ISE 2.2 Active Directory Authentication, Kerberos and MSRPC settings

[cmendezm]

Hello Experts, 

We have a customer that noticed latency authentications issues and we noticed that he is using MSRPC authentication. We did a manual test using the Test User option and if we use Kerberos authentication we don't get any latency messages but if we change to MSRPC we start getting latency messages. 

Is there a way to configure ISE to only use Kerberos authentication and not MSRPC?

Thanks in advance. 

Christian M.

[Mike.Cifelli · Accepted solution]

No. In order to successfully integrate ISE & AD MSRPC must be open and used. HTH!

[hslai · Accepted solution]

If AD used for plain-text auth (e.g. PAP-ASCII), you may enable this option [ ] Use Kerberos for Plain Text Authentications.

Otherwise, as Mike.Cifelli said, MSRPC is required.