Cisco Cisco NAC Appliance 4.9.5 技术手册

Introduction
 Prerequisites
      Requirements
      Components Used
      Conventions
 Configure Windows SSO
      Set up the AD SSO Provider
      Run KTPass on the DC
      Configure SSO on the CAS
      Verify the SSO Service is Started
      Open Ports to the DC
      Client Sees Agent Performing SSO
      SSO Completed
      SSO User Seen on the Online User List
 Troubleshoot Windows SSO
      Error: Could not start the SSO service. Please check the configuration.
      Client Authentication does not Work
      Unable to run SSO on windows 7 PC
      Unable to configure linux client support for a user in NAC environment
      SSO Service is Started, but Client does not Perform SSO
      Kerbtray
      CAS Logs  Cannot Start SSO Service
      Known Issues
 Related Information

This document describes how to use Microsoft Windows Active Directory (AD) Single Sign On (SSO) in
order to configure and troubleshoot the Cisco Network Admission Control (NAC) Appliance, formerly known
as Cisco Clean Access (CCA).

Ensure that you meet these requirements before you attempt this configuration:

Make sure the DC runs Windows 2000 SP4 or Windows 2003 (Standard or Enterprise) SP1 or
Windows 2003 R2. Windows 2003 without SP1 is not supported.

• 

Make sure Windows SSO is supported in an AD environment only. Windows NT environment is not
supported. Clean Access Agent is required.

• 

Set up the Clean Access Server (CAS) account as described in Cisco NAC Appliance − Clean Access

•