Cisco NAC 4.8 and Windows Server 2008 Enterprise 64bit SSO

Hi,
     I try to setup SSO on Cisco NAC 4.8 and Windows Server 2008 Enterprise 64bit, but I can't start Active Directory SSO Service that show error follow below. I saw this error " KDC has no support for encryption type (14)" . Could anyone help me to troubleshoot this problem?
FQDN: active.test.com
Domain Name : test.com
User : ccasso
2011-02-05 12:00:30.225 +0700 WARN  com.perfigo.wlan.jmx.adsso.GSSServer                                                                                          
- Server was not running ...
2011-02-05 12:00:30.225 +0700 INFO  com.perfigo.wlan.jmx.adsso.GSSServer                                                                                          
- Server starting server ...
2011-02-05 12:00:30.225 +0700 INFO  com.perfigo.wlan.jmx.adsso.GSSServer                                                                                          
- Server is now running ...
2011-02-05 12:00:30.225 +0700 INFO  com.perfigo.wlan.jmx.adsso.GSSServer                                                                                          
- GSSServer - SPN : [ccasso/[email protected]]
2011-02-05 12:00:30.225 +0700 INFO  com.perfigo.wlan.jmx.adsso.GSSServer                                                                                          
- GSSServer - building kdc list for domain active.test.com
2011-02-05 12:00:40.224 +0700 INFO  com.perfigo.wlan.jmx.adsso.GSSServer                                                                                          
- GSSServer - done building kdc list for domain active.test.com
2011-02-05 12:00:40.224 +0700 INFO  com.perfigo.wlan.jmx.adsso.GSSServer                                                                                          
- GSSServer - KDC(s) :[10.0.240.100]
2011-02-05 12:00:40.224 +0700 INFO  com.perfigo.wlan.jmx.adsso.GSSServer                                                                                          
- GSSServer - writeKrbFile: writing to file ../conf/krb.txt
2011-02-05 12:00:40.224 +0700 INFO  com.perfigo.wlan.jmx.adsso.GSSServer                                                                                          
- GSSServer - writeKrbFile: wrote to file ../conf/krb.txt
2011-02-05 12:00:40.224 +0700 INFO  com.perfigo.wlan.jmx.adsso.GSSServer                                                                                          
- GSSServer - creating login context ...
2011-02-05 12:00:40.224 +0700 INFO  com.perfigo.wlan.jmx.adsso.GSSServer                                                                                          
- GSSServer - created login context ...javax.security.auth.login.LoginCon                                                                           
text@5ad7b2
2011-02-05 12:00:40.239 +0700 ERROR com.perfigo.wlan.jmx.adsso.GSSServer                                                                                           
- Unable to start server ... KDC has no support for encryption type (14)
2011-02-05 12:00:50.244 +0700 INFO  com.perfigo.wlan.jmx.adsso.GSSServer                                                                                          
- Notifying GSSServer status Stopped
2011-02-05 12:00:50.244 +0700 INFO  com.perfigo.wlan.jmx.adsso.GSSServer                                                                                          
- server is exiting .

Hi,
This error means that your DC does not support the encryption method the ACS wants to use.
Usually this happens when you run 2008 Server with 2003 functionality...
You will need to run ktpass.exe according to the DC you are running:
http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cas/s_adsso.html#wp1277452.
For Windows 2008 Server at 2003 Server functional level:
ktpass -princ newadsso/[adserver.][email protected] -mapuser newadsso -pass
PasswordText -out c:\newadsso.keytab -ptype KRB5_NT_PRINCIPAL
HTH,
Tiago
If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.

Similar Messages

  • Error coming while installing Cisco Prime 4.2 on Windows Server 2008 R2

    Hi,
    I'm trying to install Cisco Prime 4.2 on Windows Server 2008 R2. While initiating the installation, message box "Error: csv not found" appears, and the installation terminates.
    Is there any csv template need to be copied at any location before hand?

