Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

VPN Authentication to w2k domain

Hello Everyone,

I am haivng a problem with getting an ASA 5505 to suthenticate directly against a w2k domain. There is no radius server involved. I am using Kerberos. We are getting an errors message back stating that the clocks on the ASA and teh serv er are more than 5 minutes off and the authentication request is being denied.

The clocks are within 5 seconds of each other and in the same time zones.

I am not sure if teh issue os due to having a w2k AD instead of a w2k3.

Has anyone run into this before?

Thanks in advance! All replies rated.

1 REPLY

Re: VPN Authentication to w2k domain

Yep heard of that lots of times, can you try to make your win2k an ntp server and point your ASA to it as an NTP client?

128
Views
0
Helpful
1
Replies
CreatePlease to create content