topic Kerberos error in Network Access Control

Kerberos error

zacht5476 — Fri, 17 Oct 2025 20:20:06 GMT

Hey, I'm using passiveID on cisco ise. I installed the PIC agent and the agent shows green, however, when i ran the AD diagnostic tool i get two fails:

1. Kerberos check SASL connectivity to AD

2. Kerberos test obtaining join point TGT

I checked the DNS config, Kerberos config, and the SPNs everything looks normal. Is there something I'm missing?

Re: Kerberos error

Mark Elsen — Sat, 18 Oct 2025 06:23:55 GMT

- @zacht5476 FYI : https://bst.cisco.com/bugsearch/bug/CSCwm34442?rfs=qvred

Re: Kerberos error

ahollifield — Mon, 20 Oct 2025 13:57:58 GMT

Why use Passive ID at all? What's the use-case?