    Are you installaing LMS 4.2.4  directly ?
    Looking at the error ,it looks like ...
    If yes then  you need to follow the below path:
    The installation path of LMS 4.2.4 : LMS 4.2 > LMS 4.2.2 > LMS 4.2.4
    Thanks-
    Afroz
    [Do rate the useful post]

  • Lms 3.2 and window server 2008 r2 standard

    we have bought lms 3.2 and window server 2008 r2 standard. Now we know, it cant be used togetther
    Could we upgrade to lms 4.0.1 ? If so, how can we do ?
    thank you.
    Duyen.

    Correct, LMS 3.2 is not supported on Windows 2008 R2.  You can upgrade to LMS 4.0 (which is supported on R2), but that is not a free upgrade from LMS 3.x.  You can, however, download a free 90-day eval of LMS 4.0 from http://www.cisco.com/go/nmsevals .
    It sounds like you need to contact your reseller or account manager to see what they can do.  If you just purchased LMS 3.2, you may be able to get a free or discounted upgrade to 4.0.

  • Lms 3.2 and window server 2008 standard: License Server/Daemon Manager is down

    LMS 3.2 and window server  2008 standard, get error when we try
    Khi truy nhập vào menu chức năng:
    License Server/Daemon Manager is down. Please check license.log for more information.
    access licensing:
    Error communicating with License Server. License Server may be down. Please start the License Server, then refresh the page.
    Lincense.txt is file log of LMS
    Must I have to active window server 2008 first ?
    thank you very much ?

    Hi ,
    --Add the Casuser to the Administrator Group
    and then reset the casuser password:
    1. Go to CSCOpx\setup\support> and run the following command:
    resetCasuser.exe
    2.     Restart the daemon manager:
    Net stop crmdmgtd
    Net start crmdmgtd
    Let me know how it works
    If above did not help then send me the syslog.log and screen shot of the EventViewer with the latest Application Error that you see there.
    --also screen shot of the below directory :
    NMSROOT\etc\license
    Thanks
    Afroj

  • Sharepoint 2007 and SQL 2008 SP3 on Windows Server 2008 Enterprise SP2 (64-bit)

    Is there any documentation we can check if SQL 2008 SP3 is compatible with Sharepoint 2007 SP2 or SP3? Both Sharepoint and SQL servers are running on separate Virtual machines (Windows Server 2008 Enterprise SP2(64-bit)). Currently DB is running on
    SQL server 2008 SP2, and we would like to have SP3 loaded on it, but want to find if there is any compatibility issue?
    Thanks in advance!
    mh

    I'm not aware of any known issues with SQL Server 2008 SP3 and SharePoint 2007. I did a quick check and saw one person reporting an issue with their Central Admin site after applying the SQL Server update, but that's it.
    With that being said, I would strongly encourage you to test out the application of that SQL Server service pack in a non-production environment well before you apply it in production. There is always a chance that your environment has something set up in
    it that would cause an unexpected issue, and the best way to get an idea of whether or not an issue exists is by doing it somewhere else first before you do it in prod.
    John
    MCITP and MCTS: SharePoint, Virtualization, Project Server 2007
    My books on Amazon: The SharePoint 2010 Disaster Recovery Guide and
    The SharePoint 2007 Disaster Recovery Guide.
    My blog: My Central Admin.

  • Is there a 32 Bit edition available for windows server 2012 and windows server 2008

    Dear All,
    Is there a 32 Bit edition available for windows server 2012 and windows server 2008?
    Regards,
    Ahmed

    Hi,
    Quote：
    All editions of Windows Server 2008 R2 are 64-bit only.
    Reference link below(session Supported upgrade paths):
    https://technet.microsoft.com/en-us/library/dd379511(v=ws.10).aspx
    And based on MS official description about system requirement for Windows Server 2012/2012 R2, we may find out that they only has 64 bit OS.
    Best Regards,
    Eve Wang
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Compatibility forms 6i and Windows Server 2008

    Hi,
    We want to change our Server from 2003 to Windows Server 2008 64bits.
    My question is : is there a compatibility between Oracle forms 6i (our application) and Windows Server 2008 ?
    Will the migration be successfull, or will we have some bugs?
    Thks for your help.
    O.

