Thread Info
  • State Verified Answer
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 15 replies
  • Answers 1 answer
  • Subscribers 12 subscribers
  • Views 36853 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Directory Services synchronization (SSO & AD)

henry08
Some people have been having issues with SSO and AD synchronization.  I'm just reporting my issue and to document.

2 x UTM525's in HA.  We're using SSO for users, all the goodies, web filtering, email, VPN, user portal.

After upgrading to 9.313-3 on Tuesday started getting the below alerts.  Our UTM service account keeps getting locked out about every 2 hours on the dot.

Error message:
---------------------
[WARN-531] Directory Services synchronization
There was an error synchronizing subscribed groups. The Sophos UTM will continue to operate with a locally cached copy of the data but will be unable to update from Directory Services until the issue is resolved.

Error was:
failed to run samba command on domain.com, exiting now
--------------------

Tried un-joining and re-joining UTM to our domain, still have issues.  Tests on server settings come back fine.  User authenticate test come back fine.

So anyone else having this issue as well?  Waiting for Sophos support to call back to help troubleshoot.  A little off-topic/rant but Sophos support REALLY needs some improvement.  It takes like 20-30 minutes just to put a ticket in and I've been waiting for over 90 minutes for an engineer call back (after being told I would get a call back in 30 minutes).


This thread was automatically locked due to age.
Parents
  • 0

    I thought I was cracking-up with this issue.  I reported the issue a few months back, only for Sophos support to tell me that the problem must have been on my side.  I didn't make any system changes which would cause the Synch issue to occur every two hours at exactly 39 minutes past the hour.  Then today, after updating to 9.414-2, my users could no longer authenticate for the web filter.  (Transparent SSO with AD)  I had to disable the "Block Access After Failed Auth" in order to get past the issue.  So I decided to dis-join AD, delete the computer account, and re-join.  Now all appears to be working properly.  Of course, I'll need to wait a couple hours to see if the synch issue disappears.

Reply
  • 0

    I thought I was cracking-up with this issue.  I reported the issue a few months back, only for Sophos support to tell me that the problem must have been on my side.  I didn't make any system changes which would cause the Synch issue to occur every two hours at exactly 39 minutes past the hour.  Then today, after updating to 9.414-2, my users could no longer authenticate for the web filter.  (Transparent SSO with AD)  I had to disable the "Block Access After Failed Auth" in order to get past the issue.  So I decided to dis-join AD, delete the computer account, and re-join.  Now all appears to be working properly.  Of course, I'll need to wait a couple hours to see if the synch issue disappears.

Children
No Data
Unfiltered HTML