Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 26 subscribers
  • Views 1590 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG Kerberos not working

Sophos User1878

Hello for some reason Kerberos isnt working.

 

We have followed guides and it domains the machine ok in our root domain and we get this message 

Cannot establish NTLM authentication channel with S

 

dos charset 'CP850' unavailable - using ASCII
Failed to join domain: Failed to set machine spn: Constraint violation
Do you have sufficient permissions to create machine accounts?
Jul 30 16:34:49.844286 [nasm] '/oss/net' exited with invalid status '255'
Jul 30 16:34:49.844317 [nasm] net_ads_join (done)
Jul 30 16:34:49.844322 [nasm] net_ads_join failed to join with server->

 

The account we are joining the domain is a domain and enterprise admin. Do we need to do a set SPN on the AD account as well? 



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    HI,

    What is the character length of the hostname for the XG? If it's an FDQN hostname, try it without the domain suffix and retest (check it's 15 characters or under as well).

Reply
  • FormerMember
    0 FormerMember

    HI,

    What is the character length of the hostname for the XG? If it's an FDQN hostname, try it without the domain suffix and retest (check it's 15 characters or under as well).

Children
No Data