    YES. It worked perfectly for me, you'll have to use oracle 8/8i lite though.

  • T-500 and Windows Server 2008 R2 RTM

    My setup:
    T-500 dual booting via VHD - Windows 7 and Windows Server 2008 R2 (both 64-bit).
    My problem:
    I'm having a devil of a time with this one.  I get random BSOD'd in my Server 2008 R2 installation, but my Win7 install is rock solid.  Sometimes it's right away, sometimes after a few minutes, sometimes when trying to use WordPad.  I cannot get my wireless card (Intel 5100 AGN) to work along with video drivers for my ATI card, so I'm leaning towards a driver issue.  I'm trying to use the Win7 drivers for anything that's missing drivers at the moment, since they are the same under the hood, so to speak.
    Has anyone else experimented with this setup and/or run into similar problems?  Thanks!
    T500: T9400 (2.53GHz), 4GB RAM, 160GB 7200rpm, 15.4in 1680x1050 WSXGA+ LCD, 256MB ATI Radeon HD3650, DVDRW, Intel 802.11agn wireless, AT&T WWAN, Bluetooth, Modem, 1Gb Ethernet, 9c Li-Ion, Windows 7 Ultimate x64 RC (Build 7100)

    You shouldn't have any big issues, but there are a couple of gotchas that Server versions of Windows have (a notable one is the Bluetooth stack).  Those are somewhat detailed in the review, though (and that blog also details how to get other features of Server 2008 R2 running).

  • CiscoWorks LMS 3.2 Won't Start on Windows Server 2008 Enterprise

    All,
    I installed CiscoWorks LMS 3.2 RME on Windows Server 2008 Enterprise and the daemon manager won't start.  The server is a VMware ESX server 4.0.
    I've uninstalled and reinstalled and still nothing.
    I get message "The service is not responding to the control function"
    Has anyone had this issue?
    Stephanie

    There could be several reasons this happens.  Common one in Windows 2008 is the swap is not set properly as it defaults to "Automatically manage paging file size for all drives".  Try setting the swap to 8GB manually or whichever is the recommendation for your current device count as per:
    http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/3.2/install/guide1/prereq.html
    Also make sure the startup services are set this way:
    CiscoWorks ANI database engine: Manual
    CiscoWorks Daemon Manager: Automatic
    CiscoWorks RME NG database engine: Manual
    CiscoWorks Tomcat Servlet Engine: Manual
    CiscoWorks Web Server: Manual
    CWCS Cmf database engine: Manual
    CWCS rsh/rcp service: Automatic
    CWCS syslog service: Automatic
    CWCS tftp service: Automatic
    DFM dfmEpm database engine: Manual
    DFM dfmFh database engine: Manual
    DFM dfmInv database engine: Manual
    Set DEP for "Windows Essential Programs Only" and set an exclusion for CSCOpx in your anti-virus on-access scanning settings.  Note that Windows 2008 R2 versions are not supported.

  • Error Installing InDesign CS3 Server on Windows Server 2008 R2 64BIT

    Hello there-
    I'm trying to install InDesign CS3 Server on Windows Server 2008 R2 64BIT (x64) Edition, however, we get a failure indication on the installer. Before, we have installed it properly on Windows Server 2008 R2 32BIT (x32) but some how we cannot proceed on a x64 box.
    Is there any limitation on this sense? Any documentation about it?
    Thanks and appreciate your answers.
    Regards,
    Gustavo Ortega
    Software Engineer

