Pulse Secure SSO kerberos

[guillaume.petit]

Hello,

I have not found the settings for modifying the SSO Kerberos cypher protocol.

Kerberos support multiples cypher algorithms like :

• AES256_CTS_HMAC_SHA1_96
• AES256_CTS_HMAC_SHA1_96
• RC4_HMAC
• DES

But when the user wants to connect with an account member of the "Protected Users" Active Directory group he can't because the "Protected Users" group require the usage of AES cypher protocol for Kerberos exchange.
https://docs.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/prote...

So do you know a way to modify the Kerberos settings to support AES cypher in Pulse Secure platform?

[louis]

Hello,

I have exactly the same problem, I see no answer on the feed but since last year, have you resolve your issues ?

Regards,

[zanyterp]

i do not believe that is supported; however, i am not 100% sure
please open a case with our support team for confirmation