Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 11 subscribers
  • Views 2409 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AD SSO: NTLM funktioniert, Kerberos nicht

schmiegi

Moin,

Kunde hat eine XGS-FW erhalten, nutze davor eine SG.
Eingerichtet wurde AD SSO an Orientierung vom Sophos-Com-Beitrag. (https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Authentication/HowToArticles/AuthenticationKerberosTurnOn/index.html#configure-a-hostname)

Folgendes Problem:

NTLM-Auth funktioniert ohne Probleme
KERBEROS scheitert: "Cannot initalize...".

NASM-Log sagt folgendes.

[nasm] initialize_kerberos(): realm = XXXX.LOCAL
Dec 02 10:06:58.761799Z [nasm] system configured hostname [XX-XGS01]
Dec 02 10:06:58.762319Z [nasm] initialize_kerberos(): gss_acquire_cred HOST/XX-XGS01@XX.LOCAL: No key table entry found for HOST/XX-XGS01@XXX.LOCAL

Hat jemand eine Idee ?



Added TAGs
[edited by: Erick Jan at 2:03 PM (GMT -7) on 9 Jun 2023]
Unfiltered HTML