I found that once I had a "real" certificate it worked fine.  I believe it
had something to do with it being self-signed that the mac agent didn't
like.


----------------------------------------------------
Brian Beausoleil
Network Administrator
Southern CT State University
(203) 392-6109
[log in to unmask]



-----Original Message-----
From: Cisco Clean Access Users and Administrators
[mailto:[log in to unmask]] On Behalf Of Kapura, Peter
Sent: Tuesday, January 30, 2007 11:18 AM
To: [log in to unmask]
Subject: Mac Agent error

We are getting a very wired error with our Mac clients we are getting an odd
error.  The full error message is in the screen shot I have attached, but
its telling us to install the certificate as a root cert, which we have it
show up as a trusted cert in keychain - x509 certs.  The other odd thing; is
that clients show up logged in under online users in the full access role
but do not show up as a certified device.  I was on the phone with TAC last
night and we could not figure out what was going on, he was doing a tcpdump
to see if anything from our test Mac was hitting the CAS, but nothing was.
Yet, I could ping the CAS from the client and I could ping from the CAS to
the client.  We use temporary certs, he remade them, remade the keys and
everything came up valid but we still had the same problem with the Mac
clients.  TAC is going to pass on the problem to a developer; I was
wondering if anyone else has seen something similar.

__
Peter Kapura
Network Engineer

William Paterson University
College Hall
358 Hamburg Turnpike
Wayne, NJ 07470
Tel: 973-720-3969
Mobile: 973-417-3218
[log in to unmask]
www.wpunj.edu