ZyXEL Communications NSA series, User Manual

Page: 335 / 358

Chapter 19 Troubleshooting
Media Server User’s Guide
335
• The user’s computer may already be connected to another of the NSA’s shares using a different
user name and/or password. This can happen without the user realizing it if the user’s computer
automatically connects to a share at logon. Right-click any other connected shares and click
Disconnect. Then re-attempt to connect to the desired share.
• Check if the share has an ANONYMOUS or EVERYONE access right. If the user is already logged
into a share using her username and password, she will NOT be able to access a share that has
ANONYMOUS FTP only access rights (as these require ‘no login’). In this case she should log out
and try to access the share again without logging in. See
Section 9.4 on page 177 for more
details.
• Check if the shared folder is a subfolder of another (parent) share. Check that the parent share’s
access rights do not conflict with the subfolder share. It is recommended that you do not create
subfolder shares.
• Check if the user belongs to a group with conflicting access rights. DENY always takes
precedence. If you allow a user FULL access to a share but set his group to DENY, then he will
NOT be able to access the share.
• The local user should check if there are any existing mapped network drives to the NSA. He may
need to disconnect existing CIFS connections as new CIFS connection may use previously-saved
login information that may be different to NSA login.
• Check that the array in which the share resides, exists and is not down or degraded. If the array
is down or degraded, see Section 19.2 on page 327 .
• If the user is using DFS links, then he can only access the NSA using CIFS and not FTP.
• Check that the share has not been disabled.
I cannot import domain user or user group information even though testing of the connection
to the domain controller is OK.
• Check the NSA’s DNS setting. The DNS server the NSA is using must be able to resolve the
domain controller’s address. If the domain controller uses a private IP address, the NSA needs to
use a private DNS server. If the domain controller uses a public IP address, the NSA needs to use
a public DNS server.
• Leave the domain and re-join it.
A domain user can’t access a share.
In addition to the checks listed previously for local users, check that the domain controller is turned
on and connected to the network.
A user can access a share but cannot access individual folders or files within the share.
• Check the Access Control List (ACL) of read/write permissions associated with the share’s
specific files and/or folders. Account names added to the list are linked to the files and folders
that they are allowed to access, along with what kinds of actions they are allowed to perform
with those files and folders (delete, move, rename, and so on).