CTA/Win2000 Single sign-on

[Nathan Spitzer]

Hopefully someone can give me a definitive answer on this one:

Using the CTA client and an ACS for Windows server, is it possible to have both single sign-on and PAC auto-provisioning at the same time. I can get either one to work. If I disable EAP-GTC on the ACS server single sign-on works but PAC auto-provisioning does not. If I enable EAP-GTC PAc auto-provisioning works but I am promted for my password by CTA when I login. Is it possible to have both????

Here is some more detail on my setup:

I have setup a test network running 802.1x. I have an ACS for Windows server that can correctly authenticate against AD, both the ACS server and a win2000 client, and the server and client each have valid machine certificates.

Thanks,

Nathan Spitzer

Lockheed Martin TSS

[smalkeric]

SSO does not work with EAP-GTC when no PAC is provisioned because when no PAC is

provisioned the username/password screen will pop up requiring user intervention.

Try this link:

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_chapter09186a00802335f1.html#wp24187

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00801df0e4.shtml