Sophos XGS AD SSO ""Cannot initialise Kerberos authentication with DOMAIN"

Question

I hope that I might be able to find an answer to my problem here. I have joined the Sophos XGS to the domain. The AD object looks good. The Sophos XGS name is configured with FQDN. Unfortunately I get this error message for Kerberos: "Cannot initialise Kerberos authentication with DOMAIN" 
 Any Ideas?

Maximilian Lautz · Answer

Good day Folks, 
 
 As I've been facing this issue too and the commands didn't help nor was my hostname more than 15 characters, here's how I solved it: 
 The issue was a firewall name change/ AD hiccup, therefore I had to do the following steps: 
 
 1. Turn OFF "AD SSO" for (in my case) the LAN zone in "Administration" - "Device access" 
 2. Delete the computer object of the firewall in my AD 
 3. Run the commands: 
 service nasm:stop -ds nosync 
 rm -rf /content/nasm 
 service nasm:start -ds nosync 
 4. Turn ON "AD SSO" for the LAN zone in "Administration" - "Device access" 
 5. Run an authentication test for the configured AD server in "Authentication" and hit save afterwards 
 
 As for the name change, I went with "hostname.domain" instead of just "hostname" for the firewall (According to Sophos, this should not make a difference though). 
 
 Afterwards, the logs showed Kerberos authenticating :-). 
 I'm running Version 20.0.0 GA-Build222 as a VM. 
 
 Hope this helps someone! 
 
 Cheers 
 Max

Vivek Jagad · Answer

Hello Leon Pohl , Thank you for reaching out to the community, please refer - Kerberos authentication not working .

Sophos XGS AD SSO ""Cannot initialise Kerberos authentication with DOMAIN"

Top Replies