Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cannot establish NTLM authentication channel with <Domain> + SFOS 17.5.MR15+Cyberoam

We got an error "Cannot establish NTLM authentication channel with <Domain>" in the Cyberoam 300ing, where CTAS and NTLM authentication both are working , NTLM was enabled because many of the domain user are not getting the services of web proxy , Support has declined to further help as Cyberoam 300ing has become EOL, I have tried one of the solution found in the blogs, stop the nasm service and remove the nasm directory contents in the log folder , but got an error

CR300iNG_WP01_SFOS 17.5.15 MR-15# service -ds nosync nasm:stop
200 OK

CR300iNG_WP01_SFOS 17.5.15 MR-15# rm -rf /content/nasm
rm: can't remove '/content/nasm/cfs': Device or resource busy
rm: can't remove '/content/nasm': Directory not empty

I have tried to kill the process IDs which were using the directory, also unchecked the device access methods NTLM in the administration, but couldn't succeed >

Can you help ???



This thread was automatically locked due to age.
  • Hello Muhammad,

    Thank you for contacting the Sophos Community.

    May know the Case ID you opened with us related to this issue, even though it’s a Cyberoam device, if it’s running a supported SFOS version, support will be provided until the EoL.

    Can you provide the output of the following commands from the Advanced Shell
    # cd /content/nasm/
    # ls
    # cd /content/nasm/tmp/
    # ls 

    Regards,

  • thanks for replying me, here are the output of the given commands

    CR300iNG_WP01_SFOS 17.5.15 MR-15# cd /content/nasm/
    CR300iNG_WP01_SFOS 17.5.15 MR-15# ls
    cfs etc
    CR300iNG_WP01_SFOS 17.5.15 MR-15# cd /content/nasm/tmp
    /bin/sh: cd: can't cd to /content/nasm/tmp
    CR300iNG_WP01_SFOS 17.5.15 MR-15# pwd
    /content/nasm
    CR300iNG_WP01_SFOS 17.5.15 MR-15# ls
    cfs etc
    CR300iNG_WP01_SFOS 17.5.15 MR-15#

  • Hello Muhammad,

    Thank you for the follow-up.

    Please run the following commands from the Advanced Shell of the XG:

    1. cd /content/nasm/
    2. mkdir tmp
    3. chown nasm:nasm tmp
    4. service -ds nosync nasm:start
    5. service -ds nosync nasm:status (Check the nasm.log and the status of the services, that should be running)
    6. service -ds nosync awarrenhttp:start
    7. service -ds nosync awarrenhttp:status 

    If this fails:

    Go to Backup and Firmware, Firmware tab.
    On the line for the active firmware, click the arrows that have the tooltip "Boot firmware image"
    The box will reboot and the nasm directory should be recreated.

    Regards,