    Hello,
    Have you followed these recommendations from the installation guide ( Installation Guide u2013 SAP Content Server on Windows 2008 ) :
    Note: In the IIS 7.0/7.5, all the roles are not selected during the installation by default,
    Please make sure all the below roles are included and IIS 7.0/7.5 is installed.
    Roles needed in IIS 7.0/IIS 7.5.
    Common HTTP Features
    Static Content
    Default Document
    Directory Browsing
    HTTP Errors
    HTTP Redirection
    Application Development
    ISAPI Extensions
    ISAPI Filters
    Health and Diagnostics
    HTTP Logging
    Logging Tools
    Request Monitor
    Tracing
    Custom Logging
    ODBC Logging
    Security
    Basic Authentication
    Windows Authentication
    Request Filtering
    Note : Anonymous Authentication should be enabled.
    Performance
    Static content Compression
    Dynamic Content Compression
    Management Tools
    IIS Management Console
    IIS Management Scripts and Tools
    Management Service
    IIS 6 Management Compatibility
    IIS 6 Metabase compatibility
    IIS 6 WMI Compatibility
    IIS 6 Scripting Tools
    IIS 6 Management Console
    Note: There is a File Upload limitation in IIS 7 on Windows 2008 Server, IIS will reject any file that is
    larger than 30 MB. This is a default limitation of IIS. You can increase the maximum file size by
    setting the parameter maxAllowedContentLength in the file ApplicationHost.config.
    The following command can be used to set the parameter from the command prompt, please
    change the directory to Windows\System32\inetserv and then execute the command.
    appcmd setconfig /section:requestFiltering/requestLimits.maxAllowedContentLength:150000000
    The value is only an example, in this case the upload limit is set to 150MB.Server has to be restarted
    after execution of this command.
    Also, are you using Maxdb to store the files or is it a "flat files" content server  ?
    HTH.
    Steve.

  • Oracle DB 10g XE on Windows Server 2008 R2 64bit

    Hello to everybody!
    I have and old pc with Windows Server 2003 (32 bit) where i've installed Oracle DB 10g XE. Everything works fine.
    Now i have to migrate the DB from that old machine to a new one with Windows Server 2008 R2 64bit.
    I've tryied to install the Oracle DB 10g XE into the new server but, after installation is finished, i wasn't able to open the DB homepage at http://127.0.0.1:8080/apex. It said "This page can't be displayed". I try with SQLPLUS but after i insert the admin credentials i obtain these lines:
    ERROR:
    ORA-01034: ORACLE not available
    ORA-27101: shared memory realm does not exist
    Where can be the problem?

    >> ORA-01034: ORACLE not available
    Database is not running. Most likely the installer did not complete all its tasks, it can happen.
    For windows, the database service has to be set up (see Start/Run/services.msc), services started, installer creates the database, and quite a few other setup chores. If the database creation fails, all the other stuff is not relevant.
    Under the <drive:>oraclexe folder there *should* be a datafiles (*.DBF) files somewhere. Can't recall the exact location for 10g. Try file explorer and a search for *.dbf files, that will probably come up empty.
    Note the requirements, at Oracle&amp;reg; Database Express Edition it calls for x86, not x64. The 11g XE also has lots of trouble getting a successful install on x64 as well, note the Download page states "does not work on x64" although some folks have gotten it to work.Try the deinstall steps, and use a right click/run as Administrator that *might* get past the UAC glitch that happens on the later OS versions.

  • OBI11g installation on Windows Server 2008 R2 (64bit)

    Hi,
    Sorry to pick up this topic again, but my research in the forum and other inet sites doesn't help me so far and my installation will not work.
    My Situation:
    I have a Windows Server 2008 R2 (64bit) default installlation. The server (HyperV-managed) has 4 GB RAM.
    I added a Loopback adaptor and set for the loopbackadapter a fixed IP (10.10.10.10 Subnet: 255.255.255.0).
    Entered in the host file (127.0.0.1 localhost and 10.10.10.10 servername)
    Installed JDK 64bit
    Installed Oracle Client 32bit
    Then I tried all three options:
    1) Default OBIEE Installation --> start of coreapplication_obips1 has failed. Everything else was fine. I was not able to start the obips1 manually
    2) Enterprise Installation --> start of coreapplication_obips1 has failed. Everything else was fine. I was not able to start the obips1 manually
    3) Manually installed WebLogic 1033 --> SoftwareOnly installation of OBIEE --> manually start config of OBI Installation --> same result as above!
    Perhaps you have some hints for me.
    Cheers
    Wolfgang

