Issues getting FreeNAS 9.1.0 or 9.2.1 to authenticate with Domain.

[TremorAcePV]

Hi guys,

I'm going to make this as short as possible. My FreeNAS system could authenticate with kerberos on our domain at one point. If I went into permissions for volumes, I could see all the AD users and groups in the list.

Now, after nothing has changed that I know of, it can't authenticate anymore.

It was working on 9.1.0 RELEASE but stopped working on 9.1.0 RELEASE. I am now currently on 9.2.1 (I considered it possible that the update would fix things).

So yeah. I know for a fact that the user/pass is correct on our DC. I've checked multiple times.

So I can ping the Domain, but if I try that command given in this thread to see if I have a healthy Domain, I don't, apparently.

Permissions didn't change on the Domain. User account passwords didn't change.

Domain Controller environment:
3 x Windows 2008 R2 Domain Controller Servers with a functional level of 2008 R2.

Any help is appreciated. Thanks,
Vitalius.

Edit:

Found this earlier in the Directory Service startup process,

Note in the middle, "unable to initialize domain list". When I use wbinfo --all-domains, it lists all the domains correctly. Not sure what is up with the list though.

 

[dlavigne]

Did you ever get this sorted? If not, does upgrading to 9.2.1.2 fix it? A whole slew of CIFS bugs were fixed by that point release.

 

[TremorAcePV]

Did you ever get this sorted? If not, does upgrading to 9.2.1.2 fix it? A whole slew of CIFS bugs were fixed by that point release.

No, I didn't. I'll try installing 9.2.1.2 and see if that fixes things. If it doesn't, I'll jump back to 9.1.0 and see if that does it, then work my way back until things work again.

 

[joeschmuck]

9.2.1.2 should fix your issues. There is still a bug in it but maybe it won't affect you. Either way you will be better off with 9.2.1.2.

 

[TremorAcePV]

9.2.1.2 should fix your issues. There is still a bug in it but maybe it won't affect you. Either way you will be better off with 9.2.1.2.

Thanks for the suggestion. I upgraded to 9.2.1.2 which fixed the IP binding problem, but then created a new one. CIFS won't work and Directory Services won't start.

Time to go back to 9.1.1. These services worked in that version.

Edit: And now I can't download 9.1.1 because it keeps getting to 95% then failing. Oh, and the scroll doesn't work on the download page, so the only way you can see 9.1.1's Release ISO is if you use Ctrl + F then type 9.1.1. Otherwise it's hidden behind the footer and inaccessible.

Great.

 

[TremorAcePV]

I just thought I would update this thread with a new development.

I own a SonicWall Firewall device. It registers FreeNAS trying to connect to my network as an IP Spoof and keeps denying it an IP address.

That explains everything, I think.

Why it worked for a while, then stopped, I do not know, but it makes sense.

Update 2: The IP Spoof issue only occurs when I set both my onboard NICs to a LAGG (Load Balanced). If I leave the NICs alone aside from setting a default gateway, DNS, and static IP, it works fine.

How strange.