NAC 4.8.1 AD SSO without ktpass

[KonstantinAgishev]

Hello,

I'm trying to configure AD SSO. There are two 2008 R2 AD servers in domain XXXX.LOCAL and I'm trying to configure AD SSO without ktpass.

I've configured user NACUser on one servers in Users and performed ldp.exe configuration for this user with attriburtes:

userPrincipalName NACUser/xxxx.local@XXXX.LOCAL

servicePrincipalName NACUser/XXXX.LOCAL

But SSO does not working and I shoud enter credentials two times (on windows login and CAA login).

I'm testing on XP Pro SP3.

What's wrong?

[KonstantinAgishev]

I've managed to make AD SSO working! I used AD SSO WITH ktpass. And for both XP and Win7 it started to work only after this

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cas/s_adsso.html#wp1266896

I hope this would be helpful for someone.