Guest

Preview Tool

Cisco Bug: CSCsg32944 - Active Directory SSO Service does not get started on reboot (CAS HA)

Last Modified

Feb 22, 2014

Products (1)

  • Cisco NAC Appliance (Clean Access)

Known Affected Releases

4.0(3) 4.0(3.1) 4.5(0)

Description (partial)

Symptom:
Sometimes on rebooting the CAS, the Active Directory SSO service does not 
get started automatically. You have to go to CCA Servers >> Manage >> Authentication >> Windows Auth >> Active Directory SSO and manually click the update button to start the service. Please note that this issue is different from CSCse46141 where the Domain Controller is not available when the service is started.
The problem is random in nature and is only seen sometimes. It appears to be a timing issue on some boxes where the KRB-Request packet from CAS does not leave the box because some network resource is not available in a timely fashion
Conditions:
Problem is seen in some occasions when CAS is rebooted after the SSO service is enabled.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.