Chapter 17 Troubleshooting

•Check the Access Control List (ACL) of read/write permissions associated with specific files and/or folders. Account names added to the list are linked to the files and folders that they are allowed to access, along with what kinds of actions they are allowed to perform with those files and folders (delete, move, rename, and so on).

•The user’s computer may already be connected to another of the NSA’s shares using a different user name and/or password. This can happen without the user realizing it if the user’s computer automatically connects to a share at logon.

Right-click any other connected shares and click Disconnect. Then re-attempt to connect to the desired share.

•Check if the share has an ANONYMOUS or EVERYONE access right. If the user is already logged into a share using her username and password, she will NOT be able to access a share that has ANONYMOUS FTP only access rights (as these require ‘no login’). In this case she should log out and try to access the share again without logging in. See Section 9.4 on page 188 for more details.

•Check if the shared folder is a subfolder of another (parent) share. Check that the parent share’s access rights do not conflict with the subfolder share. It is recommended that you do not create subfolder shares.

•Check if the user belongs to a group with conflicting access rights. DENY always takes precedence. If you allow a user FULL access to a share but set his group to DENY, then he will NOT be able to access the share.

•The local user should check if there are any existing mapped network drives to the NSA. He may need to disconnect existing CIFS connections as new CIFS connection may use previously-saved login information that may be different to NSA login.

•Check that the array in which the share resides, exists and is not down or degraded. If the array is down or degraded, see Section 17.2 on page 353.

•If the user is using DFS links, then he can only access the NSA using CIFS and not FTP.

•Check that the share has not been disabled.

I cannot import domain user or user group information even though testing of the connection to the domain controller is OK.

•Check the NSA’s DNS setting. The DNS server the NSA is using must be able to resolve the domain controller’s address. If the domain controller uses a private IP address, the NSA needs to use a private DNS server. If the domain controller uses a public IP address, the NSA needs to use a public DNS server.

•Leave the domain and re-join it.

A domain user can’t access a share.

362

 

NSA320 User’s Guide