When I upgraded to 11.3-U2, I encountered an alert indicating that the NETLOGON share connection check encountered the following message:
I found that someone else had encountered this issue on Reddit: https://www.reddit.com/r/freenas/comments/fwmhyj/freenas_113u2_now_available/fmpqb08/ and tried the suggested steps from anodos325 but found that deselecting the certificate in the UI did not actually clear the attribute in the
Code:
Attempt to connect to netlogon share failed with error: 'key_length'.
I found that someone else had encountered this issue on Reddit: https://www.reddit.com/r/freenas/comments/fwmhyj/freenas_113u2_now_available/fmpqb08/ and tried the suggested steps from anodos325 but found that deselecting the certificate in the UI did not actually clear the attribute in the
activedirectory.update
WS API call. Even when I selected the tick to indicate no certificate, it would still send (what I would assume was) the ID for the previously selected certificate and prevent me from enabling the AD service with the same key_length error. I had to manually make my own calls to the API in order to set the field to null. I'm not sure if this is a bug with the verification or a bug in the way the GUI sets "null" for deselected dropdown boxes?