topic Re: NAC AD Single Sign On issue in Network Security

NAC AD Single Sign On issue

yuchenglai — Fri, 21 Feb 2020 11:04:07 GMT

Hello,

I've been having issues with NAC AD SSO. The AD SSO service is started on both my CAS's in the CAS pair, and I do see that the Clean Access Agent attempts to perform AD SSO. But it fails and defaults to prompting for a local username and password. After which, I see the following event recorded in the CAS's logs:

Oct 17, 2008 1:46:45 PM com.perfigo.wlan.jmx.admin.GSSServer$LoginPrivilegedAction run SEVERE: Error opening server socket. Socket closed

Does anyone know what this means?

Re: NAC AD Single Sign On issue

michael_dean — Tue, 28 Oct 2008 19:51:19 GMT

If this is on XP then you may be having the same problem that I had. The problem turned out to be a MSoft issue with the Kerberos ticket expiring.

If it is, there is a hotfix: http://support.microsoft.com/kb/885887

Mike

Re: NAC AD Single Sign On issue

Daniel Laden — Sat, 08 Nov 2008 18:32:47 GMT

If the AD SSO service started on the CAS but the users are failing AD SSO, I would start with confirming the user is logging into the domain and not using cached credentials. AD SSO using the users kerberos ticket to authenticate

Load the MS kerbtray utility and confirm a valid kerberos ticket is present (icon will be green).