Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SophosXG und AD Anbindung bei WLAN

Hi,

habe hier eine XG230 im Einsatz. Nun möchte ich gerne das sich AD User mit dem Benutzernamen und Kennwort am WLAN anmelden können. Das funktioniert grundsätzlich auch übers CaptivePortal.

Nun ist es aber so, das wenn ein User im AD sein PW ändert, das alte PW für die WLAN Verbindung aktiv bleibt. Ergo ließt die Sophos nicht die aktualisierten Benutzerinfos aus dem AD und der User kann sich mit dem alten PW, welches in der WLAN Verbindung gespeichert ist, verbinden.

Gibt es eine Möglichkeit dies zu ändern?

Gruß und Danke

Martin



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to the Community! 

    Once you change the AD user password, are you trying to authenticate the user on the User Portal? 

    I would advise you to put the access_server process in debugging, replicate the issue and provide access_server logs in debugging. 

    Follow this KB Article to SSH into the XG firewall: Sophos XG Firewall: How to SSH to the firewall using PuTTY utility

    Select Option 5 (Device Management) > Option 3 (Advance Shell)

    Run this command to put the access_server service in debug:

    • service access_server:debug -d -s nosync

    Please check out the following KBA to locate and capture the logs: Sophos XG Firewall: Where to find log files?

    Once you capture the access_server logs in debugging, run the same command to put access_server service in normal running mode. 

    Run this command to check service status :

    •  service -S | grep access_server

    SFVUNL_VM01_SFOS 17.5.11 MR-11# service -S | grep access_server
    access_server RUNNING,DEBUG

    Please PM me the logs and username. 

    Thanks,

Reply
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to the Community! 

    Once you change the AD user password, are you trying to authenticate the user on the User Portal? 

    I would advise you to put the access_server process in debugging, replicate the issue and provide access_server logs in debugging. 

    Follow this KB Article to SSH into the XG firewall: Sophos XG Firewall: How to SSH to the firewall using PuTTY utility

    Select Option 5 (Device Management) > Option 3 (Advance Shell)

    Run this command to put the access_server service in debug:

    • service access_server:debug -d -s nosync

    Please check out the following KBA to locate and capture the logs: Sophos XG Firewall: Where to find log files?

    Once you capture the access_server logs in debugging, run the same command to put access_server service in normal running mode. 

    Run this command to check service status :

    •  service -S | grep access_server

    SFVUNL_VM01_SFOS 17.5.11 MR-11# service -S | grep access_server
    access_server RUNNING,DEBUG

    Please PM me the logs and username. 

    Thanks,

Children
No Data