This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM warning: Directory Services sync on UTM not using directory services

Hi!

I'm using a home-licensed UTM 9.205-12 on a KVM virtualized system.

The UTM is sending warnings via eMail claiming:

------------------------------------
Directory Services synchronization

There was an error synchronizing subscribed groups. The Sophos UTM will
continue to operate with a locally cached copy of the data but will be
unable to update from Directory Services until the issue is resolved.

Error was:
failed to create ConfdPlRPC instance:

-- System Uptime : 5 days 13 hours 8 minutes System Load : 2.92 System Version : Sophos UTM 9.205-12
------------------------------------

I'm NOT using any directory services on it, no single sign on and never tried it on this machine. The UTM was set up from scratch, no import of any old configs.

The machine started sending those eMails about a week ago. I checked the directory service settings, not finding anything wrong, I rebooted the UTM (as you can see in the quoted eMail above about 5 days ago), yesterday the UTM started sending the same eMails again.

Anyone an idea what went wrong an what to do?

Regards,

FatBastard

This thread was automatically locked due to age.

0 BAlfson over 10 years ago

Hi, fellow Mike Myers fan, and welcome to the User BB! [;)]

On the 'Groups' tab of 'Definitions & Users >> Users & Groups', is the screen blank if you select the display of 'Dynamic members by backend group(s)'? Can you confirm that there's less than five minutes difference between the UTM clock and the AD server clock? Have you tried another reboot of the UTM?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 hoehne@lka over 10 years ago in reply to BAlfson

Hi Bob,

thanks for you help!

I'm not using AD backend and never tried to establish AD backend connection on this UTM. This UTM is hosted on a KVM virtualized system in an ISPs datacenter and is offering a VPN endpoint and eMail services for me and my family (can't get static IP at home, so I got this mashine). There is no other server to provide AD infrastructure at the datacenter, I don't even operate an AD at home due to the license costs (and for me and my family I don't really need AD).

Definitions & Users:Authentication Services:Global Settings:Create users automatically: is unchecked
Definitions & Users:Authentication Services:Servers: is empty, no servers listed
Definitions & Users:Authentication Services:SSO: is empty

The time question: UTM and my physical servers and ESXi hostes VMs (at home) are all using ntp with the same NTP-Servers list. As there is no AD backend, I can't really answer the question.

I rebooted the UTM after the first of those eMail warnings more then a week ago, but the eMails warnings showed up again two days ago.

Regards,

FatBastard
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 10 years ago

Then it's a false positive. Go to the 'Notifications' tab of 'Management Notifications' and you'll find the notification you can deselect.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 hoehne@lka over 10 years ago in reply to BAlfson

Hi Bob,

thx a lot, I'll deactivate the notification due to the false positive.

Regards,

FatBastard
Cancel
Vote Up 0 Vote Down

Cancel

UTM warning: Directory Services sync on UTM not using directory services

Submitted a Tech Support Case lately from the Support Portal?