Re: PEAP, WinXP, IAS, wrong username

From: Mudit Goel [MSFT] (mgoel_at_online.microsoft.com)
Date: 04/23/04

  • Next message: RogerC: "Re: 802.1x and DHCP Failure" 
    Date: Fri, 23 Apr 2004 14:42:39 -0700

    Hi Erik -

    One of the problems could be that the configuration for mschapv2 might not
    be correct.

    Is the winxp machine part of a domain? And is the user logging in as a
    domain user? The default Mschapv2 configuration has the setting: "use domain
    credentials to authenticate" selected. If the user logged into the machine
    is not a domain user, then this setting will obviously not work. Try
    unchecking the box. In this case the user will get prompted to punch in the
    credentials.

    Thanks,
    Mudit 

    -- 
__________________________________________________________
This posting is provided "AS IS" with no warranties, and confers no rights.
__________________________________________________________
"erik" <erikkt@online.no> wrote in message
news:3EB895F4-2DD8-4052-96C6-577803C956F7@microsoft.com...
> I've set up one DC, running win2003, one RADIUS server, also running
win2003 and IAS. and I am trying to connect my WinXP computer, using PEAP
and MS-CHAP v2. I also got an Compaq wl-410 AP, which is set up for RADiUS.
The connection is up, because if turn off "authenticate users on this
server" in IAS, the client gets IP. But if I check this option, which I do
want (to enable authentication), I get an error i event log. The error
displays a wrong username, which is "User 00a0c5-b211733 was denied access",
it seems like this username is based on the MAC-adress on the clients NIC.
This is not the username I've prompted, which is "Andre". How come the
correct username is not displayed in event log? I would believe this is the
cause of why I can't get authenticated. Can someone please help me, I am
very frustrated!
  • Next message: RogerC: "Re: 802.1x and DHCP Failure"

    Relevant Pages

    • Re: a webservice to authenticate the users against
      ... public bool ValidateUser(string username, string passwordHash); ... [WebService] ... > 4) Can query our internal Active Directory to authenticate our ...
      (microsoft.public.dotnet.framework.webservices)
    • Re: Authentication with IE
      ... When I am prompted to log into the site, I enter my username and password. ... It then returns back with the local server as the prefix as opposed to the ... permissions prompts for authenticaton). ... I want the users to authenticate against foo.com, ...
      (microsoft.public.inetserver.iis.security)
    • Re: Dovecot issue
      ... Robert Trembath wrote: ... > The server is setup as a single domain setup. ... be sure that their username is the same exact case as entered into ... authenticate, but report 0 messages, UNLESS you matched the username to ...
      (Fedora)
    • Computer Name vs FQDN Authentication Problem
      ... The domain username (APPUSER) has also been set to allow ... authenticate using windows and impersonate=true. ... is Negotiate. ...
      (microsoft.public.dotnet.security)