Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
682
Views
0
Helpful
1
Replies

Kerberos and LDAP issues after upgrade to ASA 8.4(4)

BEHowardGRDA
Level 1
Level 1

‎07-05-2012 11:14 AM - edited ‎03-10-2019 07:16 PM

I am having difficulty with AAA setup on my recently upgraded ASA 5520.  I upgraded from 8.3(1) to 8.4(4) and my AAA no longer works.  If I use Kerberos I receive time skew errors (works fine on my remaining 8.3(1) ASAs) and when I setup LDAP I get "server has been removed" errors (again, works fine on other 8.3(1) ASAs).  Is this a by product of the upgrade or a flaw in 8.4(4)?

Labels:
0 Helpful
1 Reply 1

Erick Delgado
Level 1
Level 1

‎07-09-2012 06:44 AM

Hello,

In regards of the kerberos issue looks like the ASA and the AD server don't have the same time. Please make sure that the time is configure correctly.

For the LDAP issue please send me a debug ldap 255 output.

A 3rd option will be to enable IAS or NPS on your windows server and use radius.

Regards,

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents