Symptom
After enabling account support for Kerberos AES 128/256 bit encryption when creating an AD user, the Infortrend storage cannot join the AD server.
Diagnosis
The issue arises because the encryption type Kerberos AES 128/256 bit is not supported by default on Infortrend storage systems. This incompatibility prevents the storage from successfully joining the Active Directory (AD) server.
Detailed Analysis
- Encryption Type Incompatibility:
The default configuration of Infortrend storage systems does not support Kerberos AES 128/256 bit encryption. This limitation causes a failure in the authentication process required for joining the AD server. - AD Server Requirements:
Active Directory servers require supported encryption methods for secure communication and authentication. When an unsupported encryption type is specified, the connection attempt fails, resulting in the inability to join the AD server.
Solution
To resolve this issue, follow these steps:
- Contact Technical Support:
Reach out to Infortrend technical support to add a matching key. The support team can assist in configuring the system to support Kerberos AES 128/256 bit encryption, thereby resolving the compatibility issue. You can contact support at Infortrend Technical Support. - Future Enhancements:
Infortrend plans to enhance the user interface (UI) by adding a column that allows users to add the required encryption type themselves. This planned update will provide users with more flexibility and control over their system configurations, reducing the need for direct technical support in similar situations.
By contacting technical support to update the encryption settings and taking advantage of future UI enhancements, users can ensure successful integration of Infortrend storage systems with AD servers using Kerberos AES 128/256 bit encryption.