    Not in the slightest - I installed five just the other week
    All our virtual machines, running 2008 R2 x64. We went for Enterprise Edition, but I believe in CF9 they're both 64-bit anyway. These are the from the build notes I built up:
      Install extra roles:
        Application Server
        Web Server (IIS)
          Application Development
          IIS6 METABASE Compatibility
      Install extra Features:
        SMTP Service
    Other than that nothing else needs doing. It's worth noting (as a slight but irritating aside) that in 2008 R2 the SMTP service is set to Manual not Automatic, so you'll want to change that unless you want your emails to stop every time you reboot the box.
    But the actual install itself was far simpler than CF8 on 2008.
    O.

  • Problem of SAPConsle 7.10 (Patch 13) on Windows server 2008 R2 (64bit)

    My company is moving from server 2003 to Server 2008 R2 (64bit). We installed SAPConsole 7.10 (Patch level 13) on test server without any problem and configured the profiles in SAPConsole administrator. However when we running the sapcnsl.exe from command prompt, it prompt with error message "*** ERROR => ***AgCom (006FC558): Error: Internal error" and failed to get the SAP login screen.
    I checked SAP Note 1043241 saying SAPConsole 710 as patch level 7 could support Windows server 2008 (32/64bit) both.
    Can anyone help advise on my issue? or is there anyone has testl the SAPConsole 710 on Server 2008 R2 64bit successfully?
    Thank you very much!

    Hello Jackcd,
    I am not an expert in this area but I did a message search for "AgCom error internal error" and I found a message where the customer solved the problem by using a patch. In the customers own words:
    "I installed sapgui 7.10 Patch level 6 on the server where I installed SAPCONSOLE 7.10. Now, the sapconsole working."
    The Sapinator

  • Install Active Directory Domain Controller on Windows server 2008 enterprise, dont login on Sql Server 2008 R2

    I install Active Directory Domain Controller on Windows server 2008 enterprise and dont login on Sql Server 2008 R2. Before install ADDC, I have logon SQL Server 2008r2 Success, After when i install ADDC is don't logon on SQL Server 2008r2 -->not success.
    I have uninstalled ADDC but i still can't login on SQL server 2008r2.
    please help me. it  is very very disaster!
    I think is loss account SQL server 2008r2!

    Hello,
    I stronly recommend you post the detail error message to us while you try to connect to SQL Server instance, it's useful for us to do further investigation.
    Microsoft recommends that you do not install SQL Server 2008 R2 on a domain controller, there are some limitations:
    You cannot run SQL Server services on a domain controller under a local service account or a network service account.
    After SQL Server is installed on a computer, you cannot change the computer from a domain member to a domain controller. You must uninstall SQL Server before you change the host computer to a domain controller.
    After SQL Server is installed on a computer, you cannot change the computer from a domain controller to a domain member. You must uninstall SQL Server before you change the host computer to a domain member.
    SQL Server failover cluster instances are not supported where cluster nodes are domain controllers.
    SQL Server Setup cannot create security groups or provision SQL Server service accounts on a read-only domain controller. In this scenario, Setup will fail.
    On Windows Server 2003, SQL Server services can run under a domain account or a local system account.
    So, I would suggest you try to open up Windows Services list and changed the account for SQL Server service.
    Regards,
    Elvis Long
    TechNet Community Support

  • Is it possible to install sql server 2008 standard edition in windows server 2008 enterprise edition?

    hi,
    Please help me..
    is it possible to install sql server 2008 standard edition in windows server 2008 enterprise edition?
    will any problem arise?

    Hiya,
    Yes it it possible. No there will not be any problems.
    Short and simple :)

Maybe you are looking for