dca  Freshman Member

leider hat es nur geholfen auf die Version 6.00 zurück zugehen.

Hi Joslyn, I Downgraded to the version 6.00 yesterday and (except vor reactivating MSChap) changed nothing to the config. Everythings working normal again. The NXC registered its computeraccount in the AD and is authenticating like before. Just to test it I did the Update to version 6.10 agian (maybe there was an unnoticed…

Hi Joslyn, I double checked and the password and user are correct. Sascha

Hi Joslyn, the nslookup brings the correct IPs of both our dcs. Sascha

Hi Joslyn, the Error message is still Failed to join domain: failed to find DC for domain DCABERLIN - {Operation Failed} The requested operation was unsuccessful. I tried some DNS Settings to see if that is the problem. but nothing changed. and still running a packet-trace while running this command schow that the nxc…

Hi Joslyn, I deleted the entry and rebooted the NXC but it doesnt register itself. all settings are 100% correct.I did a packet-trace via ssh on the NXC and saw that nothing happens on port 88 (for Kerberos/mschap authentication) same on 464. (did a trace for dns just to be sure it works and saw something) so it seems the…

Hi Joslyn, yes there is a computer account for the NXC. but I can delete it and let it rejoin. Is a reboot necessary for that? Sascha

Hi Joslyn, I just found something: the aaa server is configured as in this article https://kb.zyxel.com/KB/searchArticle!gwsViewDetail.action?articleOid=014326&lang=EN when I disable the Domain Authentication for MSChap I can finally see requests from the NXC on the firewall and on the NXC itself. so the packets reaching…

Hi Joslyn, The Login on the HTTPS interface via AD is denied because of insufficient rights. But it would work and i can see that there is the connection to the Domain Controller.The PC login via RADIUS works. with version 6.00 it worked. right after the updated it stopped working (nothing else was changed). so I tried…

Hi Joslyn, yes thats correct. could you see anything in the file? the bosses here are getting upset. so we may have to think about a workaround with a PSK. Sascha

Hi Joslyn, wich Diagnostic do you mean? the one where the login works? The AD Server runs on Server 2012 regardsSascha

Hi Joslyn, I send you the file from the Interface that is used for all traffic on the nxc. But I honestly think that there is no traffic to the DC.When I Login from the Webinterface of the NXC the traffic to the DC is shown. But in this file I only tried to logon via the SSID and there is no traffic to the DC I could see.…

Hello Joslyn, thank you for your reply. the is a 2 Second gap between the nxc and the DC. I attached the file for you. we used the Version 6.00 before we updated. regardsSascha