Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Authentication

I understand that using Kerberos is the new recommendation from Sophos to replace STAS so that nothing needs to be installed/configured on the DC's themselves.

I've followed this document: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Authentication/HowToArticles/AuthenticationKerberosTurnOn/index.html

I've followed this step by step and confirmed all settings are correct but the authentication logs show this:

Any ideas what might cause this?



This thread was automatically locked due to age.
Parents Reply Children
  • Hi  Thanks for sharing the snapshot for the nasm.log. From this log lines not getting clues on the cause side, so would suggest collecting nasm.log by putting nasm in the debug mode.

    > To enable/disable debug for nasm service use the following commands - service nasm:debug -ds nosync
    > To check the service status - service -S | grep nasm
    Then change to the log directory using the command cd /log.
    > To check the live logs - tail -f nasm.log
    > To check the older logs - less nasm.log

    Was it working fine previously or is it a new setup where you are observing this error? Also if it is a break-fix where all of a sudden it stopped working then I would suggest logging a support case to investigate it further if no changes on firewall or server end.

    Regards,

    Vishal Ranpariya
    Technical Account Manager | Sophos Technical Support

    Sophos Support Videos | Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts |
    If a post solves your question use the 'This helped me' link.

  • This is a new setup.

    I turned debug on and looked at the logs, but it just fly's past too quickly and I cant see anything