Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions STAS - not adding users to groups, all STAS users are in Open Group

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
+1 person also asked this people also asked this
Locked Locked
Replies 9 replies
Answers 1 answer
Subscribers 42 subscribers
Views 7406 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

STAS - not adding users to groups, all STAS users are in Open Group

lukg 8 months ago

Our STAS users are added to Open Group instead of AD group. When using user portal users are added to the correct AD group.

Any ideas why STAS users are not in the correct Group ?

Can STAS run as non administrator account ?

In STAS logs on DCs we can see the following:

ERROR [0xa74] 06/03/2024 17:21:38 : dcaserver_extract_data: Invalid group_off:-1

ERROR [0xa74] 06/03/2024 17:21:38 : dcaserver_extract_data: Invalid wrkst_name_off: -1

This thread was automatically locked due to age.

Top Replies

lukg 7 months ago in reply to Christoph Zech +2 verified

The solution is to use AD account for LDAP binding which has permissions to read property of memberof in active directory

Parents

0 apijnappels 8 months ago

could this have something to do with the behaviour of groups inside SFOS? Don't know about STAS, but it may only use the primary group. See this link for more information on groups.

Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.
Cancel
Vote Up 0 Vote Down

Cancel
0 lukg 8 months ago in reply to apijnappels

I have now Global escalation team from Sophos tech. support looking into it.
Cancel
Vote Up 0 Vote Down

Cancel
0 emmosophos 8 months ago in reply to lukg

Hello Lukg,

It seems the case created for this was 07250286

I can see it was escalated to GES on March 21, with a 2-business day SLA.

Let me know if you don't hear back from GES by the end of the day today.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 emmosophos 8 months ago in reply to lukg

Hello Lukg,

It seems the case created for this was 07250286

I can see it was escalated to GES on March 21, with a 2-business day SLA.

Let me know if you don't hear back from GES by the end of the day today.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data