Re: Problems with RADIUS on member server

From: James McIllece [MS] (jamesmci_at_online.microsoft.com)
Date: 08/09/04 

Date: Mon, 09 Aug 2004 14:45:25 -0700

Fred Zehetner <az@neuburger.de> wrote in
news:eyf9INKcEHA.3804@TK2MSFTNGP10.phx.gbl:

> We have recently updated from W2k to W2k3, apart from one server (w2k)
> all servers are running w2k3. Now we tried to rollour WPA and 802.1x
> with IAS radius services. Everything is working in the root domain,
> but in one of our child domains we can only configure the IAS on one
> of the DCīs. Our secondary IAS is on a member server (w2k3)and we
> canīt configure this one. We canīt even open the mmc form outside the
> domain (remote). We got a message that we are unable to authenticate.
>
> How can we troubleshoot this problem or get information about the
> failure??
>
>

Make sure that the IAS server is a member of the RAS and IAS Servers group
in AD in all domains, not only the domain where IAS lives.

If that doesn't solve your problem we will need tracelogs for that server:
Iasssam.log, iassdo and napmmc. 

-- 
James McIllece, Microsoft
Please do not send email directly to this alias.  This is my online account 
name for newsgroup participation only.
This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • Re: IAS server stops authenticating workstations and users
    ... Have you tested communication between the IAS server and the RADIUS clients ... Also wondering if you have viewed the IAS ... The IAS server stopped logging. ... server and the authentication process has resumed. ...
    (microsoft.public.internet.radius)
  • Re: EAP-TLS Radius problem
    ... Do I understand you correctly that with IAS it is not possible to ... domain that the IAS server is in? ... server that is a member of Domain 1. ... Domain1 runs a Radius server to do authentication for wired 802.1x. ...
    (microsoft.public.internet.radius)
  • Re: Radius Server W2k 2003 without AD ??
    ... SAM user accounts database on the Windows Server 2003 IAS server. ...
    (microsoft.public.internet.radius)
  • Re: 3com wireless AP with IAS problem
    ... Have you configured your IAS server with a server certificate? ... If there is no server certificate you will not be able to do PEAP ... You can ask about RADIUS, IAS, 802.1x, Active directory configuration and Certificate services, related to IAS and RADIUS ...
    (microsoft.public.internet.radius)
  • Re: AD required to use IAS?
    ... >> I want to set up wireless users to authenticate via IAS to get access ... Does the IAS server have to be in a domain or can I ... > another company) whose root CA certificate is already in the Trusted Root ...
    (microsoft.public.internet.radius)