Atomix.Gray Posted June 11, 2012 Share Posted June 11, 2012 Hey all - really could use some ideas - let me explain the issue. We've setup 195 Xerox Printers to be able to Scan to a network folder location (1 location) The Xerox's are using a Scan template (the template contains - Scan location, Domain, Username, Password) So no manual input is being done by the end user. The scan to network folder is using SMB protocol over port 139. We have ACLs set on each locations router to allow this traffic. Now the problem we are seeing is the service account used on each Xerox - is randomly being locked out by the Printers. We know the password is correct on the printers (as a few minutes or hours prior to the printer locking the account out we have successful files being placed inside the folder) I thought grabbing a pcap file of the traffic - but honestly I don't think Xerox support is going to be of any help with this one. Quote Link to comment Share on other sites More sharing options...
Jason Cooper Posted June 12, 2012 Share Posted June 12, 2012 Does your file servers logs and printer logs contain any indication if it is locking the printers out for a reason? That is where I would start to tackle this sort of issue. Also does access return after a while or do you have to manually reset something? Possible causes that spring to mind include the possiblity that there is a limit on the number of concurrent connections allowed by the server and when X number of multi-function devices (MFDs) have connected to it at the same time any more that try to connect are getting blocked. This sort of thing can be compounded if MFDs don't play nicely and disconnect after writing the file. Quote Link to comment Share on other sites More sharing options...
Infiltrator Posted June 12, 2012 Share Posted June 12, 2012 Apart from making sure, the scanner has the correct user/pass, also make sure the shared folder, has write permission set or the scanner will not be able to save the documents. Quote Link to comment Share on other sites More sharing options...
Atomix.Gray Posted June 15, 2012 Author Share Posted June 15, 2012 Thanks for the ideas guys so far no luck - Jason I was leaning towards that as well. However, we have File Shares that have 200+ users connected at one time. - however they are not using the same account. I will dig through the event logs more. I've been paying more attention to the logs and reports that come from QRadar - time to get down and dirty. Quote Link to comment Share on other sites More sharing options...
Atomix.Gray Posted June 28, 2012 Author Share Posted June 28, 2012 Found the answer - not sure why - yet. Drove out to the site and setup wireshark - even though the account was setup correctly it was still failing. Wireshark SMB packets stated incorrect Login - which I KNEW was wrong. I remembered a while back setting up SQL 2008 and the account had issues unless the domain name was in all CAPS - sure enough - changed the domain name to all CAPS and Boom it worked - no more lock outs!! Quote Link to comment Share on other sites More sharing options...
Stevie Posted July 26, 2013 Share Posted July 26, 2013 Another reason Xerox's (is that right?) are annoying. Ricoh's also have some odd issues like this at times. Quote Link to comment Share on other sites More sharing options...
GuardMoony Posted July 30, 2013 Share Posted July 30, 2013 Canon isnt much better :p We had the same thing that it required all caps. And looking at the documentation it never states that it needs caps. ( only the examples show there in caps ) Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.