Re: IAS denying all users with bad username or password

Tech-Archive recommends: Speed Up your PC by fixing your registry



=?Utf-8?B?U3R1YXJ0IFN0YWZmb3Jk?= <Stuart
Stafford@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
news:AA132EA8-05F0-4B18-AE8D-5F53346B1648@xxxxxxxxxxxxx:

We have all our Cisco network devices authenticating against a W2K IAS
server for administrative logins using PAP. This works seamlessly.

We are now tring to use IAS on W2K3 SP1 and it fails, denying access
to all users with "bad username or password" in the event log
messages.

The configuration is the same, it's the same domain as before - the
only difference is the OS version.

Anybody able to assist?


Not sure I understand the situation.

Are the domain controllers running W2K or WS03?

The IAS server -- did you upgrade the server from W2K to WS03 or is it a
clean install of WS03? Is the IAS server joined to the domain? Does it have
permissions to read user account properties in Active Directory (eg is it a
member of the RAS and IAS servers group in AD)?

--
James McIllece, Microsoft

Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.
.



Relevant Pages

  • Aironet 1200/MS Radius Help - Yet Again
    ... Your collective help thus far has made me understand more about wireless ... RADIUS/IAS Server. ... I also got a certificate from verisign to install on one of the two IAS ... there are communications between the client and access ...
    (microsoft.public.internet.radius)
  • RE: Internet Authentication Service Issues
    ... I think the problem should be caused by that the SBS 2000 server (IAS ... In SBS system there is no Trust will be available. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Redundant IAS servers
    ... > additional IAS servers as RADIUS clients to my central IAS ... > server but that is not the redundancy I'm after. ... central IAS server configuration to a file, ...
    (microsoft.public.internet.radius)
  • Re: 802.1x Wired Auth and Authentication
    ... is installed on the NPS or IAS server rejected the connection request. ... This means that you have an IAS authentication extension DLL installed. ...
    (microsoft.public.internet.radius)
  • Re: EAP-TLS Radius problem
    ... In this circumstance you have two choices to allow IAS to authenticate and ... The IAS server in Domain 1 forwards connection requests to a remote ... connection requests to another IAS server that is a Domain 2 member. ... Policy to all domain members as well as the cert of the root CA into ...
    (microsoft.public.internet.radius)