NAC 4.7(2) authentication SSO with Active Directory on WinServer2k3 crashed after update the next fixes:
KB2478971 KERBEROS WEAK HASHING ALGORITHMS
This update addresses the vulnerabilities by preventing the use of weak hashing algorithms in both Windows Kerberos and Windows KDC and by preventing the client from downgrading the encryption standard to DES for Kerberos communication between client and server.
http://www.microsoft.com/technet/security/bulletin/MS11-013.mspx
KB2478953 ACTIVE DIRECTORY DoS
The vulnerability could allow denial of service if an attacker sent a specially crafted packet to an affected Active Directory server. The attacker must have valid local administrator privileges on the domain-joined computer in order to exploit this vulnerability.
http://www.microsoft.com/technet/security/bulletin/MS11-005.mspx
The NAC solution was working fine for a year, but since my costumer installed those fixes we have troubles to auth users in NAC, CAM can't read LDAP tree and CAS neither. I requested my customer to remove those fixes, they did it but they don´t have a snapshot or checkpoint previous to restore the servers.
We have followed the Cisco's tshoot guides but the problem continues...
Any suggestion?
