Sharp - MX4070 and SSO Active Directory Integration Random issues

[nobody-here]

Hello everybody.

We successfully connected a MX4070 to a AD with Single Sign On Option.
It's working but randomly we are experiencing some problems on accessing the domain.

I configurated driver in order to hold prints in queue. Prints are regurarly Queued.
I go to machine panel. I try to login, but I get no access from AD.
5 minutes after. Trying to login, again, and It Logins.

It looks like Machine do not comunicate with AD in order to autenthicate.

Is there a LOG both from Windows Server and Machine where to get some information on what's going on.
I read many Tips or helps, but nothing seems to solve my case.

Wherever should I look into?
Thank you.

[slimslob]

A bad network switch can cause intermittent loss of connection. Some other device may be stepping the IP address for the MX4070.

[bsm2]

recheck dns settings and domain name settings
used hard ip address if possible

[nobody-here]

Thank you so much for your prompt reply.

@Slimslob:
Hardware network is really new and good. It's a new environment, We checked it and no issues where detected. Printing is always good.

@bsm2:
DNS looks good, because logging into WebServer, and DC server, machine is fully registered.
Why do yuu think about Hard IP in a local environment. DNS should be really fast for translation.


What you think about Search String? "DC=cn" and so....
we are not so good in deep AD configuration.

[bsm2]

DNS has to resolve name host name IE Server1 to an Ip address 192.168.1.180 cut out the middle man use hard ip when ever possible

Also check domain name windows likes friends if domain name is not correct windows thinks it's a foe trying to break in.

[mansart]

Machine syslog may provide some insight. Available at (mach ip) xxx.xxx.xxx.xxx/service_testpage.html

[nobody-here]

Ok we have a little clue (and maybe a solution).

MFPs and DC are in different subnets "192.168.240.x" for MFPs while DC and DNS are in "192.168.1.x"
Traffic is redirected through a Managed Cisco Switch. Networks are truly trasparent and reacheable among themselves.

But If I move MFPs to the same subnet as DC, they work perfectly. Without any random fall of domain connection.

I can keep those MFPs in the same subnet....but I would prefer to have a separate Subnets for security reasons. (MFPs should be accessed from other domain's or users with separate authentication).
Any help is really appreciated.

Thanks.

[bsm2]

Nice must be a timeout request that fails

[nobody-here]

Ok, we are almost there but few issues still on. Machines are connected, logged into AD and working, but

- There is a strange behaviour with RFID access. Randomly, User cannot fully login. Machine panel is unlocked so Copy/print/USB is working but not logged into AD, so scanning is locked.
We have a double POPUP with conflict results. Login Successful / Login Failed. See Attached pictures.

- We have more than 100 pcs connected. They are working. Only 10/12 PC have print driver not making "Autoconfiguration" so Single Sign On is not working. We tried everything, Antivirus Disabled, Firewall Disabled, Local Admin, AD Admin, PC directly connected to machine with crosscable.... but No way. Driver is D41 21 July. See pictures.

Any help would be appreciated once more... and thank you so much.

IMG_20170911_120515.jpgIMG_20170911_110731.jpg