Re: Configurijng IAS on W2K3

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Got this one figured out... Had to set DefaultDomain so that passwords were
checked against the local users group.


<carlvh@xxxxxxxxx> wrote in message
news:1137591418.553020.122840@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Ok, I have a W2K3 IAS running and it is supposed to authenticate users
> against the LOCAL users on the IAS machine. However folks are NOT
> getting authenticated...
>
> EVENT log:
> Event Type: Warning
> Event Source: IAS
> Event Category: None
> Event ID: 2
> Date: 1/18/2006
> Time: 7:50:26 AM
> User: N/A
> Computer: MYRADIUS
> Description:
> User user223 was denied access.
> Fully-Qualified-User-Name = CORP\user223
> NAS-IP-Address = 192.168.53.10
> NAS-Identifier = <not present>
> Called-Station-Identifier = 5558005
> Calling-Station-Identifier = 4015558000
> Client-Friendly-Name = CISCO3640
> Client-IP-Address = 192.168.53.10
> NAS-Port-Type = Async
> NAS-Port = 2
> Proxy-Policy-Name = Use Windows authentication for all users
> Authentication-Provider = Windows
> Authentication-Server = <undetermined>
> Policy-Name = <undetermined>
> Authentication-Type = MS-CHAPv1
> EAP-Type = <undetermined>
> Reason-Code = 16
> Reason = Authentication was not successful because an unknown user
> name or incorrect password was used.
>


.



Relevant Pages

  • Re: IAS authentication against local users
    ... If the IAS server is not Joined to a domain, only local users are used to ... To restrict only local users, you may want to create a local group on your ... Is how can I> prevent folks from using a domain\userid combination to authenticate> against ... >> How can I set up IAS to authenticate against the local users vice the> domain>> users? ...
    (microsoft.public.internet.radius)
  • Re: 802.1x authentication for wireless issues w/ ISA 2004
    ... The do support WPA-EAP and the radius ... authenticate the computer and this is trying to authenticate the user and not ... If you can post perhaps 10 lines from the IAS log, ... represent my IAS server or the client laptops. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN 3005 to IAS authentication failure...
    ... Call it something like "VPN Users" or similar. ... install IAS using the Add/Remove Programs icon in Control Panel. ... we can now configure the PIX firewall as a RADIUS client. ... Any user that should be allowed to authenticate on a VPN connection will ...
    (comp.dcom.sys.cisco)
  • Re: authentication question
    ... NIS has several problems. ... their passwords in the clear. ... in this case, though as when windows clients send encrypted passwords, ... > and have everything else authenticate off that. ...
    (RedHat)
  • Re: IAS server and access points
    ... I use PEAP and passwords to authenticate wireless clients. ... I get an occassional message on my IAS server that says "A RADIUS ...
    (microsoft.public.internet.radius)