Hi,
I am running an ASG 320 on 8.305, this morning nobody could get to the internet. I have checked the Astaro and nothing at all is appearing in the Web Security Live Log.
We are using AD SSO and this appears to be a Kerberos issue. If I change the Internet Option > LAN Connection > Settings to an IP address rather than a fully qualified domain name internet access comes back.
Likewise if I turn off Enable Integrated Windows Authentication in IE Internet Options > Advanced this fixes the problem.
My understanding is that doing either of these things flips authentication to NTLM instead of Kerberos.
Any ideas how to proceed is there a Kerberos daemon I can restart? I can't reboot at the moment, which may well fix this!
Thanks for any advice.
I am running an ASG 320 on 8.305, this morning nobody could get to the internet. I have checked the Astaro and nothing at all is appearing in the Web Security Live Log.
We are using AD SSO and this appears to be a Kerberos issue. If I change the Internet Option > LAN Connection > Settings to an IP address rather than a fully qualified domain name internet access comes back.
Likewise if I turn off Enable Integrated Windows Authentication in IE Internet Options > Advanced this fixes the problem.
My understanding is that doing either of these things flips authentication to NTLM instead of Kerberos.
Any ideas how to proceed is there a Kerberos daemon I can restart? I can't reboot at the moment, which may well fix this!
Thanks for any advice.