VPN Authentication to w2k domain

[angel-moon]

Hello Everyone,

I am haivng a problem with getting an ASA 5505 to suthenticate directly against a w2k domain. There is no radius server involved. I am using Kerberos. We are getting an errors message back stating that the clocks on the ASA and teh serv er are more than 5 minutes off and the authentication request is being denied.

The clocks are within 5 seconds of each other and in the same time zones.

I am not sure if teh issue os due to having a w2k AD instead of a w2k3.

Has anyone run into this before?

Thanks in advance! All replies rated.

[Ivan Martinon]

Yep heard of that lots of times, can you try to make your win2k an ntp server and point your ASA to it as an NTP client?