11
I just added a new DNS+AD server to my environment and as soon as I did that, I had numerous users come up to me with issues connecting to our EMC SAN unit. We have a NX4 running with a Clarion system.

We are running a complete Windows environment with Server 2008 non-R1 AND R2 running as AD, DNS, and DHCP.

When the issue comes up, the user is prompted to enter their credentials when they try to access our local SAN unit. After entering those in, they'll get the same Windows prompt asking to re-enter their credentials, but it will also say Access is Denied. It is not exactly this screenshot, but it is VERY similar.

access denied
Is there some sort of trust issue between my new server and the SAN?

Does anyone have any idea on what's going on?
0
Comment
Question by:jumpassociates
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 39

Expert Comment

by:ChiefIT
ID: 39197861
Typically, "Access Denied", means that it's not a block via say a firewall or trafficking data. Instead, the authentication database (Active Directory in this case) is not authenticating, like a bad username or password.

Can you logon to the SAN storage servers using the Local administrative passwords of the storage device. If so, you may have to re-join the domain.

Also, did adding this NEW server, as an AD server go well? Otherwise, you may have two domains with the same domain name. I know it sounds odd, but I have seen it happen. Did DCpromo go well, when adding the new DC, and can you check that using DCdiag utility.

I also notice that it's asking for a smart card. That mean you may be authenticating via PKI and CA server certificates. Is this storage server using PKI or Active Directory for access to the storage server.
0
 

Author Comment

by:jumpassociates
ID: 39198011
Thanks for the response..

I checked the username and password, and the credentials are fine...It only happens with some of the users, but not all. Would re-adding the SAN to the domain fix this issue?

Adding the new server as AD and DNS went well (as far as I know). AD replicated over to this new server so I figured it was good. DNS works because the clients were able to ping this SAN using our internal alias (even after a dns flush).

The screenshot I embedded wasn't the actual screenshot, but very similar. I took it off the web, but the point I was trying to relay was that Windows was popping up with the authentication prompt and an Access is Denied msg. The smart card thing is unrelated...sorry!

Is there anything I can check to see what exactly is authenticating my users to the SAN? Maybe there is something in the SAN I have to configure to allow authentication from this new server?
0
 
LVL 39

Expert Comment

by:ChiefIT
ID: 39198170
Ok, so what' s different with this DC. You said after adding it, you started having problems.
0
 

Author Comment

by:jumpassociates
ID: 39198247
that's the tricky thing....I don't know! heh

its a brand new 2008 R2 server that only has AD and DNS set up on it. The other servers are 2008, NON-R2.

I wonder if there is any type of trust relationship the SAN needs with this new server to pass on the credentials..but I don't know for sure.
0
 
LVL 39

Accepted Solution

by:
ChiefIT earned 500 total points
ID: 39198294
There are differences in authentication between R2 and 08 server.

http://technet.microsoft.com/en-us/library/dd391932%28v=ws.10%29.aspx

Check the authentication part.
0

Featured Post

Are You Using the Best Web Development Editor?

The worlds of web hosting and web development are constantly evolving. Every year we see design trends change, coding standards adapt and new frameworks/CMS created. With such a quick pace of change it’s easy to get lost trying to keep up.

See if your editor made the list.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

An article on effective troubleshooting
A look at what happened in the Verizon cloud breach.
This video teaches viewers how to encrypt an external drive that requires a password to read and edit the drive. All tasks are done in Disk Utility. Plug in the external drive you wish to encrypt: Make sure all previous data on the drive has been …
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Suggested Courses
Course of the Month4 days, 11 hours left to enroll

635 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question