(self-resolved) WSA - NTLM realm passes tests but isn't authenticating users

[rpatty]

Nevermind, problem solved itself. Maybe there was some delay while communication started working?

----

We just swapped out an older S370 for an S390, using the config file to duplicate settings. On the old WSA, we had an NTLM authentication realm that authenticated users.

After today's cutover, users are no longer being authenticated. I've been in the Authentication Realm settings, and everything looks the same as it was before. We've even run the test, and that comes back clear. But all users show up in the logs as just IP addresses, never with a user name.

[Ken Stieers]

You have to rejoin the WSA to the domain.

Just like bringing a windows box with the same name and config onto the domain.... the trust relationship isn't there.

Go to Network/Authentication.  Click on the realm name you're using for NTLM.  On the page that comes up, click on the Join Domain button and give it AD credentials that have rights to modify the machine account (eg. DA, or other creds you may have delegated those rights to...)

[rpatty]

Sorry, forgot to mention, we did rejoin it to the domain. Since it was the same system name, we deleted the old object in the domain and then rejoined, which created a new object. Thank you for the suggestion, though.