Re: Matching realm in a connection policy

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Manjunath Bharadwaj [MSFT] wrote: 
Chris

Are you sure that IAS is getting the user name in user@domain format? Or does it get it in domain\user format? I would suggest that you try a netmon/ethereal capture on your RADIUS packet and then formulate your username manipulation rule. If you attach your netmon capture someone on the newsgroup can take a look.
(try a generic matching syntax ^.*abc.*$ and see if that works?).

  Thanks, Manju


Manju

From Event Viewer, I can see the following:-

User chills@xxxxxxxxxx was denied access.
 Fully-Qualified-User-Name = ABC\user@xxxxxxxxxxxxxx
 NAS-IP-Address = 172.18.100.14
 NAS-Identifier = <not present>
 Called-Station-Identifier = <not present>
 Calling-Station-Identifier = 00-06-5B-E4-0E-0B
 Client-Friendly-Name = Someswitch
 Client-IP-Address = 172.18.100.14
 NAS-Port-Type = Ethernet
 NAS-Port = 238
 Proxy-Policy-Name = abc.domain.edu
 Authentication-Provider = Windows
 Authentication-Server = <undetermined>
 Policy-Name = <undetermined>
 Authentication-Type = EAP
 EAP-Type = <undetermined>
 Reason-Code = 8
 Reason = The specified user account does not exist.

Regards

--
Chris Hills
IT Services
North East Worcestershire College
.