Hey, I'm using passiveID on cisco ise. I installed the PIC agent and the agent shows green, however, when i ran the AD diagnostic tool i get two fails:
1. Kerberos check SASL connectivity to AD
2. Kerberos test obtaining join point TGT
I checked the DNS config, Kerberos config, and the SPNs everything looks normal. Is there something I'm missing?
