ANSWER: Re: IAS and PEAP - IIS Required? - No but certificate is Required.

This may have been self evident but not to me :-]

In order to run IAS with PEAP, the IAS server must have a certificate.
This doesn't mean certificate in IIS/SSL but rather certificate via
Certificate Manager MMC Plug-in which applies to most communications.

I believe this MMC plugin is relatively new - Windows SP3 (?) and Win2k3.
Or I'm just behind the times.

Regards,

John
"John" <john@xxxxxxxxxx> wrote in message
news:uyQFn7pgFHA.1252@xxxxxxxxxxxxxxxxxxxxxxx
> Nope.
> Wasn't even aware of the product.
>
> This is a 'basic' ias configuration.
> Strangely enough, it works fine if the ias server has iis installed but
not
> running . . . .
> Curious if with Windows 2K and worldwide web publishing service being
> installed by default (vs 2k3) works.
> I'm thinking there is a 'component' in ias which checks for the existence
> (at least) of a registry setting and/or actual file . . .
>
> "Wei Zheng [MSFT]" <weizheng@xxxxxxxxxxxxxxxxxxxx> wrote in message
> news:uTCVIfmgFHA.2904@xxxxxxxxxxxxxxxxxxxxxxx
> > Hi,
> >
> > Are you using Phone Book Service? Take a look at this article. PBS
> requires
> > IIS.
> >
>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/510a59b7-53cb-4dab-9157-a0e3f25c5197.mspx
> >
> > --
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > Use of included script samples are subject to the terms specified at
> > http://www.microsoft.com/info/cpyright.htm.
> >
> > Please do not send e-mail directly to this alias.
> > This alias is for newsgroup purposes only.
> > ====================================
> > "John" <john@xxxxxxxxxx> wrote in message
> > news:uPPfzQcgFHA.3124@xxxxxxxxxxxxxxxxxxxxxxx
> > >I guess my question is IIS required regardless if it's configured? It
> > >seems
> > > to be the case, but I'm wondering why?
> > >
> > > Environment - Windows 2k3 server (no IIS) and XP clients (latest
service
> > > packs)
> > > IAS - radius client, shared secret, eap enabled with PEAP option.
> > >
> > > Working Environment
> > > I have succesfully configured radius connection to work when ias host
> has
> > > iis installed/enabled with ssl cert (via iis).
> > > I have succesfully configured radius connection to work when ias host
> has
> > > iis installed/enabled with NO ssl cert.
> > > I have succesfully configured radius connection to work when ias host
> has
> > > iis installed, but not enabled with NO ssl cert.
> > >
> > > Non Working Environment
> > > I have NOT succesfully configured radious connection to work when ias
> host
> > > DOES NOT have iis installed.
> > >
> > > I don't want to install IIS on the radius machine (it's a dc) unless I
> > > have
> > > to.
> > >
> > > Regards,
> > >
> > > John
> > >
> > >
> > >
> > >
> >
> >
>
>


.

Relevant Pages

  • Re: IAS certificate needs reloaded on DC every day
    ... These are a few of the documents I've been trying to follow to get IAS ... Certificate request completed, certificate issued from CA and installed in ... IAS configuration can use this certificate with PEAP configuration. ... the Local Computer and the Current User on the IAS servers? ...
    (microsoft.public.internet.radius)
  • Re: IAS certificate needs reloaded on DC every day
    ... I changed the CA and added the RAS and IAS template so it could be issued. ... I've changed the IAS configuration for the wireless client Remote Access ... The problem is that you need to configure the correct certificate template ...
    (microsoft.public.internet.radius)
  • Re: EAP-TLS on PocketPC problems
    ... I imported my user certificate from my desktop into the Pocket PC to use ... When I write no domain name, the IAS receives no authentication ... When I write the username and domain name, ... no authentication attempts, so I guest the PPC is not sending them. ...
    (microsoft.public.pocketpc.wireless)
  • Re: IAS with WorkGroup machines
    ... Which is CA Cert (root CA or IAS CA) that I need to export and then import to ... RADIUS Client. ... My IAS works all fine for domain computers with AD user accounts. ... received the CA's certificate, which was stored in the certificate stores ...
    (microsoft.public.internet.radius)
  • Re: IAS Certificate Error
    ... > I have bought a VERISGN certificate and installed it on the IAS ... Can you see the server certificate in the IAS UI? ... click Edit Profile, then Authentication tab, then EAP ...
    (microsoft.public.internet.radius)
Loading