Root Login Attempts to AD?

[mevans336]

I deployed a new FreeNAS server and everything is working wonderfully, however, a few times a day I get failed login attempts to my AD domain from the root user, with a source workstation of my FreeNAS hostname.

My FreeNAS server is not opened to the Internet, so I suspect I have something misconfigured that is causing FreeNAS to attempt AD authentication via the root account.

I checked my SMB shares and they are all in Windows mode with domain accounts. I don't have any other services configured really, just the Active Directory service and 3 SMB shares.

Can anyone help me track down where FreeNAS might be configured to attempt this root login to AD?

 

[Sakuru]

Under the Directory tab, what do you have set for Domain Account Name?

 

[mevans336]

It's a domain account.

 

[Sakuru]

Did you configure anything on any of the other tabs under Directory?

 

[mevans336]

The Kerberos Realms tab has our domain entered, but I didn't add it. It doesn't look like there is anywhere to enter credentials on that tab.

There doesn't seem to be any rhyme or reason to the attempts. One was at 10:27AM, another at 8:49PM, then 8:56PM, then 7:45AM. Very odd.

 

[mevans336]

These alerts stopped when we moved from SMB shares to iSCSI.