Chapter 20 Troubleshooting

The user’s computer may already be connected to another of the NSA’s shares using a different user name and/or password. This can happen without the user realizing it if the user’s computer automatically connects to a share at logon. Right-click any other connected shares and click Disconnect. Then re-attempt to connect to the desired share.

Check if the share has an ANONYMOUS or EVERYONE access right. If the user is already logged into a share using her username and password, she will NOT be able to access a share that has ANONYMOUS FTP only access rights (as these require ‘no login’). In this case she should log out and try to access the share again without logging in. See Section 10.4 on page 187 for more details.

Check if the shared folder is a subfolder of another (parent) share. Check that the parent share’s access rights do not conflict with the subfolder share. It is recommended that you do not create subfolder shares.

Check if the user belongs to a group with conflicting access rights. DENY always takes precedence. If you allow a user FULL access to a share but set his group to DENY, then he will NOT be able to access the share.

The local user should check if there are any existing mapped network drives to the NSA. He may need to disconnect existing CIFS connections as new CIFS connection may use previously-saved login information that may be different to NSA login.

Check that the array in which the share resides, exists and is not down or degraded. If the array is down or degraded, see Section 20.2 on page 347.

If the user is using DFS links, then he can only access the NSA using CIFS and not FTP.

Check that the share has not been disabled.

I cannot import domain user or user group information even though testing of the connection to the domain controller is OK.

Check the NSA’s DNS setting. The DNS server the NSA is using must be able to resolve the domain controller’s address. If the domain controller uses a private IP address, the NSA needs to use a private DNS server. If the domain controller uses a public IP address, the NSA needs to use a public DNS server.

Leave the domain and re-join it.

A domain user can’t access a share.

In addition to the checks listed previously for local users, check that the domain controller is turned on and connected to the network.

A user can access a share but cannot access individual folders or files within the share.

Check the Access Control List (ACL) of read/write permissions associated with the share’s specific files and/or folders. Account names added to the list are linked to the files and folders that they are allowed to access, along with what kinds of actions they are allowed to perform with those files and folders (delete, move, rename, and so on).

 

355

Media Server User’s Guide